[01/Jul/2022:02:03:20 +0200] 34.216.76.113 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [01/Jul/2022:02:03:53 +0200] 34.219.217.77 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [01/Jul/2022:02:31:30 +0200] 143.110.253.172 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jul/2022:02:31:33 +0200] 143.110.253.172 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Jul/2022:03:59:38 +0200] 192.241.220.151 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [01/Jul/2022:04:30:08 +0200] 128.14.136.78 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [01/Jul/2022:04:33:00 +0200] 1.61.183.39 - - "-" - [01/Jul/2022:04:33:04 +0200] 1.61.183.39 - - "-" - [01/Jul/2022:04:35:28 +0200] 192.241.222.157 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jul/2022:04:35:43 +0200] 192.241.214.25 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [01/Jul/2022:05:08:24 +0200] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:06:03:53 +0200] 34.76.158.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:06:45:29 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [01/Jul/2022:06:53:52 +0200] 92.255.85.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Jul/2022:07:48:28 +0200] 82.205.31.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi?action=getinfo HTTP/1.1" 401 [01/Jul/2022:09:56:21 +0200] 185.180.143.71 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /owa/ HTTP/1.1" 304 [01/Jul/2022:10:53:39 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jul/2022:10:59:54 +0200] 205.210.31.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [01/Jul/2022:11:44:27 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [01/Jul/2022:12:16:02 +0200] 31.222.238.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /contact/ HTTP/1.1" 308 [01/Jul/2022:12:47:44 +0200] 103.203.57.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jul/2022:13:23:57 +0200] 27.124.32.169 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Jul/2022:13:23:58 +0200] 27.124.32.169 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Jul/2022:13:24:01 +0200] 27.124.32.169 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [01/Jul/2022:13:24:03 +0200] 27.124.32.169 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 309 [01/Jul/2022:13:33:45 +0200] 192.241.214.157 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [01/Jul/2022:13:34:56 +0200] 192.241.221.43 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [01/Jul/2022:13:35:19 +0200] 192.241.221.222 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [01/Jul/2022:14:06:55 +0200] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [01/Jul/2022:14:06:56 +0200] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [01/Jul/2022:14:07:04 +0200] 157.55.39.27 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [01/Jul/2022:14:38:20 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [01/Jul/2022:15:15:53 +0200] 93.159.230.83 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [01/Jul/2022:15:16:21 +0200] 139.162.211.31 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:15:44:48 +0200] 109.74.206.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:15:50:29 +0200] 167.94.146.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Jul/2022:15:50:29 +0200] 167.94.146.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jul/2022:15:50:29 +0200] 167.94.146.57 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [01/Jul/2022:16:03:43 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [01/Jul/2022:17:33:36 +0200] 209.97.153.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:17:33:38 +0200] 209.97.153.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [01/Jul/2022:17:33:40 +0200] 209.97.153.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [01/Jul/2022:17:45:09 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [01/Jul/2022:18:54:25 +0200] 54.215.119.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" - [01/Jul/2022:19:19:46 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [01/Jul/2022:21:02:03 +0200] 20.213.236.102 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/luci HTTP/1.1" 395 [01/Jul/2022:22:05:39 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [01/Jul/2022:22:10:55 +0200] 178.79.144.202 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Jul/2022:22:29:41 +0200] 103.164.191.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /mgmt/tm/util/bash HTTP/1.1" 400 [01/Jul/2022:23:02:21 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [02/Jul/2022:01:13:44 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Jul/2022:01:24:35 +0200] 35.192.121.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295