[23/Nov/2022:01:03:50 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at_db.tar HTTP/1.1" 409 [23/Nov/2022:01:03:54 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at_db.tar HTTP/1.1" 391 [23/Nov/2022:01:29:19 +0100] 35.86.140.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [23/Nov/2022:01:32:22 +0100] 18.236.93.154 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [23/Nov/2022:01:47:55 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.com_db.tar HTTP/1.1" 425 [23/Nov/2022:01:59:37 +0100] 185.7.214.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [23/Nov/2022:02:51:08 +0100] 45.83.66.219 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 293 [23/Nov/2022:02:51:08 +0100] 45.83.64.168 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 293 [23/Nov/2022:03:05:17 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.com-db.tar HTTP/1.1" 425 [23/Nov/2022:03:41:16 +0100] 20.120.216.120 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:04:37:27 +0100] 45.94.74.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [23/Nov/2022:04:51:51 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at_database.tar HTTP/1.1" 397 [23/Nov/2022:05:03:09 +0100] 110.238.104.198 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:05:05:58 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at_database.tar HTTP/1.1" 415 [23/Nov/2022:05:08:52 +0100] 192.241.193.183 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:05:40:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [23/Nov/2022:05:40:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [23/Nov/2022:05:40:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [23/Nov/2022:05:40:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [23/Nov/2022:05:40:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [23/Nov/2022:05:40:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [23/Nov/2022:05:40:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [23/Nov/2022:05:40:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [23/Nov/2022:05:40:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [23/Nov/2022:05:40:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [23/Nov/2022:05:40:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [23/Nov/2022:05:40:25 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [23/Nov/2022:05:40:25 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [23/Nov/2022:05:40:26 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [23/Nov/2022:05:40:27 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [23/Nov/2022:05:40:27 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [23/Nov/2022:05:40:28 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [23/Nov/2022:05:40:28 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [23/Nov/2022:05:40:29 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [23/Nov/2022:05:40:29 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [23/Nov/2022:06:17:55 +0100] 192.241.213.55 TLSv1.2 AES256-SHA "GET /ReportServer HTTP/1.1" 307 [23/Nov/2022:06:28:27 +0100] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [23/Nov/2022:06:36:45 +0100] 192.241.212.247 TLSv1.2 AES256-SHA "GET /login HTTP/1.1" 305 [23/Nov/2022:07:21:44 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.com-database.tar HTTP/1.1" 431 [23/Nov/2022:07:37:19 +0100] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:07:55:45 +0100] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [23/Nov/2022:08:24:55 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [23/Nov/2022:08:37:30 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:08:53:17 +0100] 65.49.20.75 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:09:02:57 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at_dump.tar HTTP/1.1" 411 [23/Nov/2022:09:03:12 +0100] 65.49.20.103 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [23/Nov/2022:09:08:17 +0100] 65.49.20.107 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:09:09:19 +0100] 65.49.20.75 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:09:15:07 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Nov/2022:09:16:42 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at_dump.tar HTTP/1.1" 393 [23/Nov/2022:09:22:42 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:09:23:03 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [23/Nov/2022:09:23:45 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [23/Nov/2022:10:20:33 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub.kornland.at-dump.tar HTTP/1.1" 411 [23/Nov/2022:10:23:36 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at-dump.tar HTTP/1.1" 393 [23/Nov/2022:10:26:37 +0100] 185.191.171.39 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [23/Nov/2022:10:29:04 +0100] 54.36.148.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [23/Nov/2022:11:09:28 +0100] 51.15.195.246 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [23/Nov/2022:11:38:40 +0100] 205.210.31.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Nov/2022:11:43:15 +0100] 193.118.53.194 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:12:10:34 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.combackup.tar HTTP/1.1" 428 [23/Nov/2022:13:32:05 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:14:00:19 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at_backup.tar HTTP/1.1" 395 [23/Nov/2022:14:23:06 +0100] 207.46.13.234 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [23/Nov/2022:14:23:08 +0100] 207.46.13.234 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [23/Nov/2022:14:23:17 +0100] 40.77.167.