[27/Oct/2021:02:02:27 +0200] 192.35.168.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:02:05:44 +0200] 185.149.40.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [27/Oct/2021:02:11:57 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [27/Oct/2021:02:11:57 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [27/Oct/2021:02:11:59 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [27/Oct/2021:02:12:03 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:02:12:04 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:02:12:05 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [27/Oct/2021:02:12:06 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314 [27/Oct/2021:02:12:07 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Oct/2021:02:12:07 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Oct/2021:02:12:10 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [27/Oct/2021:02:12:11 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Oct/2021:02:12:15 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332 [27/Oct/2021:02:34:46 +0200] 17.121.114.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 314 [27/Oct/2021:02:34:48 +0200] 17.121.114.89 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [27/Oct/2021:03:32:03 +0200] 45.83.67.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [27/Oct/2021:03:47:17 +0200] 192.241.206.33 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Oct/2021:03:51:44 +0200] 157.55.39.105 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311 [27/Oct/2021:03:51:46 +0200] 157.55.39.105 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311 [27/Oct/2021:03:51:52 +0200] 207.46.13.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [27/Oct/2021:04:50:59 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [27/Oct/2021:05:01:07 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Oct/2021:05:59:11 +0200] 34.86.35.27 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [27/Oct/2021:05:59:20 +0200] 51.15.247.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [27/Oct/2021:05:59:25 +0200] 77.247.110.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Oct/2021:05:59:26 +0200] 77.247.110.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [27/Oct/2021:06:30:52 +0200] 34.86.35.29 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [27/Oct/2021:06:42:08 +0200] 35.215.64.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Oct/2021:06:44:20 +0200] 35.212.234.187 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Oct/2021:07:58:22 +0200] 193.106.29.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:08:35:16 +0200] 185.254.31.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [27/Oct/2021:08:35:18 +0200] 185.254.31.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298 [27/Oct/2021:08:57:28 +0200] 192.241.205.170 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [27/Oct/2021:09:00:19 +0200] 198.199.112.26 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [27/Oct/2021:09:00:55 +0200] 192.241.205.9 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Oct/2021:09:16:22 +0200] 208.100.26.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [27/Oct/2021:10:08:46 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [27/Oct/2021:10:19:14 +0200] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [27/Oct/2021:10:40:27 +0200] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Oct/2021:10:44:23 +0200] 192.241.195.203 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [27/Oct/2021:12:23:41 +0200] 199.249.230.163 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:12:24:08 +0200] 185.220.101.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [27/Oct/2021:12:42:27 +0200] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304 [27/Oct/2021:13:21:16 +0200] 207.46.13.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [27/Oct/2021:15:13:23 +0200] 192.241.208.184 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Oct/2021:15:23:32 +0200] 208.100.26.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [27/Oct/2021:15:26:44 +0200] 154.89.5.39 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Oct/2021:15:31:39 +0200] 80.82.77.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:15:31:59 +0200] 45.61.146.242 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304 [27/Oct/2021:16:26:18 +0200] 192.241.198.185 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:16:28:55 +0200] 85.93.218.204 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 314 [27/Oct/2021:17:01:11 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314 [27/Oct/2021:17:01:11 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Oct/2021:17:01:13 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [27/Oct/2021:17:01:15 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Oct/2021:17:01:15 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Oct/2021:17:01:17 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [27/Oct/2021:17:01:20 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332 [27/Oct/2021:17:01:21 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [27/Oct/2021:17:01:24 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [27/Oct/2021:17:01:25 +0200] 45.146.164.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Oct/2021:17:15:33 +0200] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [27/Oct/2021:20:43:10 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [27/Oct/2021:22:19:10 +0200] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [27/Oct/2021:23:44:33 +0200] 178.239.21.161 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [27/Oct/2021:23:46:04 +0200] 34.213.241.248 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Oct/2021:23:46:16 +0200] 54.200.2.69 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [28/Oct/2021:01:44:23 +0200] 18.237.213.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [28/Oct/2021:01:44:40 +0200] 52.11.43.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306