[01/Mar/2022:01:11:34 +0100] 192.241.218.140 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[01/Mar/2022:01:32:23 +0100] 103.149.192.199 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[01/Mar/2022:01:54:31 +0100] 192.241.218.117 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[01/Mar/2022:02:00:26 +0100] 192.241.221.158 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[01/Mar/2022:02:25:12 +0100] 52.53.166.231 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" -
[01/Mar/2022:02:50:58 +0100] 185.142.236.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[01/Mar/2022:02:51:22 +0100] 185.142.236.40 - - "-" -
[01/Mar/2022:03:11:40 +0100] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[01/Mar/2022:03:44:09 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[01/Mar/2022:04:52:57 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[01/Mar/2022:04:53:30 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[01/Mar/2022:04:56:12 +0100] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[01/Mar/2022:05:05:15 +0100] 208.100.26.236 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297
[01/Mar/2022:05:47:17 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[01/Mar/2022:05:58:28 +0100] 18.144.173.132 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 402
[01/Mar/2022:06:07:24 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[01/Mar/2022:06:10:40 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[01/Mar/2022:06:12:47 +0100] 34.77.162.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377
[01/Mar/2022:06:14:07 +0100] 92.118.160.13 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385
[01/Mar/2022:06:26:43 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[01/Mar/2022:06:39:09 +0100] 106.75.64.59 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383
[01/Mar/2022:07:23:31 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[01/Mar/2022:08:53:40 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[01/Mar/2022:09:14:06 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[01/Mar/2022:09:36:08 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[01/Mar/2022:09:36:09 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[01/Mar/2022:09:53:19 +0100] 192.241.222.46 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[01/Mar/2022:09:53:44 +0100] 192.241.219.178 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[01/Mar/2022:09:55:54 +0100] 192.241.216.152 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[01/Mar/2022:10:31:14 +0100] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /solr/ HTTP/1.1" 304
[01/Mar/2022:11:48:36 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[01/Mar/2022:11:53:27 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[01/Mar/2022:11:53:28 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[01/Mar/2022:11:53:29 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crm/.env HTTP/1.1" 306
[01/Mar/2022:11:53:29 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /crm/.env HTTP/1.1" 306
[01/Mar/2022:11:53:30 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /beta/.env HTTP/1.1" 307
[01/Mar/2022:11:53:32 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /beta/.env HTTP/1.1" 307
[01/Mar/2022:11:53:33 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[01/Mar/2022:11:53:33 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[01/Mar/2022:11:53:34 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /new/.env HTTP/1.1" 307
[01/Mar/2022:11:53:35 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /new/.env HTTP/1.1" 307
[01/Mar/2022:11:53:38 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /support/.env HTTP/1.1" 310
[01/Mar/2022:11:53:38 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /support/.env HTTP/1.1" 310
[01/Mar/2022:11:53:39 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /panel/.env HTTP/1.1" 308
[01/Mar/2022:11:53:40 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /panel/.env HTTP/1.1" 308
[01/Mar/2022:11:53:41 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cms/.env HTTP/1.1" 306
[01/Mar/2022:11:53:43 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /cms/.env HTTP/1.1" 306
[01/Mar/2022:11:53:43 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /apps/.env HTTP/1.1" 307
[01/Mar/2022:11:53:44 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /apps/.env HTTP/1.1" 307
[01/Mar/2022:11:53:45 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /portal/.env HTTP/1.1" 309
[01/Mar/2022:11:53:45 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /portal/.env HTTP/1.1" 309
[01/Mar/2022:11:53:47 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[01/Mar/2022:11:53:48 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[01/Mar/2022:11:53:51 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /stage/.env HTTP/1.1" 308
[01/Mar/2022:11:53:52 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /stage/.env HTTP/1.1" 308
[01/Mar/2022:11:53:52 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /testing/.env HTTP/1.1" 310
[01/Mar/2022:11:53:54 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /testing/.env HTTP/1.1" 310
[01/Mar/2022:11:53:55 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_profiler/phpinfo HTTP/1.1" 313
[01/Mar/2022:11:53:55 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /_profiler/phpinfo HTTP/1.1" 313
[01/Mar/2022:12:43:07 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[01/Mar/2022:12:53:15 +0100] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[01/Mar/2022:13:50:06 +0100] 170.130.187.34 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[01/Mar/2022:15:08:04 +0100] 185.180.143.72 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[01/Mar/2022:16:12:52 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[01/Mar/2022:16:57:05 +0100] 34.86.35.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[01/Mar/2022:19:14:32 +0100] 167.94.138.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[01/Mar/2022:19:14:33 +0100] 167.94.138.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[01/Mar/2022:19:14:33 +0100] 167.94.138.61 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[01/Mar/2022:19:18:14 +0100] 183.136.226.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[01/Mar/2022:21:21:33 +0100] 154.89.5.75 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383
[01/Mar/2022:22:12:01 +0100] 34.134.42.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[01/Mar/2022:22:13:50 +0100] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 394
[01/Mar/2022:22:13:50 +0100] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 384
[01/Mar/2022:22:19:49 +0100] 157.55.39.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[02/Mar/2022:00:22:45 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[02/Mar/2022:00:38:42 +0100] 185.180.143.79 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301