194.110.203.42 - - [05/Feb/2023:01:59:05 +0100] "GET /harm_19082022.zip HTTP/1.1" 301 394 "-" "Firefox" 194.110.203.41 - - [05/Feb/2023:02:57:57 +0100] "GET /easyzumfuehrerschein_18082022.zip HTTP/1.1" 301 427 "-" "Firefox" 194.110.203.42 - - [05/Feb/2023:03:18:00 +0100] "GET /klub_18082022.zip HTTP/1.1" 301 403 "-" "Firefox" 23.251.102.74 - - [05/Feb/2023:03:57:16 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 194.110.203.46 - - [05/Feb/2023:04:25:14 +0100] "GET /harm_18082022.zip HTTP/1.1" 301 394 "-" "Firefox" 194.110.203.44 - - [05/Feb/2023:05:29:11 +0100] "GET /harm_17082022.zip HTTP/1.1" 301 394 "-" "Firefox" 194.110.203.45 - - [05/Feb/2023:05:40:08 +0100] "GET /easyzumfuehrerschein_16082022.zip HTTP/1.1" 301 427 "-" "Firefox" 65.49.20.69 - - [05/Feb/2023:06:03:09 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 65.49.20.69 - - [05/Feb/2023:06:12:41 +0100] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 194.110.203.45 - - [05/Feb/2023:06:16:44 +0100] "GET /klub_16082022.zip HTTP/1.1" 301 403 "-" "Firefox" 65.49.20.69 - - [05/Feb/2023:06:17:42 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" 65.49.20.69 - - [05/Feb/2023:06:19:19 +0100] "GET /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 194.110.203.45 - - [05/Feb/2023:06:55:49 +0100] "GET /harm_16082022.zip HTTP/1.1" 301 394 "-" "Firefox" 162.243.146.31 - - [05/Feb/2023:07:34:18 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 51.222.253.1 - - [05/Feb/2023:08:27:03 +0100] "GET /robots.txt HTTP/1.1" 301 314 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 54.36.148.116 - - [05/Feb/2023:08:27:05 +0100] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 103.149.192.152 - - [05/Feb/2023:08:38:42 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.110.203.39 - - [05/Feb/2023:09:39:10 +0100] "GET /klub_13082022.zip HTTP/1.1" 301 403 "-" "Firefox" 4.184.57.28 - - [05/Feb/2023:10:06:51 +0100] "GET / HTTP/1.1" 301 301 "-" "Python/3.10 aiohttp/3.8.3" 194.110.203.42 - - [05/Feb/2023:12:34:46 +0100] "GET /klub_10082022.zip HTTP/1.1" 301 403 "-" "Firefox" 162.221.192.26 - - [05/Feb/2023:12:44:00 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 194.110.203.44 - - [05/Feb/2023:13:43:16 +0100] "GET /easyzumfuehrerschein_10082022.zip HTTP/1.1" 301 427 "-" "Firefox" 194.110.203.42 - - [05/Feb/2023:13:48:54 +0100] "GET /klub_09082022.zip HTTP/1.1" 301 403 "-" "Firefox" 35.216.242.36 - - [05/Feb/2023:13:57:19 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 91.240.118.188 - - [05/Feb/2023:14:22:00 +0100] "GET / HTTP/1.1" 301 297 "-" "Apache-HttpClient/4.5.12 (Java/1.8.0_352)" 194.110.203.41 - - [05/Feb/2023:14:38:48 +0100] "GET /easyzumfuehrerschein_09082022.zip HTTP/1.1" 301 427 "-" "Firefox" 198.235.24.153 - - [05/Feb/2023:14:39:10 +0100] "GET / HTTP/1.1" 301 393 "-" "-" 194.110.203.45 - - [05/Feb/2023:14:51:48 +0100] "GET /harm_08082022.zip HTTP/1.1" 301 394 "-" "Firefox" 194.110.203.45 - - [05/Feb/2023:15:05:23 +0100] "GET /klub_08082022.zip HTTP/1.1" 301 403 "-" "Firefox" 183.136.225.9 - - [05/Feb/2023:16:39:06 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 183.136.225.9 - - [05/Feb/2023:16:39:13 +0100] "GET /robots.txt HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 23.251.102.74 - - [05/Feb/2023:16:41:02 +0100] "GET /cgi-bin/config.exp HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 205.210.31.39 - - [05/Feb/2023:16:56:46 +0100] "GET / HTTP/1.1" 301 379 "-" "-" 198.12.231.234 - - [05/Feb/2023:17:53:04 +0100] "GET /harm_06082022.zip HTTP/1.1" 301 394 "-" "Firefox" 104.236.128.11 - - [05/Feb/2023:18:19:05 +0100] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 301 328 "-" "Mozilla/5.0 zgrab/0.x" 194.110.203.41 - - [05/Feb/2023:18:30:13 +0100] "GET /klub_05082022.zip HTTP/1.1" 301 403 "-" "Firefox" 205.210.31.185 - - [05/Feb/2023:18:52:57 +0100] "GET / HTTP/1.1" 301 377 "-" "-" 152.89.196.211 - - [05/Feb/2023:19:07:44 