[14/Jun/2022:02:05:49 +0200] 185.180.143.80 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [14/Jun/2022:02:20:57 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [14/Jun/2022:02:26:28 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:02:27:00 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jun/2022:02:27:21 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Jun/2022:03:48:18 +0200] 192.241.222.223 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [14/Jun/2022:04:17:18 +0200] 198.199.112.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jun/2022:04:41:19 +0200] 66.240.236.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jun/2022:05:03:18 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [14/Jun/2022:05:05:09 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1655175909 HTTP/1.1" 407 [14/Jun/2022:05:05:10 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /evox/about HTTP/1.1" 393 [14/Jun/2022:05:05:11 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [14/Jun/2022:05:05:11 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [14/Jun/2022:05:05:11 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:05:05:12 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [14/Jun/2022:05:05:12 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388 [14/Jun/2022:05:05:13 +0200] 50.31.21.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:06:36:43 +0200] 34.78.6.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jun/2022:09:01:02 +0200] 157.245.193.126 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [14/Jun/2022:09:02:23 +0200] 205.210.31.139 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [14/Jun/2022:11:07:21 +0200] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [14/Jun/2022:11:07:22 +0200] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [14/Jun/2022:11:07:29 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [14/Jun/2022:12:12:52 +0200] 185.189.182.234 TLSv1.2 AES256-SHA "GET /N1yd HTTP/1.1" 379 [14/Jun/2022:13:06:49 +0200] 192.241.223.66 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [14/Jun/2022:13:07:23 +0200] 192.241.220.215 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [14/Jun/2022:13:07:30 +0200] 192.241.221.20 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [14/Jun/2022:13:46:09 +0200] 185.185.217.75 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Jun/2022:13:46:09 +0200] 185.185.217.75 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Jun/2022:14:28:32 +0200] 138.201.62.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [14/Jun/2022:14:39:50 +0200] 85.143.217.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/welcome HTTP/1.1" 313 [14/Jun/2022:14:49:19 +0200] 164.92.119.129 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:15:04:26 +0200] 205.210.31.145 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [14/Jun/2022:15:23:13 +0200] 167.94.138.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jun/2022:15:23:14 +0200] 167.94.138.118 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [14/Jun/2022:16:30:47 +0200] 64.62.197.152 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Jun/2022:17:24:37 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [14/Jun/2022:17:24:38 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [14/Jun/2022:17:24:39 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [14/Jun/2022:17:24:39 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [14/Jun/2022:17:24:40 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [14/Jun/2022:17:24:41 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [14/Jun/2022:17:24:42 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [14/Jun/2022:17:24:43 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [14/Jun/2022:18:31:37 +0200] 193.118.53.202 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [14/Jun/2022:19:04:44 +0200] 180.149.125.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jun/2022:19:20:18 +0200] 103.203.57.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Jun/2022:19:38:43 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [14/Jun/2022:20:25:14 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [14/Jun/2022:21:54:55 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [14/Jun/2022:22:35:50 +0200] 164.52.24.190 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:23:22:41 +0200] 20.213.51.37 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jun/2022:23:26:05 +0200] 34.221.223.157 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [14/Jun/2022:23:26:22 +0200] 52.35.67.158 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [14/Jun/2022:23:26:24 +0200] 52.35.67.158 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [15/Jun/2022:00:06:02 +0200] 78.157.40.215 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [15/Jun/2022:00:10:38 +0200] 198.235.24.136 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [15/Jun/2022:01:14:53 +0200] 208.100.26.249 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [15/Jun/2022:01:44:22 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301