[04/Aug/2022:02:10:36 +0200] 207.180.254.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [04/Aug/2022:02:10:36 +0200] 207.180.254.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [04/Aug/2022:03:23:18 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Aug/2022:03:34:50 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Aug/2022:04:17:50 +0200] 192.241.221.170 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [04/Aug/2022:05:00:40 +0200] 192.241.221.41 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Aug/2022:05:10:13 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [04/Aug/2022:05:52:04 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [04/Aug/2022:05:59:52 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [04/Aug/2022:06:04:18 +0200] 43.134.234.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Aug/2022:08:17:41 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [04/Aug/2022:09:04:35 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [04/Aug/2022:09:14:05 +0200] 64.225.7.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [04/Aug/2022:09:14:06 +0200] 64.225.7.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [04/Aug/2022:09:14:08 +0200] 64.225.7.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [04/Aug/2022:09:26:37 +0200] 34.79.222.162 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.0" 383 [04/Aug/2022:09:40:15 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [04/Aug/2022:10:11:03 +0200] 45.148.241.92 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login HTTP/1.1" 309 [04/Aug/2022:10:40:48 +0200] 162.62.191.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [04/Aug/2022:11:25:33 +0200] 94.232.45.12 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [04/Aug/2022:11:36:37 +0200] 192.241.235.175 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [04/Aug/2022:11:38:39 +0200] 192.241.237.57 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [04/Aug/2022:11:38:58 +0200] 192.241.196.212 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [04/Aug/2022:12:11:26 +0200] 209.141.55.120 - - "-" - [04/Aug/2022:12:11:29 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Aug/2022:12:11:38 +0200] 209.141.35.128 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [04/Aug/2022:12:11:39 +0200] 205.185.116.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Aug/2022:12:11:40 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 303 [04/Aug/2022:12:11:42 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Aug/2022:12:11:44 +0200] 209.141.49.169 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 310 [04/Aug/2022:12:11:45 +0200] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [04/Aug/2022:12:27:06 +0200] 185.165.171.84 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Aug/2022:12:29:42 +0200] 23.129.64.140 - - "-" - [04/Aug/2022:14:51:15 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [04/Aug/2022:15:02:16 +0200] 34.88.218.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?q=%dogy% HTTP/1.0" 396 [04/Aug/2022:15:45:07 +0200] 198.199.115.67 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [04/Aug/2022:16:49:59 +0200] 192.241.223.8 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [04/Aug/2022:17:25:18 +0200] 45.134.144.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [04/Aug/2022:17:29:18 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Aug/2022:18:04:26 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [04/Aug/2022:18:12:48 +0200] 178.32.197.80 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Aug/2022:19:03:12 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env/config HTTP/1.1" 315 [04/Aug/2022:19:03:12 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env/config HTTP/1.1" 315 [04/Aug/2022:19:34:28 +0200] 188.165.87.110 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [04/Aug/2022:19:41:17 +0200] 188.165.87.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [04/Aug/2022:20:26:56 +0200] 51.254.49.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Aug/2022:20:27:57 +0200] 144.91.106.14 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Aug/2022:20:57:50 +0200] 51.254.49.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [04/Aug/2022:21:36:33 +0200] 195.37.190.89 TLSv1.2 AES256-SHA "GET /IP/86.59.113.102 HTTP/1.1" 324 [04/Aug/2022:22:07:32 +0200] 92.118.160.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Aug/2022:23:08:02 +0200] 91.240.118.105 - - "-" - [04/Aug/2022:23:16:26 +0200] 52.24.29.158 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Aug/2022:23:18:37 +0200] 54.202.89.139 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [04/Aug/2022:23:19:32 +0200] 35.88.164.220 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [05/Aug/2022:00:04:40 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [05/Aug/2022:00:23:14 +0200] 154.89.5.125 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [05/Aug/2022:01:02:11 +0200] 157.245.206.198 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [05/Aug/2022:01:12:09 +0200] 52.37.72.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [05/Aug/2022:01:13:23 +0200] 40.77.6.79 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [05/Aug/2022:01:13:24 +0200] 40.77.6.79 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [05/Aug/2022:01:29:21 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [05/Aug/2022:01:29:21 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [05/Aug/2022:01:29:22 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379