[07/Feb/2022:01:55:57 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[07/Feb/2022:01:55:58 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[07/Feb/2022:02:38:34 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[07/Feb/2022:02:42:29 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310
[07/Feb/2022:02:42:29 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 309
[07/Feb/2022:02:42:32 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 314
[07/Feb/2022:02:42:32 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 313
[07/Feb/2022:02:42:35 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 315
[07/Feb/2022:02:42:35 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 314
[07/Feb/2022:02:42:38 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 314
[07/Feb/2022:02:42:38 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 315
[07/Feb/2022:02:42:41 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 312
[07/Feb/2022:02:42:41 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 313
[07/Feb/2022:02:42:44 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 313
[07/Feb/2022:02:42:45 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 314
[07/Feb/2022:02:42:47 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 309
[07/Feb/2022:02:42:48 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 310
[07/Feb/2022:02:42:50 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 306
[07/Feb/2022:02:42:50 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 307
[07/Feb/2022:03:15:19 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Feb/2022:03:15:20 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Feb/2022:03:15:25 +0100] 157.55.39.143 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[07/Feb/2022:04:18:12 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[07/Feb/2022:04:41:17 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[07/Feb/2022:04:48:47 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[07/Feb/2022:05:46:15 +0100] 54.151.50.195 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[07/Feb/2022:06:13:06 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[07/Feb/2022:06:23:44 +0100] 92.118.160.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394
[07/Feb/2022:06:27:55 +0100] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[07/Feb/2022:06:58:43 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[07/Feb/2022:07:20:56 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 303
[07/Feb/2022:07:20:58 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 308
[07/Feb/2022:07:21:01 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 309
[07/Feb/2022:07:21:04 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 300
[07/Feb/2022:07:21:04 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309
[07/Feb/2022:07:21:07 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 305
[07/Feb/2022:07:21:07 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 307
[07/Feb/2022:07:21:10 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 308
[07/Feb/2022:07:21:10 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 305
[07/Feb/2022:07:21:13 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 305
[07/Feb/2022:07:21:13 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 304
[07/Feb/2022:07:21:16 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[07/Feb/2022:07:21:17 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 303
[07/Feb/2022:07:21:20 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 305
[07/Feb/2022:07:21:23 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 301
[07/Feb/2022:07:21:26 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 297
[07/Feb/2022:07:21:33 +0100] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[07/Feb/2022:07:24:07 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:08:34:23 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:08:58:24 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[07/Feb/2022:09:44:40 +0100] 35.206.153.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[07/Feb/2022:09:45:11 +0100] 35.206.153.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[07/Feb/2022:09:47:30 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:11:09:08 +0100] 66.94.126.76 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[07/Feb/2022:11:19:27 +0100] 45.76.148.176 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[07/Feb/2022:12:02:28 +0100] 192.241.211.144 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[07/Feb/2022:12:56:28 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Feb/2022:12:56:29 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Feb/2022:12:56:42 +0100] 157.55.39.143 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[07/Feb/2022:13:03:37 +0100] 23.90.160.114 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[07/Feb/2022:14:44:33 +0100] 92.118.160.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[07/Feb/2022:15:23:50 +0100] 162.142.125.213 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[07/Feb/2022:15:23:50 +0100] 162.142.125.213 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:15:23:52 +0100] 162.142.125.213 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[07/Feb/2022:16:55:20 +0100] 192.241.211.6 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:19:45:39 +0100] 173.225.110.122 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:20:32:06 +0100] 167.248.133.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[07/Feb/2022:20:32:06 +0100] 167.248.133.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:20:32:07 +0100] 167.248.133.119 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[07/Feb/2022:21:43:55 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[07/Feb/2022:21:52:08 +0100] 104.140.188.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 374
[07/Feb/2022:22:01:37 +0100] 185.174.28.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310
[07/Feb/2022:22:01:38 +0100] 185.174.28.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310
[07/Feb/2022:22:01:38 +0100] 185.174.28.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310
[07/Feb/2022:22:01:38 +0100] 185.174.28.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310
[07/Feb/2022:22:22:30 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[07/Feb/2022:22:38:53 +0100] 54.69.38.245 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[07/Feb/2022:23:04:23 +0100] 71.6.232.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Feb/2022:23:17:31 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "-" -
[07/Feb/2022:23:54:04 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[08/Feb/2022:00:01:56 +0100] 192.241.210.248 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[08/Feb/2022:00:09:27 +0100] 192.241.204.142 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[08/Feb/2022:00:49:59 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318