[26/May/2022:02:00:13 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/May/2022:03:36:04 +0200] 192.241.219.105 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [26/May/2022:04:26:20 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:04:50:01 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [26/May/2022:05:18:10 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [26/May/2022:06:12:47 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [26/May/2022:06:46:17 +0200] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/May/2022:06:53:46 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [26/May/2022:07:12:18 +0200] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/May/2022:07:20:02 +0200] 128.14.209.154 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/May/2022:07:53:18 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [26/May/2022:08:16:59 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [26/May/2022:09:34:09 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [26/May/2022:09:43:38 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/May/2022:09:43:38 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:09:43:39 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/May/2022:10:14:24 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/May/2022:10:23:09 +0200] 134.209.33.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/May/2022:10:23:10 +0200] 134.209.33.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [26/May/2022:10:23:13 +0200] 134.209.33.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [26/May/2022:10:23:16 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [26/May/2022:11:18:19 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [26/May/2022:11:27:18 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [26/May/2022:11:29:24 +0200] 64.62.197.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/May/2022:12:25:51 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [26/May/2022:12:59:02 +0200] 159.223.173.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:13:33:30 +0200] 192.241.221.14 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [26/May/2022:13:33:56 +0200] 192.241.219.87 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [26/May/2022:13:34:04 +0200] 192.241.214.157 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [26/May/2022:13:46:09 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:14:06:33 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:15:09:27 +0200] 159.223.193.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa HTTP/1.1" 303 [26/May/2022:15:15:19 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [26/May/2022:15:19:28 +0200] 154.22.135.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [26/May/2022:17:01:10 +0200] 35.84.21.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [26/May/2022:17:01:10 +0200] 35.84.21.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [26/May/2022:18:36:41 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/May/2022:18:54:24 +0200] 192.99.18.122 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/May/2022:19:09:13 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:19:13:57 +0200] 154.22.135.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 308 [26/May/2022:20:27:07 +0200] 192.241.221.104 TLSv1.2 AES256-SHA "GET /tmui/login.jsp HTTP/1.1" 312 [26/May/2022:20:51:54 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [26/May/2022:21:10:08 +0200] 167.172.175.28 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/May/2022:21:28:24 +0200] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 381 [26/May/2022:23:12:17 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [26/May/2022:23:34:27 +0200] 35.167.56.213 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/May/2022:23:35:35 +0200] 54.213.152.251 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [26/May/2022:23:56:45 +0200] 34.217.103.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/May/2022:23:57:04 +0200] 35.86.227.197 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/May/2022:23:57:08 +0200] 34.221.135.150 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/May/2022:01:41:54 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301