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.195.57 - - [05/Feb/2023:19:33:23 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 167.248.133.47 - - [05/Feb/2023:20:23:49 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.248.133.47 - - [05/Feb/2023:20:23:51 +0100] "PRI * HTTP/2.0" 400 379 "-" "-" 141.98.10.56 - - [05/Feb/2023:20:38:28 +0100] "GET / HTTP/1.1" 301 383 "-" "Hello World" 167.94.145.60 - - [05/Feb/2023:20:55:23 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 167.94.145.60 - - [05/Feb/2023:20:55:23 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.145.60 - - [05/Feb/2023:20:55:23 +0100] "PRI * HTTP/2.0" 400 379 "-" "-" 164.52.0.83 - - [05/Feb/2023:21:15:31 +0100] "{\"id\": 1, \"method\": \"mining.subscribe\", \"params\": [], \"jsonrpc\":\"2.0\"}" 400 379 "-" "-" 141.98.10.56 - - [05/Feb/2023:21:54:53 +0100] "GET / HTTP/1.1" 301 383 "-" "Hello World" 51.15.27.89 - - [05/Feb/2023:22:29:26 +0100] "GET /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 194.110.203.46 - - [05/Feb/2023:23:06:26 +0100] "GET /easyzumfuehrerschein_01082022.zip HTTP/1.1" 301 427 "-" "Firefox" 193.235.141.90 - - [05/Feb/2023:23:22:22 +0100] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 60.217.75.70 - - [05/Feb/2023:23:44:10 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 36.156.28.131 - - [05/Feb/2023:23:50:15 +0100] "GET / HTTP/1.0" 301 383 "-" "-" 36.156.28.131 - - [05/Feb/2023:23:50:18 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 36.156.28.131 - - [05/Feb/2023:23:50:30 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 36.156.28.131 - - [05/Feb/2023:23:50:42 +0100] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 36.156.28.131 - - [05/Feb/2023:23:50:54 +0100] "GET /favicon.ico/ HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 36.156.28.131 - - [05/Feb/2023:23:51:06 +0100] "GET /robots.txt HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 36.156.28.131 - - [05/Feb/2023:23:51:17 +0100] "GET /.well-known/security.txt HTTP/1.1" 301 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36" 194.110.203.44 - - [06/Feb/2023:00:19:54 +0100] "GET /easyzumfuehrerschein_31072022.zip HTTP/1.1" 301 427 "-" "Firefox" 109.237.98.226 - - [06/Feb/2023:00:37:22 +0100] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:23 +0100] "POST /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:23 +0100] "GET /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:24 +0100] "POST /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:24 +0100] "GET /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:25 +0100] "POST /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:25 +0100] "GET /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:26 +0100] "POST /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:26 +0100] "GET /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:27 +0100] "POST /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:27 +0100] "GET /test.php HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:28 +0100] "POST /test.php HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:28 +0100] "GET /laravel/.env HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:29 +0100] "POST /laravel/.env HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:30 +0100] "GET /demo/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:30 +0100] "POST /demo/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:30 +0100] "GET /web/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:31 +0100] "POST /web/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:32 +0100] "GET /phpinfo HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [06/Feb/2023:00:37:32 +0100] "POST /phpinfo HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.110.203.42 - - [06/Feb/2023:00:54:40 +0100] "GET /harm_31072022.zip HTTP/1.1" 301 394 "-" "Firefox" 35.233.62.116 - - [06/Feb/2023:00:59:11 +0100] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.28.2"