[07/Nov/2022:01:11:32 +0100] 52.43.213.171 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [07/Nov/2022:01:19:16 +0100] 34.218.250.51 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [07/Nov/2022:02:37:03 +0100] 34.205.143.54 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [07/Nov/2022:03:47:11 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [07/Nov/2022:04:02:25 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at_dump.sql HTTP/1.1" 393 [07/Nov/2022:04:08:45 +0100] 192.241.206.65 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:04:11:05 +0100] 192.241.197.119 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [07/Nov/2022:05:11:03 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at-dump.sql HTTP/1.1" 393 [07/Nov/2022:06:06:22 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [07/Nov/2022:06:27:29 +0100] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [07/Nov/2022:06:31:42 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at_backup.sql HTTP/1.1" 413 [07/Nov/2022:07:25:43 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:08:53:29 +0100] 128.14.136.78 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [07/Nov/2022:08:58:46 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at-backup.sql HTTP/1.1" 413 [07/Nov/2022:09:55:23 +0100] 192.241.212.19 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [07/Nov/2022:10:14:43 +0100] 74.82.47.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:10:24:44 +0100] 74.82.47.16 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [07/Nov/2022:10:29:31 +0100] 74.82.47.40 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:10:42:34 +0100] 185.224.128.201 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/assets/js/views/login.js HTTP/1.0" 407 [07/Nov/2022:10:44:36 +0100] 103.43.19.20 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:11:20:38 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backupharm.at.sql HTTP/1.1" 394 [07/Nov/2022:11:52:37 +0100] 109.206.243.220 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [07/Nov/2022:12:30:07 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup-klub.kornland.at.sql HTTP/1.1" 413 [07/Nov/2022:12:52:54 +0100] 185.7.214.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [07/Nov/2022:13:34:52 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 314 [07/Nov/2022:13:34:53 +0100] 40.77.167.97 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 314 [07/Nov/2022:13:34:58 +0100] 207.46.13.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [07/Nov/2022:13:40:06 +0100] 128.1.248.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:13:41:09 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup-easyzumfuehrerschein.com.sql HTTP/1.1" 429 [07/Nov/2022:13:41:11 +0100] 71.6.232.22 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:14:20:33 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [07/Nov/2022:14:21:28 +0100] 106.75.179.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:14:55:04 +0100] 23.251.102.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:15:15:10 +0100] 192.241.208.162 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [07/Nov/2022:15:18:23 +0100] 193.235.141.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [07/Nov/2022:16:49:47 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db.sql.gz HTTP/1.1" 386 [07/Nov/2022:17:13:59 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [07/Nov/2022:17:14:00 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [07/Nov/2022:17:14:01 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [07/Nov/2022:17:14:03 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [07/Nov/2022:17:14:04 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [07/Nov/2022:17:14:04 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [07/Nov/2022:17:14:05 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [07/Nov/2022:17:14:06 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [07/Nov/2022:17:14:07 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [07/Nov/2022:17:14:08 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [07/Nov/2022:17:14:09 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [07/Nov/2022:17:14:10 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [07/Nov/2022:17:14:11 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [07/Nov/2022:17:14:12 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [07/Nov/2022:17:14:14 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [07/Nov/2022:17:14:15 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [07/Nov/2022:17:14:16 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [07/Nov/2022:17:14:17 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [07/Nov/2022:17:14:18 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [07/Nov/2022:17:14:19 +0100] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [07/Nov/2022:18:04:46 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db.sql.gz HTTP/1.1" 395 [07/Nov/2022:18:18:34 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dbdump.sql.gz HTTP/1.1" 399 [07/Nov/2022:18:33:19 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [07/Nov/2022:18:42:42 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dbdump.sql.gz HTTP/1.1" 390 [07/Nov/2022:19:51:22 +0100] 165.227.45.97 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [07/Nov/2022:19:51:24 +0100] 165.227.45.97 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [07/Nov/2022:19:51:29 +0100] 165.227.45.97 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [07/Nov/2022:20:21:31 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database.sql.gz HTTP/1.1" 401 [07/Nov/2022:20:25:08 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database.sql.gz HTTP/1.1" 409 [07/Nov/2022:20:30:04 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database.sql.gz HTTP/1.1" 392 [07/Nov/2022:21:23:31 +0100] 194.180.48.125 TLSv1.2 AES256-SHA "GET /docker-compose.yml HTTP/1.1" 312 [07/Nov/2022:22:10:21 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup.sql.gz HTTP/1.1" 399 [07/Nov/2022:22:31:55 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup.sql.gz HTTP/1.1" 407 [07/Nov/2022:23:11:23 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [07/Nov/2022:23:37:58 +0100] 205.210.31.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [07/Nov/2022:23:41:33 +0100] 134.122.8.49 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 380 [08/Nov/2022:00:13:53 +0100] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Nov/2022:00:19:27 +0100] 157.55.39.68 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [08/Nov/2022:00:19:29 +0100] 157.55.39.68 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [08/Nov/2022:00:19:36 +0100] 207.46.13.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [08/Nov/2022:00:25:41 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /localhost.sql.gz HTTP/1.1" 410