[07/Apr/2022:02:01:27 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 343
[07/Apr/2022:02:01:31 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 343
[07/Apr/2022:02:01:34 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 308
[07/Apr/2022:02:01:36 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 308
[07/Apr/2022:02:01:39 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 340
[07/Apr/2022:02:01:42 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 340
[07/Apr/2022:02:01:45 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /query HTTP/1.1" 305
[07/Apr/2022:02:01:48 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /query HTTP/1.1" 305
[07/Apr/2022:02:01:51 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /resolve?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 342
[07/Apr/2022:02:01:53 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /resolve?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 342
[07/Apr/2022:02:01:56 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /resolve HTTP/1.1" 305
[07/Apr/2022:02:01:59 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /resolve HTTP/1.1" 305
[07/Apr/2022:02:02:01 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 337
[07/Apr/2022:02:02:03 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 337
[07/Apr/2022:02:02:06 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST / HTTP/1.1" 301
[07/Apr/2022:02:02:10 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST / HTTP/1.1" 301
[07/Apr/2022:03:16:28 +0200] 40.77.167.95 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Apr/2022:03:16:29 +0200] 40.77.167.95 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311
[07/Apr/2022:03:16:40 +0200] 157.55.39.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[07/Apr/2022:03:56:54 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Apr/2022:04:51:13 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[07/Apr/2022:05:07:52 +0200] 74.82.47.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[07/Apr/2022:06:05:36 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" -
[07/Apr/2022:06:46:30 +0200] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[07/Apr/2022:06:46:31 +0200] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[07/Apr/2022:06:46:31 +0200] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[07/Apr/2022:06:46:32 +0200] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[07/Apr/2022:07:03:45 +0200] 80.94.93.250 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/config.php HTTP/1.1" 313
[07/Apr/2022:07:31:39 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[07/Apr/2022:07:36:47 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[07/Apr/2022:08:42:35 +0200] 192.241.213.13 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[07/Apr/2022:10:31:53 +0200] 103.153.254.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Apr/2022:11:13:02 +0200] 40.77.167.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302
[07/Apr/2022:13:04:45 +0200] 157.55.39.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[07/Apr/2022:13:13:30 +0200] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /admin/ HTTP/1.1" 305
[07/Apr/2022:13:27:17 +0200] 167.94.138.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[07/Apr/2022:13:27:18 +0200] 167.94.138.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[07/Apr/2022:13:27:18 +0200] 167.94.138.117 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[07/Apr/2022:16:04:26 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403
[07/Apr/2022:17:38:34 +0200] 76.72.172.167 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[07/Apr/2022:17:51:06 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[07/Apr/2022:17:51:06 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[07/Apr/2022:17:51:07 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[07/Apr/2022:17:51:07 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[07/Apr/2022:19:34:24 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[07/Apr/2022:20:06:20 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387
[07/Apr/2022:21:38:08 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[07/Apr/2022:21:51:23 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 396
[07/Apr/2022:21:51:23 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386
[07/Apr/2022:22:25:55 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[07/Apr/2022:22:45:44 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[07/Apr/2022:22:47:22 +0200] 50.84.48.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297
[07/Apr/2022:22:51:33 +0200] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304
[07/Apr/2022:23:24:18 +0200] 81.149.195.97 TLSv1.2 AES256-SHA "GET /1/license.txt HTTP/1.1" 316
[07/Apr/2022:23:29:07 +0200] 212.192.241.31 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cpanel HTTP/1.1" 312
[07/Apr/2022:23:54:34 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[08/Apr/2022:00:09:06 +0200] 40.77.167.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302
[08/Apr/2022:01:31:12 +0200] 45.155.204.146 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[08/Apr/2022:01:55:41 +0200] 52.37.157.199 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[08/Apr/2022:01:56:15 +0200] 54.202.73.159 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313