[04/Sep/2022:02:16:00 +0200] 54.191.151.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Sep/2022:02:16:20 +0200] 54.191.151.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Sep/2022:02:26:21 +0200] 34.212.137.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Sep/2022:03:17:45 +0200] 43.131.66.209 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [04/Sep/2022:03:18:15 +0200] 205.185.121.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2022:03:18:18 +0200] 209.141.55.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:03:18:19 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [04/Sep/2022:03:18:20 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [04/Sep/2022:03:18:31 +0200] 205.185.121.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [04/Sep/2022:03:18:34 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [04/Sep/2022:04:55:22 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 395 [04/Sep/2022:04:55:23 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [04/Sep/2022:05:14:53 +0200] 192.241.197.80 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [04/Sep/2022:06:40:30 +0200] 143.92.35.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /v31217.html HTTP/1.1" 308 [04/Sep/2022:07:06:15 +0200] 185.180.143.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 297 [04/Sep/2022:07:07:42 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [04/Sep/2022:07:18:19 +0200] 198.199.102.129 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2022:10:59:18 +0200] 45.95.147.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Electron/download/windows/\\Windows\\win.ini HTTP/1.0" 423 [04/Sep/2022:11:09:38 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [04/Sep/2022:11:36:54 +0200] 207.46.13.51 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:11:54:37 +0200] 192.241.194.100 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [04/Sep/2022:11:57:08 +0200] 192.241.193.177 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [04/Sep/2022:11:57:24 +0200] 192.241.205.54 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [04/Sep/2022:14:58:52 +0200] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [04/Sep/2022:15:51:05 +0200] 143.92.32.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [04/Sep/2022:16:44:55 +0200] 51.142.93.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-commentin.php HTTP/1.1" 311 [04/Sep/2022:17:15:50 +0200] 64.62.197.17 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [04/Sep/2022:17:23:18 +0200] 85.114.101.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [04/Sep/2022:17:25:04 +0200] 64.62.197.17 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [04/Sep/2022:17:29:11 +0200] 64.62.197.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2022:17:43:48 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [04/Sep/2022:17:47:20 +0200] 178.32.197.89 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Sep/2022:18:00:09 +0200] 35.212.129.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [04/Sep/2022:18:33:19 +0200] 188.165.87.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [04/Sep/2022:18:49:02 +0200] 188.165.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [04/Sep/2022:19:24:47 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2022:19:27:22 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [04/Sep/2022:19:37:17 +0200] 51.254.49.100 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Sep/2022:19:51:38 +0200] 64.225.1.218 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2022:19:51:50 +0200] 185.220.100.247 - - "-" - [04/Sep/2022:20:04:26 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [04/Sep/2022:20:24:30 +0200] 198.235.24.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386 [04/Sep/2022:21:22:46 +0200] 20.211.47.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [04/Sep/2022:21:25:25 +0200] 159.89.175.55 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [04/Sep/2022:21:43:36 +0200] 65.108.51.205 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-includes/css/wp-config.php HTTP/1.1" 320 [04/Sep/2022:22:08:53 +0200] 205.210.31.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [04/Sep/2022:22:13:46 +0200] 65.108.51.205 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-includes/css/wp-config.php HTTP/1.1" 327 [04/Sep/2022:22:17:50 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [04/Sep/2022:23:19:40 +0200] 18.236.234.142 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:23:20:28 +0200] 44.242.149.39 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [04/Sep/2022:23:21:33 +0200] 52.34.243.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:23:22:12 +0200] 44.242.149.39 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [04/Sep/2022:23:24:31 +0200] 35.91.39.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:23:24:49 +0200] 35.91.39.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Sep/2022:23:32:38 +0200] 65.108.51.205 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-includes/css/wp-config.php HTTP/1.1" 315 [05/Sep/2022:00:23:52 +0200] 167.248.133.63 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [05/Sep/2022:00:23:52 +0200] 167.248.133.63 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [05/Sep/2022:00:23:53 +0200] 167.248.133.63 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [05/Sep/2022:00:48:02 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [05/Sep/2022:01:11:22 +0200] 43.132.196.160 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301