[12/Jan/2023:01:45:02 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:02:20:56 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at-database.sql.tar HTTP/1.1" 410 [12/Jan/2023:02:54:39 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Jan/2023:02:54:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [12/Jan/2023:02:54:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [12/Jan/2023:02:54:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [12/Jan/2023:02:54:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [12/Jan/2023:02:54:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [12/Jan/2023:02:54:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [12/Jan/2023:02:54:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [12/Jan/2023:02:54:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [12/Jan/2023:02:54:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [12/Jan/2023:02:54:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [12/Jan/2023:02:54:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [12/Jan/2023:02:54:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [12/Jan/2023:02:54:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [12/Jan/2023:02:54:46 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [12/Jan/2023:02:54:46 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [12/Jan/2023:02:54:47 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [12/Jan/2023:02:54:47 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [12/Jan/2023:02:54:48 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [12/Jan/2023:02:54:48 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [12/Jan/2023:03:02:50 +0100] 54.211.50.157 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Jan/2023:04:04:23 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com-database.sql.tar HTTP/1.1" 444 [12/Jan/2023:04:16:09 +0100] 34.221.140.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jan/2023:04:17:51 +0100] 68.183.68.219 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [12/Jan/2023:04:17:51 +0100] 68.183.68.219 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [12/Jan/2023:04:17:53 +0100] 68.183.68.219 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:04:44:48 +0100] 185.180.143.6 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:04:54:22 +0100] 20.92.162.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [12/Jan/2023:05:07:24 +0100] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at_dump.sql.tar HTTP/1.1" 424 [12/Jan/2023:05:08:21 +0100] 208.100.26.235 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [12/Jan/2023:05:33:46 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at_dump.sql.tar HTTP/1.1" 406 [12/Jan/2023:05:39:56 +0100] 184.105.139.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:05:49:20 +0100] 184.105.139.69 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [12/Jan/2023:05:53:32 +0100] 184.105.139.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:05:55:04 +0100] 184.105.139.69 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [12/Jan/2023:06:30:15 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:06:41:46 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "-" - [12/Jan/2023:06:44:57 +0100] 107.170.241.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:06:45:38 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Jan/2023:07:01:51 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Jan/2023:07:01:52 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [12/Jan/2023:07:01:52 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [12/Jan/2023:07:01:53 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [12/Jan/2023:07:01:53 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [12/Jan/2023:07:01:54 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [12/Jan/2023:07:01:54 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [12/Jan/2023:07:01:54 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [12/Jan/2023:07:01:55 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [12/Jan/2023:07:01:55 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [12/Jan/2023:07:01:56 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [12/Jan/2023:07:01:56 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [12/Jan/2023:07:01:57 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [12/Jan/2023:07:01:57 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [12/Jan/2023:07:01:58 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [12/Jan/2023:07:01:58 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [12/Jan/2023:07:01:59 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [12/Jan/2023:07:01:59 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [12/Jan/2023:07:01:59 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [12/Jan/2023:07:02:00 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [12/Jan/2023:07:07:24 +0100] 45.155.126.4 TLSv1.2 AES256-SHA "-" - [12/Jan/2023:07:12:51 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at-dump.sql.tar HTTP/1.1" 406 [12/Jan/2023:07:22:58 +0100] 185.180.143.135 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:08:22:51 +0100] 185.189.182.234 TLSv1.2 AES256-SHA "GET /jJEc HTTP/1.1" 379 [12/Jan/2023:08:24:49 +0100] 157.245.60.20 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [12/Jan/2023:08:24:52 +0100] 157.245.60.20 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [12/Jan/2023:08:25:01 +0100] 157.245.60.20 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:09:02:54 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-dump.sql.tar HTTP/1.1" 424 [12/Jan/2023:09:50:55 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.atbackup.sql.tar HTTP/1.1" 425 [12/Jan/2023:09:53:13 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.combackup.sql.tar HTTP/1.1" 441 [12/Jan/2023:11:13:54 +0100] 157.245.176.111 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Jan/2023:11:58:19 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [12/Jan/2023:12:53:17 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at_backup.sql.tar HTTP/1.1" 408 [12/Jan/2023:14:08:15 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:14:13:34 +0100] 107.170.255.20 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [12/Jan/2023:15:23:07 +0100] 40.77.167.101 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 315 [12/Jan/2023:15:23:08 +0100] 40.77.167.101 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 315 [12/Jan/2023:15:23:15 +0100] 157.55.39.75 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [12/Jan/2023:15:34:04 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-backup.sql.tar HTTP/1.1" 426 [12/Jan/2023:15:36:05 +0100] 185.224.128.202 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Jan/2023:15:43:31 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:16:32:23 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [12/Jan/2023:17:25:58 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [12/Jan/2023:17:44:43 +0100] 208.100.26.248 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [12/Jan/2023:18:08:21 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backupharm.at.sql.tar HTTP/1.1" 407 [12/Jan/2023:18:32:22 +0100] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Jan/2023:18:41:01 +0100] 185.180.143.137 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:19:15:39 +0100] 198.199.107.114 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [12/Jan/2023:19:40:03 +0100] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:19:44:39 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backupklub.kornland.at.sql.tar HTTP/1.1" 425 [12/Jan/2023:19:58:20 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jan/2023:21:10:11 +0100] 87.236.176.238 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jan/2023:21:24:01 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backup-klub.kornland.at.sql.tar HTTP/1.1" 426 [12/Jan/2023:21:41:54 +0100] 165.22.56.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [12/Jan/2023:22:14:50 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backup-easyzumfuehrerschein.com.sql.tar HTTP/1.1" 442 [12/Jan/2023:22:25:08 +0100] 34.221.246.129 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jan/2023:22:26:16 +0100] 18.237.185.228 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Jan/2023:22:28:10 +0100] 35.89.201.207 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jan/2023:22:29:31 +0100] 35.81.170.242 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Jan/2023:22:50:46 +0100] 185.180.143.76 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [13/Jan/2023:00:06:27 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backup_klub.kornland.at.sql.tar HTTP/1.1" 426 [13/Jan/2023:00:08:29 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/backup_easyzumfuehrerschein.com.sql.tar HTTP/1.1" 442 [13/Jan/2023:00:17:23 +0100] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/Jan/2023:00:18:26 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [13/Jan/2023:00:18:26 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:00:18:27 +0100] 167.248.133.45 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [13/Jan/2023:00:26:00 +0100] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:00:56:33 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387