[11/Apr/2021:04:47:41 +0200] 23.129.64.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [11/Apr/2021:04:53:01 +0200] 195.37.190.77 TLSv1.2 AES256-SHA "GET /dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 441 [11/Apr/2021:04:53:02 +0200] 195.37.190.77 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 392 [11/Apr/2021:05:07:57 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [11/Apr/2021:06:17:41 +0200] 192.241.209.67 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [11/Apr/2021:07:45:58 +0200] 65.49.20.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [11/Apr/2021:08:58:39 +0200] 20.81.218.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [11/Apr/2021:08:58:40 +0200] 20.81.218.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [11/Apr/2021:09:41:19 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [11/Apr/2021:09:41:19 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314 [11/Apr/2021:09:41:20 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [11/Apr/2021:09:41:21 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [11/Apr/2021:09:41:22 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [11/Apr/2021:09:41:24 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332 [11/Apr/2021:09:41:28 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [11/Apr/2021:09:41:31 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [11/Apr/2021:09:41:31 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [11/Apr/2021:09:41:32 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [11/Apr/2021:10:15:54 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [11/Apr/2021:12:05:07 +0200] 192.241.201.139 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [11/Apr/2021:12:43:51 +0200] 176.58.101.217 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304 [11/Apr/2021:13:44:37 +0200] 92.118.160.17 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [11/Apr/2021:13:54:57 +0200] 74.120.14.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [11/Apr/2021:13:54:57 +0200] 74.120.14.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [11/Apr/2021:18:01:18 +0200] 66.249.66.218 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [11/Apr/2021:18:01:19 +0200] 66.249.66.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [11/Apr/2021:18:19:15 +0200] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304 [11/Apr/2021:21:08:42 +0200] 80.82.77.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [11/Apr/2021:23:05:59 +0200] 34.216.204.99 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [11/Apr/2021:23:06:48 +0200] 54.187.54.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [11/Apr/2021:23:07:15 +0200] 54.245.43.110 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [11/Apr/2021:23:07:30 +0200] 54.245.52.126 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [11/Apr/2021:23:09:40 +0200] 52.88.238.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:18:10 +0200] 34.222.116.254 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:19:01 +0200] 44.242.173.154 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Apr/2021:00:19:22 +0200] 54.202.203.254 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Apr/2021:00:19:31 +0200] 54.202.203.254 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:23:13 +0200] 52.13.76.173 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:27:32 +0200] 89.248.168.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Apr/2021:00:34:57 +0200] 52.25.90.145 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:35:16 +0200] 34.76.80.167 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Apr/2021:00:56:16 +0200] 54.200.19.202 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:00:56:53 +0200] 44.242.145.240 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Apr/2021:01:10:33 +0200] 34.217.71.232 TLSv1.2 AES256-SHA "-" - [12/Apr/2021:01:10:33 +0200] 34.217.71.232 TLSv1.2 AES256-SHA "-" - [12/Apr/2021:01:15:58 +0200] 52.13.76.173 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Apr/2021:01:20:11 +0200] 18.236.97.188 TLSv1.2 AES256-SHA "-" - [12/Apr/2021:01:20:11 +0200] 18.236.97.188 TLSv1.2 AES256-SHA "-" - [12/Apr/2021:01:34:29 +0200] 27.115.124.37 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [12/Apr/2021:01:34:30 +0200] 27.115.124.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 392 [12/Apr/2021:01:34:32 +0200] 27.115.124.100 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Apr/2021:01:34:34 +0200] 27.115.124.37 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [12/Apr/2021:01:34:35 +0200] 27.115.124.75 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [12/Apr/2021:01:34:35 +0200] 27.115.124.10 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 309 [12/Apr/2021:01:34:48 +0200] 27.115.124.36 TLSv1.2 AES256-SHA "-" -