[28/Oct/2022:02:13:07 +0200] 138.68.68.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [28/Oct/2022:03:18:20 +0200] 205.210.31.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [28/Oct/2022:03:41:38 +0200] 107.189.1.81 TLSv1.2 AES256-SHA "POST /redfish/v1/SessionService/Sessions HTTP/1.1" 413 [28/Oct/2022:04:18:03 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [28/Oct/2022:04:24:36 +0200] 128.14.209.162 TLSv1.2 AES256-SHA "GET /admin/ HTTP/1.1" 305 [28/Oct/2022:04:30:47 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/db.php.bak HTTP/1.1" 392 [28/Oct/2022:04:51:09 +0200] 192.241.218.5 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:06:02:07 +0200] 192.241.212.170 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [28/Oct/2022:06:57:31 +0200] 64.62.197.159 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:07:07:00 +0200] 64.62.197.160 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [28/Oct/2022:07:08:47 +0200] 87.236.176.160 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:07:11:04 +0200] 64.62.197.161 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:07:49:13 +0200] 194.55.186.126 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [28/Oct/2022:08:03:25 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [28/Oct/2022:08:24:13 +0200] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/db.php.bck HTTP/1.1" 401 [28/Oct/2022:08:25:52 +0200] 198.235.24.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [28/Oct/2022:09:33:18 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:10:08:21 +0200] 161.35.64.8 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [28/Oct/2022:10:08:21 +0200] 161.35.64.8 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [28/Oct/2022:10:08:22 +0200] 161.35.64.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:10:11:36 +0200] 191.101.229.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [28/Oct/2022:11:27:21 +0200] 139.162.207.84 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:11:57:45 +0200] 192.241.217.183 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [28/Oct/2022:12:28:39 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [28/Oct/2022:12:35:00 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/database.bak HTTP/1.1" 394 [28/Oct/2022:12:43:42 +0200] 185.180.143.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:12:47:36 +0200] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/database.bak HTTP/1.1" 403 [28/Oct/2022:13:26:16 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/database.bak HTTP/1.1" 411 [28/Oct/2022:13:41:18 +0200] 193.235.141.170 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [28/Oct/2022:13:53:33 +0200] 34.141.133.126 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.0" 383 [28/Oct/2022:13:58:17 +0200] 205.210.31.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [28/Oct/2022:13:58:48 +0200] 205.210.31.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [28/Oct/2022:14:52:46 +0200] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/database.php.bak HTTP/1.1" 415 [28/Oct/2022:16:01:31 +0200] 183.136.225.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [28/Oct/2022:16:30:34 +0200] 154.89.5.83 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [28/Oct/2022:16:45:30 +0200] 205.210.31.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [28/Oct/2022:17:03:50 +0200] 192.241.219.120 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [28/Oct/2022:17:07:14 +0200] 192.241.212.172 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [28/Oct/2022:17:09:28 +0200] 192.241.219.128 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [28/Oct/2022:17:14:21 +0200] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/database.php.bck HTTP/1.1" 407 [28/Oct/2022:18:23:29 +0200] 101.35.239.216 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:18:35:53 +0200] 192.241.216.137 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [28/Oct/2022:19:21:36 +0200] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/connect.php~ HTTP/1.1" 403 [28/Oct/2022:19:43:47 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [28/Oct/2022:20:18:58 +0200] 79.120.76.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/index HTTP/1.1" 314 [28/Oct/2022:20:30:50 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [28/Oct/2022:20:31:39 +0200] 45.155.126.4 TLSv1.2 AES256-SHA "-" - [28/Oct/2022:20:31:47 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [28/Oct/2022:21:17:52 +0200] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/connect.bck HTTP/1.1" 402 [28/Oct/2022:21:32:19 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/connect.bck HTTP/1.1" 393 [28/Oct/2022:21:33:38 +0200] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/connect.bck HTTP/1.1" 410 [28/Oct/2022:22:15:09 +0200] 43.128.232.139 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:22:15:36 +0200] 43.128.232.139 - - "-" - [28/Oct/2022:22:58:12 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:22:59:39 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [28/Oct/2022:23:01:53 +0200] 106.75.227.154 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [28/Oct/2022:23:02:01 +0200] 106.75.227.154 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [28/Oct/2022:23:33:29 +0200] 1.183.249.253 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388 [28/Oct/2022:23:33:30 +0200] 1.183.249.253 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:23:44:45 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Oct/2022:23:47:04 +0200] 152.89.198.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [29/Oct/2022:01:13:59 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/connect.bak HTTP/1.1" 393 [29/Oct/2022:01:33:45 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301