[12/Oct/2022:02:33:58 +0200] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public_html.tgz HTTP/1.1" 392 [12/Oct/2022:03:02:56 +0200] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:03:04:05 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Oct/2022:03:04:05 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [12/Oct/2022:03:04:06 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 307 [12/Oct/2022:03:04:06 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 307 [12/Oct/2022:03:04:06 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [12/Oct/2022:03:04:06 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 307 [12/Oct/2022:03:05:28 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "-" - [12/Oct/2022:04:01:34 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /CSS/Miniweb.css HTTP/1.1" 398 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/HEAD HTTP/1.1" 392 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /gT7j HTTP/1.1" 387 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1665540094 HTTP/1.1" 407 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /index.jsp HTTP/1.1" 392 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal0000.htm HTTP/1.1" 397 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /scripts/WPnBr.dll HTTP/1.1" 400 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools/default/buckets HTTP/1.1" 404 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 396 [12/Oct/2022:04:01:35 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl HTTP/1.1" 401 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /localstart.cgi HTTP/1.1" 397 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 424 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /__Additional HTTP/1.1" 395 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools HTTP/1.1" 388 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docs/cplugError.html/ HTTP/1.1" 404 [12/Oct/2022:04:01:36 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /indice.cgi HTTP/1.1" 393 [12/Oct/2022:04:01:37 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Oct/2022:04:01:37 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /home.pl HTTP/1.1" 390 [12/Oct/2022:04:01:37 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [12/Oct/2022:04:01:37 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [12/Oct/2022:04:01:38 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /default.cgi HTTP/1.1" 394 [12/Oct/2022:04:01:38 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /default.shtml HTTP/1.1" 396 [12/Oct/2022:04:01:38 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /localstart.asp HTTP/1.1" 397 [12/Oct/2022:04:01:39 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /start.aspx HTTP/1.1" 393 [12/Oct/2022:04:01:39 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.jhtml HTTP/1.1" 394 [12/Oct/2022:04:01:40 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.shtml HTTP/1.1" 394 [12/Oct/2022:04:01:40 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /default.html HTTP/1.1" 395 [12/Oct/2022:04:01:40 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main.php HTTP/1.1" 391 [12/Oct/2022:04:01:41 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main.asp HTTP/1.1" 391 [12/Oct/2022:04:01:41 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.pl HTTP/1.1" 391 [12/Oct/2022:04:01:42 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /indice.shtml HTTP/1.1" 395 [12/Oct/2022:04:01:42 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /localstart.aspx HTTP/1.1" 398 [12/Oct/2022:04:01:42 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /localstart.jhtml HTTP/1.1" 399 [12/Oct/2022:04:01:43 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.jsp HTTP/1.1" 392 [12/Oct/2022:04:01:43 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /home.asp HTTP/1.1" 391 [12/Oct/2022:04:01:44 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /base.cgi HTTP/1.1" 391 [12/Oct/2022:04:01:44 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /readme.txt HTTP/1.1" 393 [12/Oct/2022:04:01:44 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /index.cfm HTTP/1.1" 392 [12/Oct/2022:04:01:45 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Oct/2022:04:01:46 +0200] 151.236.216.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Oct/2022:05:08:17 +0200] 109.248.6.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.0" 399 [12/Oct/2022:05:23:24 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [12/Oct/2022:06:03:04 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Oct/2022:06:15:01 +0200] 192.241.221.66 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [12/Oct/2022:06:45:25 +0200] 185.180.143.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:06:52:47 +0200] 67.207.87.157 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [12/Oct/2022:06:52:48 +0200] 67.207.87.157 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Oct/2022:07:01:35 +0200] 192.241.212.204 TLSv1.2 AES256-SHA "GET /ReportServer HTTP/1.1" 307 [12/Oct/2022:07:13:47 +0200] 192.241.215.223 TLSv1.2 AES256-SHA "GET /login HTTP/1.1" 305 [12/Oct/2022:08:31:49 +0200] 194.182.170.68 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 304 [12/Oct/2022:08:32:51 +0200] 41.79.235.92 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Electron/download/windows/\\Program%20Files\\3CX%20Phone%20System\\Data\\DB\\base\\16384\\16393 HTTP/1.0" 479 [12/Oct/2022:09:08:01 +0200] 3.141.2.