[09/Jun/2021:02:02:28 +0200] 52.251.59.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[09/Jun/2021:02:02:33 +0200] 52.251.59.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[09/Jun/2021:02:27:43 +0200] 34.222.106.171 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[09/Jun/2021:02:28:47 +0200] 52.43.175.181 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[09/Jun/2021:02:28:50 +0200] 52.43.175.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[09/Jun/2021:04:19:53 +0200] 162.62.123.46 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:04:26:02 +0200] 89.248.165.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 341
[09/Jun/2021:04:35:55 +0200] 34.96.130.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377
[09/Jun/2021:04:51:10 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[09/Jun/2021:05:14:17 +0200] 77.83.36.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[09/Jun/2021:05:17:42 +0200] 157.245.66.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /images/Nxrs4tAtO/HCw4_2FQ7o69dmQEodXU/_2Fua56jJgWqt8tN1Tx/0M9Tus5G1nAOe_2BJflcrm/2nz3T7AxG_2Fd/YnZ7Cn6A/zq1HlKYZhiFyQLgflmvIbb1/yQL2MK3UaK/00uQsiMnxrcs4C9gN/xpGuwRLuq6tH/7YwEr.avi HTTP/1.1" 448
[09/Jun/2021:06:06:53 +0200] 184.105.247.196 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:06:37:12 +0200] 45.83.67.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293
[09/Jun/2021:10:34:42 +0200] 192.241.199.102 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[09/Jun/2021:10:45:44 +0200] 143.198.62.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /tot43/DESKTOP-JGLLJLF_W10016299.1CF3DD28B304BBF734B33FBDF1762BBE/83/ HTTP/1.1" 356
[09/Jun/2021:10:52:39 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[09/Jun/2021:10:52:40 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[09/Jun/2021:10:52:41 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[09/Jun/2021:10:52:42 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[09/Jun/2021:10:52:45 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[09/Jun/2021:10:52:47 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314
[09/Jun/2021:10:52:48 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[09/Jun/2021:10:52:49 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[09/Jun/2021:10:52:50 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[09/Jun/2021:10:52:54 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[09/Jun/2021:10:52:57 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332
[09/Jun/2021:11:00:40 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" -
[09/Jun/2021:11:04:40 +0200] 198.23.172.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /GponForm/diag_Form?style/ HTTP/1.1" 406
[09/Jun/2021:11:53:18 +0200] 128.1.248.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[09/Jun/2021:12:15:24 +0200] 172.105.254.10 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304
[09/Jun/2021:15:38:18 +0200] 162.247.74.27 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" -
[09/Jun/2021:16:50:10 +0200] 128.199.31.121 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 292
[09/Jun/2021:17:07:10 +0200] 183.136.225.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[09/Jun/2021:17:07:47 +0200] 183.136.225.14 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[09/Jun/2021:17:08:11 +0200] 183.136.225.14 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[09/Jun/2021:18:29:26 +0200] 192.241.207.249 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[09/Jun/2021:18:46:37 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[09/Jun/2021:18:46:44 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES128-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:45 +0200] 54.159.211.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:45 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:45 +0200] 54.159.211.54 TLSv1.2 AES128-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:46 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-SHA "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:47 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:48 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[09/Jun/2021:18:46:48 +0200] 54.159.211.54 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[09/Jun/2021:19:24:38 +0200] 52.255.163.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[09/Jun/2021:19:24:39 +0200] 52.255.163.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[09/Jun/2021:20:18:00 +0200] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308
[09/Jun/2021:21:10:40 +0200] 128.1.248.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[09/Jun/2021:21:37:21 +0200] 80.82.65.65 TLSv1.2 DHE-RSA-AES256-SHA "GET /level/15/exec/-/sh/run/CR HTTP/1.1" 408
[10/Jun/2021:00:21:26 +0200] 192.241.212.215 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[10/Jun/2021:00:49:09 +0200] 39.96.140.204 TLSv1.2 AES256-SHA "GET /dns-query?dns=KhUBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 340
[10/Jun/2021:00:49:15 +0200] 39.96.140.204 TLSv1.2 AES256-SHA "GET /dns-query?dns=KhUBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 335
[10/Jun/2021:00:49:16 +0200] 39.96.140.204 TLSv1.2 AES256-SHA "GET /dns-query?dns=KhUBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 333
[10/Jun/2021:00:49:16 +0200] 39.96.140.204 TLSv1.2 AES256-SHA "GET /dns-query?dns=KhUBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 335
[10/Jun/2021:01:13:20 +0200] 34.216.153.50 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[10/Jun/2021:01:28:13 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[10/Jun/2021:01:28:13 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[10/Jun/2021:01:28:14 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332
[10/Jun/2021:01:28:19 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[10/Jun/2021:01:28:19 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[10/Jun/2021:01:28:21 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[10/Jun/2021:01:28:25 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[10/Jun/2021:01:28:25 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314
[10/Jun/2021:01:28:25 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[10/Jun/2021:01:28:27 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[10/Jun/2021:01:28:31 +0200] 45.146.165.123 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331