[17/Feb/2022:01:04:13 +0100] 92.118.160.33 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [17/Feb/2022:01:29:45 +0100] 89.248.165.52 - - "-" - [17/Feb/2022:02:14:26 +0100] 178.239.21.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [17/Feb/2022:02:59:35 +0100] 51.158.118.231 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [17/Feb/2022:03:33:07 +0100] 192.241.205.177 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:03:38:15 +0100] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:04:49:27 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [17/Feb/2022:05:38:51 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:06:26:44 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Feb/2022:06:27:21 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [17/Feb/2022:06:29:09 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [17/Feb/2022:07:04:01 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [17/Feb/2022:07:28:18 +0100] 66.240.236.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:08:03:24 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [17/Feb/2022:08:27:04 +0100] 94.232.45.12 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:08:32:25 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [17/Feb/2022:09:18:04 +0100] 192.241.211.186 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [17/Feb/2022:09:20:39 +0100] 192.241.211.11 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [17/Feb/2022:09:20:43 +0100] 192.241.211.22 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [17/Feb/2022:09:58:20 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [17/Feb/2022:10:04:51 +0100] 192.53.170.163 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:10:31:32 +0100] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [17/Feb/2022:10:32:54 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [17/Feb/2022:10:32:55 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [17/Feb/2022:10:32:55 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [17/Feb/2022:10:32:56 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [17/Feb/2022:10:32:56 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 307 [17/Feb/2022:10:32:57 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /api/.env HTTP/1.1" 307 [17/Feb/2022:10:32:57 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [17/Feb/2022:10:32:58 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [17/Feb/2022:10:32:58 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [17/Feb/2022:10:32:59 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [17/Feb/2022:10:32:59 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [17/Feb/2022:10:33:00 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [17/Feb/2022:10:33:00 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dev/.env HTTP/1.1" 306 [17/Feb/2022:10:33:01 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dev/.env HTTP/1.1" 306 [17/Feb/2022:10:33:01 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /staging/.env HTTP/1.1" 310 [17/Feb/2022:10:33:02 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /staging/.env HTTP/1.1" 310 [17/Feb/2022:10:33:03 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309 [17/Feb/2022:10:33:03 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309 [17/Feb/2022:10:33:04 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/admin/.env HTTP/1.1" 313 [17/Feb/2022:10:33:04 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/admin/.env HTTP/1.1" 313 [17/Feb/2022:10:33:05 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/api/.env HTTP/1.1" 312 [17/Feb/2022:10:33:05 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/api/.env HTTP/1.1" 312 [17/Feb/2022:10:33:06 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/app/.env HTTP/1.1" 312 [17/Feb/2022:10:33:06 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/app/.env HTTP/1.1" 312 [17/Feb/2022:10:33:07 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/backend/.env HTTP/1.1" 314 [17/Feb/2022:10:33:08 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/backend/.env HTTP/1.1" 314 [17/Feb/2022:10:33:08 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/demo/.env HTTP/1.1" 313 [17/Feb/2022:10:33:09 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/demo/.env HTTP/1.1" 313 [17/Feb/2022:10:33:09 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/dev/.env HTTP/1.1" 312 [17/Feb/2022:10:33:10 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/dev/.env HTTP/1.1" 312 [17/Feb/2022:10:33:10 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/staging/.env HTTP/1.1" 314 [17/Feb/2022:10:33:11 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/staging/.env HTTP/1.1" 314 [17/Feb/2022:11:31:16 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [17/Feb/2022:11:49:21 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [17/Feb/2022:12:30:48 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [17/Feb/2022:13:37:13 +0100] 185.180.143.7 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:13:50:14 +0100] 213.202.216.189 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:13:50:19 +0100] 185.56.80.65 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [17/Feb/2022:14:00:14 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:14:09:17 +0100] 193.118.53.202 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:14:09:28 +0100] 193.118.53.202 TLSv1.2 DHE-RSA-AES256-SHA256 "HEAD /icons/sphere1.png HTTP/1.1" - [17/Feb/2022:14:12:13 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [17/Feb/2022:15:04:31 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:16:28:43 +0100] 207.46.13.233 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [17/Feb/2022:16:28:45 +0100] 207.46.13.233 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [17/Feb/2022:16:28:50 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [17/Feb/2022:16:30:43 +0100] 51.158.66.83 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 397 [17/Feb/2022:18:16:01 +0100] 109.74.199.248 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 304 [17/Feb/2022:19:49:51 +0100] 104.206.128.6 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [17/Feb/2022:20:17:02 +0100] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [17/Feb/2022:20:37:13 +0100] 51.158.98.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384 [17/Feb/2022:21:17:48 +0100] 167.94.138.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [17/Feb/2022:21:17:48 +0100] 167.94.138.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Feb/2022:21:17:49 +0100] 167.94.138.118 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [17/Feb/2022:21:45:40 +0100] 192.241.209.10 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [17/Feb/2022:21:59:08 +0100] 47.74.84.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=oxMBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 340 [17/Feb/2022:21:59:11 +0100] 47.74.84.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=nl8BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 339 [17/Feb/2022:22:33:34 +0100] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [17/Feb/2022:23:00:11 +0100] 139.162.238.243 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /admin/ HTTP/1.1" 305 [18/Feb/2022:00:50:38 +0100] 192.241.214.4 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348