[27/Aug/2022:02:01:09 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:02:41:15 +0200] 45.144.29.225 TLSv1.2 AES256-SHA "GET /.git/HEAD HTTP/1.1" 302 [27/Aug/2022:03:34:18 +0200] 198.235.24.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [27/Aug/2022:04:05:36 +0200] 178.73.215.171 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388 [27/Aug/2022:04:05:57 +0200] 178.73.215.171 - - "-" - [27/Aug/2022:04:05:58 +0200] 178.73.215.171 - - "-" - [27/Aug/2022:04:06:04 +0200] 178.73.215.171 - - "-" - [27/Aug/2022:04:06:06 +0200] 178.73.215.171 - - "-" - [27/Aug/2022:04:10:11 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Aug/2022:05:01:06 +0200] 192.241.237.107 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Aug/2022:05:49:51 +0200] 192.241.221.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:06:45:12 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:09:59:23 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:11:50:28 +0200] 192.241.235.243 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [27/Aug/2022:11:52:23 +0200] 192.241.210.45 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [27/Aug/2022:11:52:42 +0200] 192.241.236.161 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Aug/2022:12:17:00 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:13:12:12 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Aug/2022:13:38:41 +0200] 65.49.20.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Aug/2022:13:45:51 +0200] 65.49.20.69 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [27/Aug/2022:13:49:02 +0200] 65.49.20.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:14:04:55 +0200] 209.222.252.91 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Aug/2022:14:09:08 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Aug/2022:14:21:09 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:14:33:22 +0200] 154.89.5.119 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Aug/2022:14:56:09 +0200] 13.87.75.167 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [27/Aug/2022:14:56:10 +0200] 13.87.75.167 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Aug/2022:14:58:52 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Aug/2022:14:59:01 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /showLogin.cc HTTP/1.1" 311 [27/Aug/2022:18:29:05 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Aug/2022:18:29:07 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Aug/2022:18:29:08 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Aug/2022:18:29:08 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Aug/2022:18:29:11 +0200] 89.248.167.131 TLSv1.2 AES256-SHA "quit" 379 [27/Aug/2022:18:29:11 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [27/Aug/2022:18:29:12 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [27/Aug/2022:18:29:12 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [27/Aug/2022:18:29:12 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [27/Aug/2022:18:29:13 +0200] 89.248.167.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Aug/2022:18:38:40 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Aug/2022:18:59:06 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:20:01:15 +0200] 200.74.197.59 - - "-" - [27/Aug/2022:20:01:40 +0200] 93.159.230.88 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:20:04:42 +0200] 93.159.230.83 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Aug/2022:21:01:43 +0200] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:21:04:13 +0200] 93.159.230.88 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Aug/2022:21:34:20 +0200] 198.244.133.153 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:21:43:35 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Aug/2022:21:45:45 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Aug/2022:22:01:48 +0200] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Aug/2022:22:04:59 +0200] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Aug/2022:22:11:03 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Aug/2022:23:04:32 +0200] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Aug/2022:23:15:58 +0200] 52.38.62.227 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Aug/2022:23:16:31 +0200] 52.32.107.93 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [27/Aug/2022:23:17:30 +0200] 52.25.5.224 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Aug/2022:23:17:52 +0200] 35.167.18.92 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [27/Aug/2022:23:17:58 +0200] 54.244.56.13 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Aug/2022:23:18:02 +0200] 35.167.18.92 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Aug/2022:23:45:07 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Aug/2022:00:04:30 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [28/Aug/2022:00:07:32 +0200] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [28/Aug/2022:00:55:38 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 394 [28/Aug/2022:00:55:38 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384 [28/Aug/2022:01:04:33 +0200] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [28/Aug/2022:01:17:35 +0200] 34.76.96.55 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [28/Aug/2022:01:21:58 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Aug/2022:01:48:36 +0200] 35.92.189.40 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [28/Aug/2022:01:49:02 +0200] 35.92.185.172 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313