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [12/Oct/2022:09:08:02 +0200] 3.12.148.76 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [12/Oct/2022:09:13:47 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [12/Oct/2022:09:13:48 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Oct/2022:09:13:49 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [12/Oct/2022:09:13:49 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "HEAD /cgi-bin/blockpage.cgi HTTP/1.1" - [12/Oct/2022:09:13:49 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 293 [12/Oct/2022:09:13:49 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.DS_Store HTTP/1.1" 307 [12/Oct/2022:09:13:49 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /config.json HTTP/1.1" 311 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /idx_config/ HTTP/1.1" 310 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.json HTTP/1.1" 305 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /api/geojson?url=file:///etc/hosts HTTP/1.1" 325 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /login.action HTTP/1.1" 311 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /v2/_catalog HTTP/1.1" 310 [12/Oct/2022:09:13:50 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 353 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /frontend_dev.php/$ HTTP/1.1" 314 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /debug/default/view?panel=config HTTP/1.1" 325 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /api/search?folderIds=0 HTTP/1.1" 316 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:09:13:51 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308 [12/Oct/2022:09:22:45 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [12/Oct/2022:09:26:02 +0200] 43.153.10.221 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [12/Oct/2022:09:27:36 +0200] 157.254.225.63 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Oct/2022:09:27:38 +0200] 157.254.225.63 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [12/Oct/2022:10:02:24 +0200] 193.235.141.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306 [12/Oct/2022:10:02:58 +0200] 64.62.197.85 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:10:05:59 +0200] 207.154.193.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:10:13:07 +0200] 64.62.197.77 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [12/Oct/2022:10:14:42 +0200] 192.241.214.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:10:16:16 +0200] 64.62.197.85 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:10:40:13 +0200] 193.118.53.194 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:10:46:33 +0200] 66.240.236.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:11:16:46 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public_html.zip HTTP/1.1" 392 [12/Oct/2022:11:23:36 +0200] 134.122.64.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:11:27:41 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public_html.zip HTTP/1.1" 392 [12/Oct/2022:11:29:38 +0200] 192.241.214.193 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [12/Oct/2022:12:55:19 +0200] 162.62.191.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [12/Oct/2022:13:22:23 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [12/Oct/2022:13:54:57 +0200] 192.241.219.128 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [12/Oct/2022:13:57:21 +0200] 192.241.214.56 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [12/Oct/2022:13:58:48 +0200] 192.241.212.172 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [12/Oct/2022:15:26:08 +0200] 51.15.251.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 398 [12/Oct/2022:15:34:40 +0200] 207.46.13.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [12/Oct/2022:17:34:51 +0200] 209.141.48.253 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 349 [12/Oct/2022:17:48:00 +0200] 51.158.98.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384 [12/Oct/2022:17:52:54 +0200] 45.83.65.200 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 293 [12/Oct/2022:17:52:54 +0200] 45.83.65.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 293 [12/Oct/2022:19:05:11 +0200] 51.158.98.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [12/Oct/2022:19:54:18 +0200] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [12/Oct/2022:20:34:47 +0200] 178.128.198.241 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [12/Oct/2022:20:34:49 +0200] 178.128.198.241 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [12/Oct/2022:20:34:52 +0200] 178.128.198.241 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:20:46:55 +0200] 67.207.86.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [12/Oct/2022:20:50:17 +0200] 212.47.251.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 389 [12/Oct/2022:20:51:15 +0200] 162.142.125.221 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:20:51:16 +0200] 162.142.125.221 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [12/Oct/2022:21:25:20 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:21:30:40 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /site.tar HTTP/1.1" 402 [12/Oct/2022:22:07:21 +0200] 68.183.35.200 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [12/Oct/2022:22:07:21 +0200] 68.183.35.200 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [12/Oct/2022:22:07:22 +0200] 68.183.35.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:23:38:31 +0200] 34.211.48.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Oct/2022:23:38:52 +0200] 35.91.98.116 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Oct/2022:23:38:56 +0200] 35.91.98.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Oct/2022:23:47:50 +0200] 192.241.220.38 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [12/Oct/2022:23:50:22 +0200] 209.141.51.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [12/Oct/2022:23:50:25 +0200] 209.141.33.65 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [12/Oct/2022:23:50:34 +0200] 205.185.116.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Oct/2022:23:50:37 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Oct/2022:23:51:13 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:23:51:15 +0200] 209.141.35.128 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 308 [12/Oct/2022:23:51:46 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [12/Oct/2022:23:51:48 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [12/Oct/2022:23:51:50 +0200] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [12/Oct/2022:23:53:04 +0200] 36.26.68.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Oct/2022:23:53:07 +0200] 36.26.68.192 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [12/Oct/2022:23:53:47 +0200] 192.241.212.71 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [13/Oct/2022:00:12:35 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /site.tar.gz HTTP/1.1" 397 [13/Oct/2022:00:55:26 +0200] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/Oct/2022:00:58:42 +0200] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Oct/2022:01:32:03 +0200] 20.58.43.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /webclient/ HTTP/1.1" 393 [13/Oct/2022:01:44:55 +0200] 154.89.5.115 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [13/Oct/2022:01:51:36 +0200] 162.62.191.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500