[27/Jan/2022:01:08:54 +0100] 89.248.165.52 - - "-" - [27/Jan/2022:01:28:03 +0100] 45.146.165.37 - - "-" - [27/Jan/2022:01:32:50 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [27/Jan/2022:02:06:52 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Jan/2022:02:06:54 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Jan/2022:02:06:54 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Jan/2022:02:06:54 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Jan/2022:02:06:57 +0100] 94.102.49.193 TLSv1.2 AES256-SHA "quit" 379 [27/Jan/2022:02:06:57 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [27/Jan/2022:02:06:58 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [27/Jan/2022:02:06:58 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [27/Jan/2022:02:06:58 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [27/Jan/2022:02:06:59 +0100] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Jan/2022:02:07:08 +0100] 66.240.236.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:02:15:54 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [27/Jan/2022:02:15:55 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [27/Jan/2022:02:16:00 +0100] 207.46.13.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Jan/2022:02:51:22 +0100] 208.100.26.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [27/Jan/2022:03:39:59 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Jan/2022:03:52:50 +0100] 183.136.226.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Jan/2022:03:53:13 +0100] 183.136.226.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:04:26:01 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [27/Jan/2022:04:42:52 +0100] 104.192.108.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:04:49:32 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [27/Jan/2022:05:22:40 +0100] 221.130.37.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [27/Jan/2022:06:04:21 +0100] 129.226.30.190 TLSv1.2 AES256-SHA "-" - [27/Jan/2022:06:04:22 +0100] 129.226.30.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:06:04:25 +0100] 129.226.30.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:06:23:08 +0100] 89.248.165.52 - - "-" - [27/Jan/2022:06:39:40 +0100] 129.226.30.190 - - "-" - [27/Jan/2022:06:43:10 +0100] 192.241.213.56 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:07:11:43 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Jan/2022:07:11:43 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [27/Jan/2022:07:54:13 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Jan/2022:07:59:43 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [27/Jan/2022:09:09:10 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Jan/2022:09:09:10 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [27/Jan/2022:10:03:29 +0100] 117.50.7.159 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Jan/2022:10:26:03 +0100] 193.118.53.210 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Jan/2022:10:28:42 +0100] 192.241.211.186 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [27/Jan/2022:10:29:33 +0100] 192.241.211.102 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Jan/2022:10:30:34 +0100] 192.241.213.77 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [27/Jan/2022:12:25:07 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [27/Jan/2022:12:25:09 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [27/Jan/2022:12:25:19 +0100] 207.46.13.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Jan/2022:12:27:11 +0100] 189.206.70.33 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [27/Jan/2022:13:15:07 +0100] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Jan/2022:13:26:46 +0100] 52.37.96.137 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Jan/2022:13:27:14 +0100] 52.42.33.12 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [27/Jan/2022:13:31:02 +0100] 18.236.126.95 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Jan/2022:13:52:31 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [27/Jan/2022:17:23:07 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [27/Jan/2022:19:59:01 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Jan/2022:20:35:05 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Jan/2022:20:49:50 +0100] 45.155.126.3 TLSv1.2 AES256-SHA "-" - [27/Jan/2022:21:25:52 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [27/Jan/2022:21:43:55 +0100] 185.220.101.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Jan/2022:22:30:48 +0100] 156.146.50.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 301 [27/Jan/2022:22:48:41 +0100] 192.241.206.186 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Jan/2022:22:56:19 +0100] 192.241.207.27 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Jan/2022:23:08:26 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Jan/2022:23:26:46 +0100] 192.241.213.189 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [27/Jan/2022:23:41:52 +0100] 154.89.5.77 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Jan/2022:23:55:11 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [27/Jan/2022:23:57:37 +0100] 66.249.65.204 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [27/Jan/2022:23:57:38 +0100] 66.249.65.204 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Jan/2022:00:28:19 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [28/Jan/2022:00:47:29 +0100] 185.196.220.60 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /GponForm/diag_Form?images/ HTTP/1.1" 317 [28/Jan/2022:00:59:57 +0100] 167.94.138.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301