[25/Sep/2022:02:37:39 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.awscredentials HTTP/1.1" 316 [25/Sep/2022:02:37:39 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.awscredentials HTTP/1.1" 316 [25/Sep/2022:03:10:05 +0200] 205.210.31.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [25/Sep/2022:03:52:15 +0200] 89.248.165.52 - - "-" - [25/Sep/2022:04:26:02 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /CSS/Miniweb.css HTTP/1.1" 398 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1664072764 HTTP/1.1" 407 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal0000.htm HTTP/1.1" 397 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl HTTP/1.1" 401 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 424 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /menu.aspx HTTP/1.1" 392 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/HEAD HTTP/1.1" 392 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /scripts/WPnBr.dll HTTP/1.1" 400 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /__Additional HTTP/1.1" 395 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools/default/buckets HTTP/1.1" 404 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 396 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /c5sQ HTTP/1.1" 387 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docs/cplugError.html/ HTTP/1.1" 404 [25/Sep/2022:04:26:04 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388 [25/Sep/2022:04:26:06 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [25/Sep/2022:04:26:19 +0200] 195.96.137.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [25/Sep/2022:04:38:39 +0200] 216.218.206.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [25/Sep/2022:04:44:50 +0200] 23.90.160.138 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:04:45:11 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [25/Sep/2022:04:47:01 +0200] 216.218.206.68 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [25/Sep/2022:04:51:11 +0200] 216.218.206.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:05:26:42 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET /remote/login HTTP/1.1" 309 [25/Sep/2022:05:54:00 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [25/Sep/2022:05:54:00 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:05:54:01 +0200] 167.248.133.61 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [25/Sep/2022:06:00:56 +0200] 192.241.219.73 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [25/Sep/2022:09:50:38 +0200] 192.241.219.197 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:10:37:17 +0200] 43.131.66.209 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [25/Sep/2022:10:37:37 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [25/Sep/2022:10:37:40 +0200] 205.185.116.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:10:37:40 +0200] 205.185.121.69 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [25/Sep/2022:10:37:43 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [25/Sep/2022:10:49:05 +0200] 128.14.134.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:11:06:43 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [25/Sep/2022:13:31:32 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [25/Sep/2022:16:04:25 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:16:36:09 +0200] 100.26.232.66 TLSv1.2 AES256-SHA "GET /wp-config.php-backup HTTP/1.1" 316 [25/Sep/2022:17:02:00 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [25/Sep/2022:17:02:00 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [25/Sep/2022:17:02:01 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [25/Sep/2022:17:56:07 +0200] 68.183.105.63 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/v1 HTTP/1.1" 305 [25/Sep/2022:17:56:29 +0200] 192.46.231.219 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [25/Sep/2022:18:33:23 +0200] 192.241.220.234 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [25/Sep/2022:18:48:48 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [25/Sep/2022:19:24:03 +0200] 163.123.143.186 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [25/Sep/2022:19:24:04 +0200] 163.123.143.186 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [25/Sep/2022:20:00:56 +0200] 192.241.192.196 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [25/Sep/2022:20:02:56 +0200] 198.199.93.157 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [25/Sep/2022:20:04:35 +0200] 192.241.192.196 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [26/Sep/2022:00:27:36 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [26/Sep/2022:00:27:37 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/.env HTTP/1.1" 313 [26/Sep/2022:00:27:38 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/.env HTTP/1.1" 317 [26/Sep/2022:00:27:38 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-admin/.env HTTP/1.1" 316 [26/Sep/2022:00:27:39 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /library/.env HTTP/1.1" 315 [26/Sep/2022:00:27:40 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /new/.env HTTP/1.1" 312 [26/Sep/2022:00:27:40 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 314 [26/Sep/2022:00:27:41 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /old/.env HTTP/1.1" 312 [26/Sep/2022:00:27:42 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /local/.env HTTP/1.1" 314 [26/Sep/2022:00:27:42 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 312 [26/Sep/2022:00:27:43 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /blog/.env HTTP/1.1" 314 [26/Sep/2022:00:27:44 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crm/.env HTTP/1.1" 312 [26/Sep/2022:00:27:44 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 314 [26/Sep/2022:00:27:45 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [26/Sep/2022:00:27:46 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 312 [26/Sep/2022:00:27:46 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/config/.env HTTP/1.1" 318 [26/Sep/2022:00:27:47 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /apps/.env HTTP/1.1" 313 [26/Sep/2022:00:27:48 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /audio/.env HTTP/1.1" 314 [26/Sep/2022:00:27:48 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/.env HTTP/1.1" 316 [26/Sep/2022:00:27:49 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 315 [26/Sep/2022:00:27:50 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /src/.env HTTP/1.1" 312 [26/Sep/2022:00:27:50 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /base/.env HTTP/1.1" 313 [26/Sep/2022:00:27:51 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 313 [26/Sep/2022:00:27:51 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/laravel/.env HTTP/1.1" 320 [26/Sep/2022:00:27:52 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 315 [26/Sep/2022:00:27:53 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /protected/.env HTTP/1.1" 316 [26/Sep/2022:00:27:54 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /newsite/.env HTTP/1.1" 315 [26/Sep/2022:00:27:54 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www/.env HTTP/1.1" 311 [26/Sep/2022:00:28:06 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sites/all/libraries/mailchimp/.env HTTP/1.1" 329 [26/Sep/2022:00:28:07 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/.env HTTP/1.1" 315 [26/Sep/2022:00:28:07 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 315 [26/Sep/2022:00:28:08 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.com/.env HTTP/1.1" 311 [26/Sep/2022:00:28:09 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 307 [26/Sep/2022:00:52:17 +0200] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/Sep/2022:01:15:28 +0200] 198.235.24.128 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [26/Sep/2022:01:25:29 +0200] 77.73.134.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 314 [26/Sep/2022:01:25:29 +0200] 77.73.134.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /ckeditor/plugins/imageuploader/styles.min.css HTTP/1.1" 326 [26/Sep/2022:01:25:29 +0200] 77.73.134.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /uploadify/jquery.uploadify.v2.1.4.js HTTP/1.1" 318 [26/Sep/2022:01:26:20 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Sep/2022:01:26:20 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:01:26:20 +0200] 167.94.145.58 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Sep/2022:01:39:28 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301