[20/Mar/2022:01:17:07 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [20/Mar/2022:02:01:16 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [20/Mar/2022:02:32:15 +0100] 207.154.200.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:02:39:39 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:02:43:55 +0100] 198.20.69.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [20/Mar/2022:02:47:11 +0100] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [20/Mar/2022:04:04:41 +0100] 192.241.223.44 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [20/Mar/2022:04:29:00 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [20/Mar/2022:04:54:10 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [20/Mar/2022:05:18:35 +0100] 2.57.121.236 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [20/Mar/2022:05:27:21 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:06:11:04 +0100] 192.241.214.147 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [20/Mar/2022:06:11:18 +0100] 192.241.222.122 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [20/Mar/2022:06:17:03 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [20/Mar/2022:08:06:13 +0100] 137.184.185.122 TLSv1.2 AES256-SHA "POST /web_shell_cmd.gch HTTP/1.1" 400 [20/Mar/2022:08:06:15 +0100] 137.184.185.122 TLSv1.2 AES256-SHA "POST /web_shell_cmd.gch HTTP/1.1" 400 [20/Mar/2022:08:06:17 +0100] 137.184.185.122 TLSv1.2 AES256-SHA "POST /web_shell_cmd.gch HTTP/1.1" 400 [20/Mar/2022:08:32:44 +0100] 92.118.160.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [20/Mar/2022:09:41:32 +0100] 45.83.64.69 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 293 [20/Mar/2022:09:41:32 +0100] 45.83.67.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 293 [20/Mar/2022:11:45:49 +0100] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [20/Mar/2022:12:31:25 +0100] 192.241.224.18 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:13:29:44 +0100] 20.83.240.43 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [20/Mar/2022:15:31:15 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [20/Mar/2022:15:55:52 +0100] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [20/Mar/2022:16:50:31 +0100] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [20/Mar/2022:18:46:15 +0100] 92.118.160.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [20/Mar/2022:19:56:16 +0100] 92.118.160.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [20/Mar/2022:20:16:17 +0100] 167.71.180.188 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:20:18:15 +0100] 146.88.240.13 TLSv1.2 AES256-SHA "-" - [20/Mar/2022:22:00:12 +0100] 81.17.18.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Mar/2022:22:00:39 +0100] 23.129.64.138 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [20/Mar/2022:22:11:11 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [20/Mar/2022:22:15:10 +0100] 34.213.178.223 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [20/Mar/2022:22:16:11 +0100] 18.237.134.5 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314