[28/Apr/2020:02:13:55 +0200] 198.108.66.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2020:02:14:08 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [28/Apr/2020:02:39:36 +0200] 83.97.20.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [28/Apr/2020:02:40:35 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 387 [28/Apr/2020:03:02:05 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [28/Apr/2020:03:48:43 +0200] 198.143.158.178 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2020:05:51:48 +0200] 85.214.242.94 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2020:06:24:36 +0200] 176.31.117.59 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 317 [28/Apr/2020:07:24:09 +0200] 185.181.165.65 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 305 [28/Apr/2020:07:34:56 +0200] 172.105.89.161 TLSv1.2 AES256-SHA "GET /data.php HTTP/1.1" 306 [28/Apr/2020:08:40:42 +0200] 83.136.38.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [28/Apr/2020:10:12:16 +0200] 209.17.96.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386 [28/Apr/2020:10:14:04 +0200] 209.17.96.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386 [28/Apr/2020:12:27:38 +0200] 209.141.41.128 TLSv1.2 AES256-SHA "GET /axis2/services/Cat/exec?cmd=whoami HTTP/1.1" 325 [28/Apr/2020:12:27:48 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [28/Apr/2020:12:39:56 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 387 [28/Apr/2020:13:02:16 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [28/Apr/2020:13:36:22 +0200] 71.6.232.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2020:14:03:52 +0200] 192.241.238.92 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2020:16:01:43 +0200] 209.17.96.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [28/Apr/2020:16:13:53 +0200] 209.17.96.202 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 395 [28/Apr/2020:17:00:04 +0200] 54.219.165.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 314 [28/Apr/2020:17:19:41 +0200] 133.167.104.120 TLSv1.2 AES256-SHA "GET /test/license.txt HTTP/1.1" 317 [28/Apr/2020:18:01:24 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.example HTTP/1.1" 395 [28/Apr/2020:18:22:54 +0200] 145.239.140.147 TLSv1.2 AES256-SHA "GET /test/license.txt HTTP/1.1" 305 [28/Apr/2020:18:24:29 +0200] 54.201.133.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.backup HTTP/1.1" 394 [28/Apr/2020:19:05:34 +0200] 196.52.43.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 374 [28/Apr/2020:20:01:27 +0200] 46.229.168.131 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [28/Apr/2020:20:42:57 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [28/Apr/2020:23:29:09 +0200] 66.249.65.92 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [28/Apr/2020:23:29:10 +0200] 66.249.65.93 TLSv1.2 AES256-SHA "GET /.well-known/assetlinks.json HTTP/1.1" 323 [29/Apr/2020:01:21:08 +0200] 223.71.167.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [29/Apr/2020:01:48:02 +0200] 209.17.96.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385