[27/Jan/2021:01:24:23 +0100] 193.34.131.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:02:15:22 +0100] 167.248.133.53 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Jan/2021:02:15:23 +0100] 167.248.133.53 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:02:21:42 +0100] 54.36.99.6 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [27/Jan/2021:03:57:24 +0100] 3.14.67.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [27/Jan/2021:03:57:46 +0100] 3.14.67.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 295 [27/Jan/2021:04:18:39 +0100] 124.65.95.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Jan/2021:04:49:06 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [27/Jan/2021:05:12:07 +0100] 45.155.205.86 - - "-" - [27/Jan/2021:06:05:43 +0100] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Jan/2021:06:11:48 +0100] 65.49.20.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Jan/2021:06:50:00 +0100] 97.74.229.113 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin//config.php HTTP/1.1" 400 [27/Jan/2021:07:07:50 +0100] 192.241.216.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:07:16:31 +0100] 162.142.125.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Jan/2021:07:16:32 +0100] 162.142.125.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:07:32:12 +0100] 192.241.199.180 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Jan/2021:08:46:08 +0100] 13.84.49.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Jan/2021:10:02:02 +0100] 45.155.205.86 - - "-" - [27/Jan/2021:10:23:18 +0100] 209.17.96.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [27/Jan/2021:10:35:50 +0100] 66.228.50.65 TLSv1.2 AES256-SHA "-" - [27/Jan/2021:10:45:59 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314 [27/Jan/2021:10:46:00 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Jan/2021:10:46:02 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Jan/2021:10:46:03 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [27/Jan/2021:10:46:05 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Jan/2021:10:46:07 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [27/Jan/2021:10:46:07 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332 [27/Jan/2021:10:46:07 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [27/Jan/2021:10:46:11 +0100] 45.155.205.108 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [27/Jan/2021:11:15:59 +0100] 209.17.96.250 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384 [27/Jan/2021:13:16:24 +0100] 176.58.124.134 TLSv1.2 AES256-SHA "GET /index.html HTTP/1.1" 379 [27/Jan/2021:14:23:09 +0100] 209.17.97.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [27/Jan/2021:16:58:11 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 330 [27/Jan/2021:16:58:48 +0100] 209.17.96.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [27/Jan/2021:18:02:52 +0100] 128.14.209.242 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:19:25:57 +0100] 80.94.93.172 TLSv1.2 DHE-RSA-AES256-SHA "GET / HTTP/1.1" 383 [27/Jan/2021:19:53:18 +0100] 192.241.224.181 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [27/Jan/2021:22:20:31 +0100] 8.208.91.112 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2021:22:21:17 +0100] 5.62.56.254 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Jan/2021:22:21:21 +0100] 5.62.56.254 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [27/Jan/2021:23:32:34 +0100] 193.118.53.194 TLSv1.2 AES256-SHA "GET /remote/login HTTP/1.1" 309