[29/Apr/2023:02:00:16 +0200] 35.91.188.229 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [29/Apr/2023:05:15:25 +0200] 205.210.31.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [29/Apr/2023:05:32:06 +0200] 185.224.128.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [29/Apr/2023:06:03:09 +0200] 64.62.197.131 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:06:10:10 +0200] 64.62.197.129 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [29/Apr/2023:06:12:16 +0200] 64.62.197.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:06:13:32 +0200] 64.62.197.122 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [29/Apr/2023:06:13:44 +0200] 64.62.197.134 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [29/Apr/2023:06:39:42 +0200] 199.45.154.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:39:42 +0200] 199.45.154.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:39:56 +0200] 199.45.155.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:39:56 +0200] 199.45.155.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:41:16 +0200] 43.248.128.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:41:16 +0200] 43.248.128.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:43:33 +0200] 171.67.71.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:43:33 +0200] 171.67.71.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:44:33 +0200] 38.110.46.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:06:44:33 +0200] 38.110.46.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [29/Apr/2023:07:06:14 +0200] 134.209.233.84 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:07:19:00 +0200] 162.243.185.213 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [29/Apr/2023:07:19:01 +0200] 162.243.185.213 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [29/Apr/2023:07:19:02 +0200] 162.243.185.213 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [29/Apr/2023:08:00:43 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [29/Apr/2023:08:55:51 +0200] 87.236.176.56 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:09:42:29 +0200] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:10:03:15 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [29/Apr/2023:10:03:16 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [29/Apr/2023:10:03:17 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [29/Apr/2023:10:03:18 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [29/Apr/2023:10:03:18 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [29/Apr/2023:10:03:20 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [29/Apr/2023:10:03:20 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [29/Apr/2023:10:03:21 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [29/Apr/2023:10:03:22 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [29/Apr/2023:10:03:22 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [29/Apr/2023:11:11:04 +0200] 193.235.141.120 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [29/Apr/2023:12:17:04 +0200] 94.102.61.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:12:36:26 +0200] 152.89.196.222 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [29/Apr/2023:12:40:50 +0200] 8.210.161.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=9fgBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" 340 [29/Apr/2023:13:03:34 +0200] 107.170.249.22 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [29/Apr/2023:13:05:16 +0200] 20.100.168.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [29/Apr/2023:14:06:17 +0200] 167.248.133.38 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:14:06:17 +0200] 167.248.133.38 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [29/Apr/2023:15:02:18 +0200] 35.88.22.250 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [29/Apr/2023:15:16:44 +0200] 8.210.161.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 308 [29/Apr/2023:16:39:44 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [29/Apr/2023:16:50:44 +0200] 54.184.230.180 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [29/Apr/2023:16:51:20 +0200] 35.92.165.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [29/Apr/2023:18:04:12 +0200] 107.170.252.8 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [29/Apr/2023:18:11:54 +0200] 198.199.97.240 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [29/Apr/2023:18:13:38 +0200] 198.199.111.75 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [29/Apr/2023:21:14:10 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [29/Apr/2023:21:14:11 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [29/Apr/2023:21:14:11 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [30/Apr/2023:00:07:11 +0200] 51.15.205.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [30/Apr/2023:00:09:27 +0200] 198.199.108.164 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [30/Apr/2023:00:20:49 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 336 [30/Apr/2023:00:20:49 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?a=fetch&content=die(md5(cvbytigdfgfdg)) HTTP/1.1" 354 [30/Apr/2023:01:04:58 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /index.php?function=call_user_func_array&s=/Index/%09hink%07pp/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 400 [30/Apr/2023:01:05:01 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /TP/public/index.php?function=call_user_func_array&s=index/\\think\\app/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 402 [30/Apr/2023:01:05:04 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /index.php?function=call_user_func_array&s=index/%09hink%07pp/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 398 [30/Apr/2023:01:10:11 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [30/Apr/2023:01:50:00 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?\"\" HTTP/1.1" 344 [30/Apr/2023:01:50:01 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?'' HTTP/1.1" 342 [30/Apr/2023:01:50:02 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?'{${print(9347655345-4954366)}}' HTTP/1.1" 342 [30/Apr/2023:01:50:03 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?\"{${print(9347655345-4954366)}}\" HTTP/1.1" 344 [30/Apr/2023:01:50:04 +0200] 45.61.185.37 TLSv1.2 AES256-SHA "GET /?'+print(9347655345-4954366)+' HTTP/1.1" 335