[28/Jul/2022:02:16:05 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[28/Jul/2022:02:23:35 +0200] 35.90.76.41 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[28/Jul/2022:02:24:12 +0200] 35.88.187.90 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[28/Jul/2022:02:24:16 +0200] 35.88.187.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[28/Jul/2022:03:41:36 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[28/Jul/2022:04:14:46 +0200] 192.241.221.44 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[28/Jul/2022:04:18:41 +0200] 51.222.253.13 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 304
[28/Jul/2022:04:18:42 +0200] 54.36.148.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297
[28/Jul/2022:04:39:54 +0200] 216.218.206.96 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:04:51:29 +0200] 216.218.206.100 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[28/Jul/2022:04:55:36 +0200] 216.218.206.96 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:04:56:53 +0200] 192.241.220.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:05:37:22 +0200] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[28/Jul/2022:05:40:18 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393
[28/Jul/2022:06:09:01 +0200] 51.222.253.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302
[28/Jul/2022:06:09:04 +0200] 54.36.148.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[28/Jul/2022:07:26:43 +0200] 45.95.147.34 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[28/Jul/2022:08:43:54 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379
[28/Jul/2022:08:43:56 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[28/Jul/2022:08:43:56 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[28/Jul/2022:08:43:56 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "HEAD /cgi-bin/blockpage.cgi HTTP/1.1" -
[28/Jul/2022:08:43:56 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 293
[28/Jul/2022:08:43:57 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.DS_Store HTTP/1.1" 307
[28/Jul/2022:08:43:57 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[28/Jul/2022:08:43:57 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[28/Jul/2022:08:43:57 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /frontend_dev.php/$ HTTP/1.1" 314
[28/Jul/2022:08:43:57 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /api/search?folderIds=0 HTTP/1.1" 316
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.json HTTP/1.1" 305
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /login.action HTTP/1.1" 311
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:08:43:58 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 353
[28/Jul/2022:08:43:59 +0200] 161.35.86.181 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304
[28/Jul/2022:10:19:20 +0200] 208.67.104.120 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[28/Jul/2022:10:19:20 +0200] 208.67.104.120 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[28/Jul/2022:11:19:55 +0200] 51.159.147.226 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500
[28/Jul/2022:11:26:32 +0200] 66.29.129.200 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[28/Jul/2022:11:26:59 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /env/credentials HTTP/1.1" 316
[28/Jul/2022:11:27:00 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /env/credentials HTTP/1.1" 316
[28/Jul/2022:12:51:41 +0200] 185.189.182.234 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379
[28/Jul/2022:12:54:44 +0200] 192.241.223.11 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[28/Jul/2022:12:55:42 +0200] 192.241.214.157 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[28/Jul/2022:12:56:01 +0200] 192.241.219.237 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[28/Jul/2022:15:08:43 +0200] 64.225.68.114 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374
[28/Jul/2022:15:29:53 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[28/Jul/2022:15:36:22 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" -
[28/Jul/2022:16:49:57 +0200] 188.166.74.193 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[28/Jul/2022:17:19:06 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[28/Jul/2022:17:19:06 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[28/Jul/2022:17:23:29 +0200] 209.141.36.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 303
[28/Jul/2022:17:23:34 +0200] 205.185.116.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[28/Jul/2022:17:23:35 +0200] 205.185.116.89 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 310
[28/Jul/2022:17:23:41 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314
[28/Jul/2022:18:32:18 +0200] 159.203.95.59 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[28/Jul/2022:18:32:20 +0200] 159.203.95.59 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754
[28/Jul/2022:18:32:22 +0200] 159.203.95.59 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150
[28/Jul/2022:18:39:17 +0200] 113.87.51.90 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388
[28/Jul/2022:18:39:18 +0200] 113.87.51.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:18:44:06 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Jul/2022:20:21:16 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[28/Jul/2022:20:28:49 +0200] 142.93.184.222 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[28/Jul/2022:20:28:51 +0200] 142.93.184.222 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754
[28/Jul/2022:20:28:53 +0200] 142.93.184.222 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150
[28/Jul/2022:23:31:45 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[29/Jul/2022:00:52:56 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[29/Jul/2022:00:53:02 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[29/Jul/2022:00:53:04 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[29/Jul/2022:00:53:04 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[29/Jul/2022:00:53:07 +0200] 94.102.49.193 TLSv1.2 AES256-SHA "quit" 379
[29/Jul/2022:00:53:07 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393
[29/Jul/2022:00:53:08 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394
[29/Jul/2022:00:53:08 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407
[29/Jul/2022:00:53:09 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309
[29/Jul/2022:00:53:09 +0200] 94.102.49.193 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379
[29/Jul/2022:01:07:17 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[29/Jul/2022:01:18:24 +0200] 80.24.133.46 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307