[23/Jan/2022:01:59:19 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [23/Jan/2022:02:38:26 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:03:05:21 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Jan/2022:03:05:43 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Jan/2022:03:05:44 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Jan/2022:03:05:44 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Jan/2022:03:05:47 +0100] 23.236.147.154 TLSv1.2 AES256-SHA "quit" 379 [23/Jan/2022:03:05:51 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [23/Jan/2022:03:05:52 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [23/Jan/2022:03:05:57 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [23/Jan/2022:03:05:57 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [23/Jan/2022:03:06:05 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Jan/2022:03:58:00 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jan/2022:04:53:10 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [23/Jan/2022:05:27:37 +0100] 64.62.197.212 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Jan/2022:06:28:49 +0100] 192.241.200.24 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:07:57:46 +0100] 159.223.23.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:08:05:37 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Jan/2022:08:33:50 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [23/Jan/2022:08:33:52 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [23/Jan/2022:08:34:00 +0100] 157.55.39.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [23/Jan/2022:08:50:38 +0100] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:10:03:22 +0100] 92.118.160.13 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [23/Jan/2022:11:31:47 +0100] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jan/2022:11:47:06 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jan/2022:13:39:08 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "-" - [23/Jan/2022:14:01:28 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [23/Jan/2022:14:01:28 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [23/Jan/2022:14:37:57 +0100] 92.118.160.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [23/Jan/2022:15:00:12 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [23/Jan/2022:16:14:59 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [23/Jan/2022:16:29:45 +0100] 161.35.204.166 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [23/Jan/2022:16:41:26 +0100] 45.134.144.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [23/Jan/2022:17:48:38 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [23/Jan/2022:18:34:47 +0100] 162.142.125.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Jan/2022:18:34:47 +0100] 162.142.125.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:18:37:11 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [23/Jan/2022:18:53:53 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [23/Jan/2022:18:53:55 +0100] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [23/Jan/2022:18:54:01 +0100] 157.55.39.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [23/Jan/2022:19:29:22 +0100] 183.136.226.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Jan/2022:21:26:38 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:21:52:58 +0100] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jan/2022:22:16:49 +0100] 167.248.133.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Jan/2022:22:16:50 +0100] 167.248.133.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jan/2022:22:26:07 +0100] 192.241.209.129 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [23/Jan/2022:22:33:55 +0100] 192.241.214.48 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [23/Jan/2022:22:36:34 +0100] 92.118.160.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [23/Jan/2022:22:52:19 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [23/Jan/2022:23:14:48 +0100] 192.241.209.76 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [23/Jan/2022:23:25:51 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301