[24/Feb/2022:01:30:48 +0100] 192.241.212.149 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [24/Feb/2022:01:36:35 +0100] 192.241.213.240 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [24/Feb/2022:01:38:29 +0100] 107.189.2.111 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:01:49:21 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [24/Feb/2022:01:50:20 +0100] 192.241.209.199 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [24/Feb/2022:01:50:47 +0100] 192.241.211.199 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [24/Feb/2022:01:50:55 +0100] 192.241.211.11 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [24/Feb/2022:02:38:41 +0100] 45.79.204.46 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Feb/2022:03:38:21 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [24/Feb/2022:04:14:59 +0100] 216.218.206.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Feb/2022:04:44:29 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [24/Feb/2022:04:50:10 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [24/Feb/2022:04:56:42 +0100] 178.79.155.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Feb/2022:05:04:20 +0100] 192.241.208.240 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [24/Feb/2022:05:10:23 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [24/Feb/2022:06:24:32 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [24/Feb/2022:06:32:17 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Feb/2022:06:37:01 +0100] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Feb/2022:06:40:14 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [24/Feb/2022:06:55:22 +0100] 2.57.121.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET //a2billing/customer/templates/default/footer.tpl HTTP/1.1" 333 [24/Feb/2022:07:00:25 +0100] 66.240.236.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:07:47:48 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [24/Feb/2022:08:19:59 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [24/Feb/2022:08:21:56 +0100] 162.62.33.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [24/Feb/2022:08:22:22 +0100] 209.141.35.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:08:22:22 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:08:22:25 +0100] 111.7.100.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:08:22:29 +0100] 8.31.2.43 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Feb/2022:08:22:32 +0100] 209.141.51.49 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [24/Feb/2022:08:22:33 +0100] 209.141.35.128 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [24/Feb/2022:08:22:35 +0100] 211.95.50.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Feb/2022:08:22:37 +0100] 209.141.35.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:08:22:41 +0100] 8.31.2.43 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [24/Feb/2022:08:22:42 +0100] 209.141.41.193 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [24/Feb/2022:08:22:43 +0100] 8.31.2.45 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [24/Feb/2022:08:22:45 +0100] 36.99.136.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:08:22:45 +0100] 111.7.96.160 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [24/Feb/2022:08:22:53 +0100] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [24/Feb/2022:08:22:53 +0100] 8.31.2.43 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 308 [24/Feb/2022:08:22:54 +0100] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [24/Feb/2022:09:17:12 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:09:21:29 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [24/Feb/2022:09:21:30 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [24/Feb/2022:09:21:31 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [24/Feb/2022:09:21:31 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [24/Feb/2022:09:21:32 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 307 [24/Feb/2022:09:21:32 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /api/.env HTTP/1.1" 307 [24/Feb/2022:09:21:33 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [24/Feb/2022:09:21:34 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [24/Feb/2022:09:21:34 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [24/Feb/2022:09:21:35 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [24/Feb/2022:09:21:35 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [24/Feb/2022:09:21:36 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [24/Feb/2022:09:21:36 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dev/.env HTTP/1.1" 306 [24/Feb/2022:09:21:37 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dev/.env HTTP/1.1" 306 [24/Feb/2022:09:21:38 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /staging/.env HTTP/1.1" 310 [24/Feb/2022:09:21:38 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /staging/.env HTTP/1.1" 310 [24/Feb/2022:09:21:39 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309 [24/Feb/2022:09:21:39 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309 [24/Feb/2022:09:21:40 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/admin/.env HTTP/1.1" 313 [24/Feb/2022:09:21:40 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/admin/.env HTTP/1.1" 313 [24/Feb/2022:09:21:41 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/api/.env HTTP/1.1" 312 [24/Feb/2022:09:21:41 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/api/.env HTTP/1.1" 312 [24/Feb/2022:09:21:42 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/app/.env HTTP/1.1" 312 [24/Feb/2022:09:21:43 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/app/.env HTTP/1.1" 312 [24/Feb/2022:09:21:43 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/backend/.env HTTP/1.1" 314 [24/Feb/2022:09:21:44 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/backend/.env HTTP/1.1" 314 [24/Feb/2022:09:21:44 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/demo/.env HTTP/1.1" 313 [24/Feb/2022:09:21:45 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/demo/.env HTTP/1.1" 313 [24/Feb/2022:09:21:46 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/dev/.env HTTP/1.1" 312 [24/Feb/2022:09:21:46 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/dev/.env HTTP/1.1" 312 [24/Feb/2022:09:21:47 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/staging/.env HTTP/1.1" 314 [24/Feb/2022:09:21:48 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/staging/.env HTTP/1.1" 314 [24/Feb/2022:09:38:06 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [24/Feb/2022:10:21:53 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:10:30:37 +0100] 103.203.57.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Feb/2022:11:18:45 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Feb/2022:11:54:44 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 303 [24/Feb/2022:11:54:44 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 301 [24/Feb/2022:11:54:46 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 307 [24/Feb/2022:11:54:47 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 305 [24/Feb/2022:11:54:49 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 308 [24/Feb/2022:11:54:49 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 306 [24/Feb/2022:11:54:52 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 308 [24/Feb/2022:11:54:52 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 306 [24/Feb/2022:11:54:54 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 306 [24/Feb/2022:11:54:55 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 304 [24/Feb/2022:11:54:57 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 308 [24/Feb/2022:11:54:58 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 305 [24/Feb/2022:11:55:00 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 304 [24/Feb/2022:11:55:01 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info HTTP/1.1" 301 [24/Feb/2022:11:55:03 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 300 [24/Feb/2022:11:55:03 +0100] 128.199.127.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 298 [24/Feb/2022:12:09:21 +0100] 192.241.211.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Feb/2022:14:17:21 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [24/Feb/2022:14:17:34 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [24/Feb/2022:14:17:35 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [24/Feb/2022:14:17:36 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [24/Feb/2022:14:17:40 +0100] 23.236.147.154 TLSv1.2 AES256-SHA "quit" 379 [24/Feb/2022:14:17:41 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [24/Feb/2022:14:17:42 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [24/Feb/2022:14:17:43 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [24/Feb/2022:14:17:43 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [24/Feb/2022:14:17:48 +0100] 23.236.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [24/Feb/2022:14:34:00 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [24/Feb/2022:15:18:44 +0100] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Feb/2022:18:52:18 +0100] 178.239.21.17 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [24/Feb/2022:19:08:06 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Feb/2022:19:35:33 +0100] 208.100.26.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [24/Feb/2022:20:37:32 +0100] 23.90.160.114 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Feb/2022:20:40:40 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Feb/2022:22:12:22 +0100] 172.104.15.248 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [24/Feb/2022:22:12:24 +0100] 172.104.15.248 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [24/Feb/2022:23:36:23 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [25/Feb/2022:00:42:37 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301