[24/Dec/2022:01:01:23 +0100] 45.195.66.224 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.vscode/sftp.json HTTP/1.1" 411 [24/Dec/2022:01:03:30 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Dec/2022:01:08:43 +0100] 35.88.218.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Dec/2022:01:09:32 +0100] 35.90.223.101 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Dec/2022:01:43:46 +0100] 192.241.193.94 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [24/Dec/2022:02:07:08 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/db.tar HTTP/1.1" 386 [24/Dec/2022:02:11:37 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/db.tar HTTP/1.1" 395 [24/Dec/2022:02:33:44 +0100] 165.22.62.204 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Dec/2022:02:38:06 +0100] 67.205.176.132 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [24/Dec/2022:02:42:13 +0100] 67.205.176.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Dec/2022:03:40:57 +0100] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:03:57:02 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/dbdump.tar HTTP/1.1" 399 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /docker/.env HTTP/1.1" 394 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /Dockerrun.aws.json HTTP/1.1" 401 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.aws/config/ HTTP/1.1" 395 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /admin/.env HTTP/1.1" 393 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /local/.env HTTP/1.1" 393 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.gitlab-ci.yml HTTP/1.1" 397 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 387 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.aws/credentials HTTP/1.1" 399 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /api/.env HTTP/1.1" 391 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /core/.env HTTP/1.1" 392 [24/Dec/2022:04:49:01 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /wp-config.php-backup.php HTTP/1.1" 407 [24/Dec/2022:05:37:07 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [24/Dec/2022:06:05:31 +0100] 162.243.152.23 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:06:14:25 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:07:05:50 +0100] 157.55.39.65 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Dec/2022:07:34:36 +0100] 101.68.211.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [24/Dec/2022:07:36:12 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [24/Dec/2022:07:50:05 +0100] 142.93.146.234 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [24/Dec/2022:07:50:08 +0100] 142.93.146.234 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [24/Dec/2022:07:50:16 +0100] 142.93.146.234 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:08:37:26 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [24/Dec/2022:08:42:00 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:08:42:25 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [24/Dec/2022:08:42:49 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [24/Dec/2022:08:58:03 +0100] 81.70.9.83 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:08:58:29 +0100] 81.70.9.83 - - "-" - [24/Dec/2022:09:17:19 +0100] 141.255.167.186 TLSv1.2 AES256-SHA "GET /.aws/credentials HTTP/1.1" 311 [24/Dec/2022:09:18:07 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/localhost_db.tar HTTP/1.1" 405 [24/Dec/2022:09:19:18 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/localhost_db.tar HTTP/1.1" 396 [24/Dec/2022:09:20:15 +0100] 141.255.167.186 TLSv1.2 AES256-SHA "GET /.gitlab-ci.yml HTTP/1.1" 311 [24/Dec/2022:09:21:24 +0100] 141.255.167.186 TLSv1.2 AES256-SHA "GET /Dockerrun.aws.json HTTP/1.1" 314 [24/Dec/2022:10:36:12 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:10:40:07 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/localhost-db.tar HTTP/1.1" 413 [24/Dec/2022:10:45:00 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Dec/2022:10:46:14 +0100] 154.7.179.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.ftpconfig HTTP/1.1" 404 [24/Dec/2022:10:46:45 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [24/Dec/2022:10:50:25 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:10:51:24 +0100] 65.49.20.66 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [24/Dec/2022:10:52:02 +0100] 27.189.126.71 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Dec/2022:11:36:29 +0100] 109.248.6.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [24/Dec/2022:12:12:00 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/localhost_database.tar HTTP/1.1" 411 [24/Dec/2022:12:18:24 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/localhost_database.tar HTTP/1.1" 402 [24/Dec/2022:12:40:53 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.env.development HTTP/1.1" 399 [24/Dec/2022:12:40:53 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.env.production HTTP/1.1" 398 [24/Dec/2022:12:40:53 +0100] 81.17.22.106 TLSv1.2 AES256-SHA "GET /.env.test HTTP/1.1" 392 [24/Dec/2022:13:04:08 +0100] 167.94.138.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Dec/2022:13:04:09 +0100] 167.94.138.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:13:04:10 +0100] 167.94.138.117 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [24/Dec/2022:13:32:17 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:14:46:23 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:15:23:20 +0100] 192.241.199.57 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [24/Dec/2022:15:33:28 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/easyzumfuehrerschein.comdb.tar HTTP/1.1" 427 [24/Dec/2022:15:46:30 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:15:54:11 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/klub.kornland.atdb.tar HTTP/1.1" 411 [24/Dec/2022:15:55:59 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [24/Dec/2022:16:46:01 +0100] 193.118.53.194 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:16:51:45 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:17:14:29 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/harm.at_db.tar HTTP/1.1" 394 [24/Dec/2022:17:46:53 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:18:01:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [24/Dec/2022:18:01:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [24/Dec/2022:18:01:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [24/Dec/2022:18:01:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [24/Dec/2022:18:01:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [24/Dec/2022:18:01:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [24/Dec/2022:18:01:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [24/Dec/2022:18:01:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [24/Dec/2022:18:01:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [24/Dec/2022:18:01:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [24/Dec/2022:18:01:46 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [24/Dec/2022:18:01:46 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [24/Dec/2022:18:01:47 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [24/Dec/2022:18:01:48 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [24/Dec/2022:18:01:48 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [24/Dec/2022:18:01:49 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [24/Dec/2022:18:01:49 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [24/Dec/2022:18:01:50 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [24/Dec/2022:18:01:51 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [24/Dec/2022:18:01:51 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [24/Dec/2022:18:35:39 +0100] 192.241.226.14 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [24/Dec/2022:18:38:18 +0100] 157.55.39.148 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [24/Dec/2022:18:38:19 +0100] 157.55.39.148 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [24/Dec/2022:18:38:27 +0100] 157.55.39.158 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Dec/2022:18:52:48 +0100] 157.55.39.65 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Dec/2022:19:02:10 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/harm.at-db.tar HTTP/1.1" 394 [24/Dec/2022:19:47:05 +0100] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:21:35:11 +0100] 185.7.214.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [24/Dec/2022:21:59:00 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/harm.at-database.tar HTTP/1.1" 400 [24/Dec/2022:22:06:16 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/easyzumfuehrerschein.com-database.tar HTTP/1.1" 434 [24/Dec/2022:22:32:54 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Dec/2022:22:32:55 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:22:32:55 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [24/Dec/2022:22:33:46 +0100] 143.110.220.218 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [24/Dec/2022:22:33:47 +0100] 143.110.220.218 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [24/Dec/2022:22:33:51 +0100] 143.110.220.218 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Dec/2022:23:04:31 +0100] 27.124.12.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /news/85267.html HTTP/1.1" 397 [24/Dec/2022:23:46:50 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/harmdb.tar HTTP/1.1" 390 [25/Dec/2022:00:16:13 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [25/Dec/2022:00:20:57 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db/easyzumfuehrerscheindb.tar HTTP/1.1" 423 [25/Dec/2022:00:56:26 +0100] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301