[01/Sep/2022:02:16:53 +0200] 54.69.239.229 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [01/Sep/2022:02:17:33 +0200] 35.164.86.204 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [01/Sep/2022:02:24:09 +0200] 138.197.181.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:03:21:28 +0200] 13.57.201.112 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 402 [01/Sep/2022:03:26:56 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Sep/2022:03:29:00 +0200] 163.172.180.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [01/Sep/2022:03:37:28 +0200] 18.144.26.34 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" - [01/Sep/2022:05:05:38 +0200] 192.241.212.196 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [01/Sep/2022:05:06:34 +0200] 159.89.187.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Sep/2022:05:06:35 +0200] 159.89.187.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [01/Sep/2022:05:06:38 +0200] 159.89.187.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [01/Sep/2022:05:13:56 +0200] 195.37.190.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 299 [01/Sep/2022:05:52:45 +0200] 51.158.98.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [01/Sep/2022:05:54:58 +0200] 192.241.206.209 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:06:14:31 +0200] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 397 [01/Sep/2022:06:17:27 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Sep/2022:06:46:02 +0200] 192.241.208.53 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [01/Sep/2022:06:54:15 +0200] 74.82.47.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Sep/2022:07:03:04 +0200] 74.82.47.3 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Sep/2022:07:07:20 +0200] 74.82.47.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:07:43:26 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [01/Sep/2022:08:01:50 +0200] 167.248.133.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Sep/2022:08:01:51 +0200] 167.248.133.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:08:01:51 +0200] 167.248.133.118 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [01/Sep/2022:09:37:09 +0200] 152.32.198.195 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Sep/2022:09:56:48 +0200] 163.172.148.199 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [01/Sep/2022:10:52:00 +0200] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [01/Sep/2022:10:59:41 +0200] 185.189.182.234 TLSv1.2 AES256-SHA "GET /9gwE HTTP/1.1" 379 [01/Sep/2022:11:14:05 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Sep/2022:11:52:54 +0200] 192.241.197.175 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [01/Sep/2022:11:55:14 +0200] 192.241.206.46 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [01/Sep/2022:11:55:35 +0200] 192.241.196.63 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [01/Sep/2022:13:02:46 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Sep/2022:13:16:49 +0200] 106.75.37.234 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:13:37:59 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [01/Sep/2022:13:38:21 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:14:12:24 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Sep/2022:14:24:29 +0200] 23.154.177.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:14:33:46 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:17:12:10 +0200] 124.156.219.253 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:18:25:21 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Sep/2022:18:25:22 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:18:25:23 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [01/Sep/2022:18:33:29 +0200] 128.14.209.250 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 297 [01/Sep/2022:19:39:13 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [01/Sep/2022:20:10:18 +0200] 172.105.85.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:20:51:04 +0200] 162.62.191.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [01/Sep/2022:20:51:28 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Sep/2022:20:51:29 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [01/Sep/2022:20:51:31 +0200] 205.210.31.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [01/Sep/2022:20:51:54 +0200] 209.141.35.128 TLSv1.2 AES256-SHA "-" - [01/Sep/2022:23:24:55 +0200] 35.165.182.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [01/Sep/2022:23:26:08 +0200] 34.221.139.89 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [02/Sep/2022:00:23:56 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.credentials.php HTTP/1.1" 304 [02/Sep/2022:00:23:57 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.credentials.php HTTP/1.1" 304 [02/Sep/2022:00:25:56 +0200] 34.171.243.90 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [02/Sep/2022:00:54:53 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Sep/2022:01:17:39 +0200] 51.15.251.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 381 [02/Sep/2022:01:35:39 +0200] 35.89.62.126 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [02/Sep/2022:01:36:06 +0200] 54.185.220.102 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [02/Sep/2022:01:36:09 +0200] 54.185.220.102 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306