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [23/Nov/2022:14:34:45 +0100] 167.94.138.63 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:14:34:45 +0100] 167.94.138.63 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [23/Nov/2022:14:46:17 +0100] 192.241.204.141 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [23/Nov/2022:15:12:07 +0100] 46.101.249.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:15:46:08 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein.com-backup.tar HTTP/1.1" 429 [23/Nov/2022:15:59:51 +0100] 46.101.249.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:17:21:21 +0100] 163.172.180.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 392 [23/Nov/2022:17:33:40 +0100] 46.101.249.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:17:49:26 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [23/Nov/2022:18:18:18 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backupklub.kornland.at.tar HTTP/1.1" 412 [23/Nov/2022:18:29:36 +0100] 110.184.161.183 TLSv1.2 AES256-SHA "-" - [23/Nov/2022:18:29:37 +0100] 110.184.161.183 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Nov/2022:18:39:19 +0100] 185.163.109.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Nov/2022:18:39:24 +0100] 185.163.109.66 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Nov/2022:18:39:25 +0100] 185.163.109.66 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Nov/2022:18:39:25 +0100] 185.163.109.66 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Nov/2022:18:39:29 +0100] 185.163.109.66 TLSv1.2 AES256-SHA "quit" 379 [23/Nov/2022:18:39:30 +0100] 185.163.109.66 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [23/Nov/2022:18:39:31 +0100] 185.163.109.66 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 394 [23/Nov/2022:18:39:31 +0100] 185.163.109.66 TLSv1.2 AES256-SHA "GET /.well-known/security.txt HTTP/1.1" 407 [23/Nov/2022:18:39:33 +0100] 185.163.109.66 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [23/Nov/2022:18:39:34 +0100] 185.163.109.66 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [23/Nov/2022:19:26:35 +0100] 194.55.186.126 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [23/Nov/2022:19:29:07 +0100] 3.238.100.107 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [23/Nov/2022:19:45:02 +0100] 46.101.249.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:20:04:55 +0100] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [23/Nov/2022:20:08:35 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup-klub.kornland.at.tar HTTP/1.1" 413 [23/Nov/2022:20:22:30 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup-easyzumfuehrerschein.com.tar HTTP/1.1" 429 [23/Nov/2022:20:36:21 +0100] 89.248.163.204 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [23/Nov/2022:20:44:46 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup-harm.at.tar HTTP/1.1" 395 [23/Nov/2022:21:02:10 +0100] 46.101.249.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [23/Nov/2022:21:06:17 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [23/Nov/2022:21:06:18 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [23/Nov/2022:21:06:18 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [23/Nov/2022:21:06:19 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [23/Nov/2022:21:06:20 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [23/Nov/2022:21:06:21 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [23/Nov/2022:21:06:21 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [23/Nov/2022:21:06:22 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [23/Nov/2022:21:06:23 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [23/Nov/2022:21:06:23 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [23/Nov/2022:21:06:24 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [23/Nov/2022:21:06:25 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [23/Nov/2022:21:06:25 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [23/Nov/2022:21:06:26 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [23/Nov/2022:21:06:27 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [23/Nov/2022:21:06:27 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [23/Nov/2022:21:06:28 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [23/Nov/2022:21:06:28 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [23/Nov/2022:21:06:29 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 312 [23/Nov/2022:21:06:29 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 312 [23/Nov/2022:22:01:47 +0100] 185.7.214.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [23/Nov/2022:22:17:37 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup_harm.at.tar HTTP/1.1" 395 [23/Nov/2022:22:34:22 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backup_klub.kornland.at.tar HTTP/1.1" 413 [23/Nov/2022:23:51:26 +0100] 192.241.204.230 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [24/Nov/2022:00:00:43 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klubdb.tar HTTP/1.1" 396 [24/Nov/2022:00:12:01 +0100] 181.214.218.69 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Nov/2022:00:12:07 +0100] 34.216.27.91 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [24/Nov/2022:00:12:32 +0100] 52.42.93.224 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [24/Nov/2022:00:12:36 +0100] 52.42.93.224 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [24/Nov/2022:00:22:05 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301