[27/Feb/2020:02:03:33 +0100] 120.77.34.89 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 305 [27/Feb/2020:03:54:52 +0100] 18.144.15.189 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 387 [27/Feb/2020:04:19:15 +0100] 18.144.15.189 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Feb/2020:04:37:57 +0100] 216.218.206.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Feb/2020:04:43:33 +0100] 18.144.15.189 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.test HTTP/1.1" 392 [27/Feb/2020:05:07:46 +0100] 18.144.15.189 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.example HTTP/1.1" 395 [27/Feb/2020:05:15:41 +0100] 206.189.93.218 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 317 [27/Feb/2020:05:31:57 +0100] 18.144.15.189 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.backup HTTP/1.1" 394 [27/Feb/2020:05:40:32 +0100] 54.215.223.17 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=AAABAAABAAAAAAAAAWE-NjJjaGFyYWN0ZXJsYWJlbC1tYWtlcy1iYXNlNjR1cmwtZGlzdGluY3QtZnJvbS1zdGFuZGFyZC1iYXNlNjQHZXhhbXBsZQNjb20AAAEAAQ HTTP/1.1" 408 [27/Feb/2020:10:51:20 +0100] 5.101.0.209 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 388 [27/Feb/2020:10:55:15 +0100] 5.101.0.209 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Feb/2020:12:52:16 +0100] 45.56.78.64 TLSv1.2 AES256-SHA "POST /x HTTP/1.1" 384 [27/Feb/2020:15:47:49 +0100] 66.249.64.78 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [27/Feb/2020:15:47:50 +0100] 66.249.64.78 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Feb/2020:16:21:27 +0100] 172.105.89.161 TLSv1.2 AES256-SHA "-" - [27/Feb/2020:17:22:30 +0100] 162.243.132.88 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Feb/2020:20:41:02 +0100] 5.101.0.209 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Feb/2020:21:18:12 +0100] 128.14.209.226 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [27/Feb/2020:21:36:49 +0100] 193.57.40.38 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 388 [27/Feb/2020:21:46:37 +0100] 192.175.111.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:46:37 +0100] 64.15.129.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:46:38 +0100] 64.15.129.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:46:39 +0100] 192.175.111.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:46:44 +0100] 64.15.129.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:07 +0100] 192.175.111.229 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:07 +0100] 64.15.129.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:08 +0100] 64.15.129.106 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:08 +0100] 192.175.111.241 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:12 +0100] 192.175.111.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 391 [27/Feb/2020:21:47:13 +0100] 192.175.111.229 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Feb/2020:21:47:20 +0100] 192.175.111.243 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [27/Feb/2020:21:47:26 +0100] 64.15.129.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [27/Feb/2020:21:47:27 +0100] 64.15.129.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [27/Feb/2020:21:47:53 +0100] 72.55.136.156 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 389 [27/Feb/2020:21:48:07 +0100] 192.175.111.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 389 [27/Feb/2020:21:56:54 +0100] 193.57.40.38 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Feb/2020:22:25:09 +0100] 198.143.155.138 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301