[22/Jan/2022:01:04:19 +0100] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384 [22/Jan/2022:01:04:38 +0100] 162.142.125.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [22/Jan/2022:01:04:39 +0100] 162.142.125.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:01:36:38 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [22/Jan/2022:01:58:00 +0100] 193.56.29.120 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [22/Jan/2022:02:38:50 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [22/Jan/2022:03:10:47 +0100] 51.158.118.231 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [22/Jan/2022:03:14:23 +0100] 184.105.139.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [22/Jan/2022:04:52:10 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [22/Jan/2022:05:28:39 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [22/Jan/2022:05:28:39 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [22/Jan/2022:05:29:08 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:05:32:25 +0100] 66.249.66.210 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Jan/2022:05:32:26 +0100] 66.249.66.214 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:06:28:59 +0100] 34.86.35.29 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [22/Jan/2022:06:31:53 +0100] 45.153.160.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:06:34:57 +0100] 34.86.35.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [22/Jan/2022:06:36:41 +0100] 54.183.36.87 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 402 [22/Jan/2022:06:52:57 +0100] 34.86.35.15 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [22/Jan/2022:06:56:49 +0100] 157.55.39.170 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Jan/2022:06:56:51 +0100] 157.55.39.170 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Jan/2022:06:57:01 +0100] 163.172.180.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [22/Jan/2022:06:57:03 +0100] 40.77.167.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [22/Jan/2022:07:06:43 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:07:56:12 +0100] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [22/Jan/2022:08:04:22 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [22/Jan/2022:08:46:42 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [22/Jan/2022:08:46:43 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [22/Jan/2022:08:46:48 +0100] 157.55.39.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [22/Jan/2022:10:49:31 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [22/Jan/2022:10:49:32 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [22/Jan/2022:11:21:21 +0100] 104.206.128.74 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 374 [22/Jan/2022:13:13:29 +0100] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [22/Jan/2022:14:43:40 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [22/Jan/2022:14:43:40 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [22/Jan/2022:15:07:45 +0100] 45.72.48.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [22/Jan/2022:15:17:35 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 343 [22/Jan/2022:15:17:38 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 343 [22/Jan/2022:15:17:41 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 308 [22/Jan/2022:15:17:44 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 308 [22/Jan/2022:15:17:47 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 340 [22/Jan/2022:15:17:50 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 340 [22/Jan/2022:15:17:52 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /query HTTP/1.1" 305 [22/Jan/2022:15:17:54 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /query HTTP/1.1" 305 [22/Jan/2022:15:17:58 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /resolve?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 342 [22/Jan/2022:15:18:00 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /resolve?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 342 [22/Jan/2022:15:18:02 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /resolve HTTP/1.1" 305 [22/Jan/2022:15:18:05 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST /resolve HTTP/1.1" 305 [22/Jan/2022:15:18:08 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 337 [22/Jan/2022:15:18:10 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "GET /?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 337 [22/Jan/2022:15:18:12 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST / HTTP/1.1" 301 [22/Jan/2022:15:18:14 +0100] 47.243.233.244 TLSv1.2 AES256-SHA "POST / HTTP/1.1" 301 [22/Jan/2022:16:11:37 +0100] 51.158.103.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [22/Jan/2022:16:21:17 +0100] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [22/Jan/2022:16:43:25 +0100] 66.249.79.52 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Jan/2022:16:43:26 +0100] 66.249.79.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Jan/2022:16:55:58 +0100] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [22/Jan/2022:17:10:19 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [22/Jan/2022:19:42:41 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [22/Jan/2022:20:00:39 +0100] 40.77.167.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [22/Jan/2022:20:41:45 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [22/Jan/2022:20:59:57 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [22/Jan/2022:21:41:20 +0100] 45.146.165.37 - - "-" - [22/Jan/2022:21:56:05 +0100] 20.117.92.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Jan/2022:22:18:38 +0100] 192.241.210.225 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [22/Jan/2022:22:26:50 +0100] 192.241.214.29 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [22/Jan/2022:22:38:50 +0100] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [22/Jan/2022:22:53:41 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [22/Jan/2022:23:04:32 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [22/Jan/2022:23:04:33 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [22/Jan/2022:23:04:41 +0100] 157.55.39.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [22/Jan/2022:23:41:54 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [22/Jan/2022:23:54:34 +0100] 154.209.125.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Jan/2022:00:09:46 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301