[13/Jan/2023:01:10:27 +0100] 104.131.128.22 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [13/Jan/2023:01:14:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [13/Jan/2023:01:14:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [13/Jan/2023:01:14:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [13/Jan/2023:01:14:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [13/Jan/2023:01:14:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [13/Jan/2023:01:14:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [13/Jan/2023:01:14:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [13/Jan/2023:01:14:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [13/Jan/2023:01:14:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [13/Jan/2023:01:14:18 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [13/Jan/2023:01:14:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [13/Jan/2023:01:14:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [13/Jan/2023:01:14:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [13/Jan/2023:01:14:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [13/Jan/2023:01:14:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [13/Jan/2023:01:14:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [13/Jan/2023:01:14:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [13/Jan/2023:01:14:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [13/Jan/2023:01:14:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [13/Jan/2023:01:14:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [13/Jan/2023:01:25:16 +0100] 18.236.62.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [13/Jan/2023:01:25:31 +0100] 54.201.102.116 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [13/Jan/2023:01:25:35 +0100] 54.201.102.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [13/Jan/2023:02:24:49 +0100] 68.219.120.208 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [13/Jan/2023:02:29:21 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.zip HTTP/1.1" 413 [13/Jan/2023:02:51:45 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.zip HTTP/1.1" 405 [13/Jan/2023:03:12:22 +0100] 205.210.31.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [13/Jan/2023:03:22:50 +0100] 176.58.124.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [13/Jan/2023:04:43:42 +0100] 45.33.102.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:05:35:30 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:06:37:18 +0100] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [13/Jan/2023:06:46:17 +0100] 198.199.106.214 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:07:03:21 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [13/Jan/2023:07:17:34 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:07:17:40 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET /showLogin.cc HTTP/1.1" 311 [13/Jan/2023:08:02:30 +0100] 185.180.143.71 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:08:18:15 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhostdb.zip HTTP/1.1" 401 [13/Jan/2023:08:44:25 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:09:14:21 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/Jan/2023:09:22:07 +0100] 205.210.31.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [13/Jan/2023:10:31:10 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [13/Jan/2023:10:36:57 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:10:37:24 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [13/Jan/2023:10:37:50 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [13/Jan/2023:12:08:51 +0100] 20.120.217.166 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [13/Jan/2023:13:31:26 +0100] 92.118.36.206 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:13:36:44 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhost-db.zip HTTP/1.1" 402 [13/Jan/2023:14:22:22 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [13/Jan/2023:14:22:22 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [13/Jan/2023:14:22:23 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [13/Jan/2023:14:22:24 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [13/Jan/2023:14:22:24 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [13/Jan/2023:14:22:25 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [13/Jan/2023:14:22:25 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [13/Jan/2023:14:22:26 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [13/Jan/2023:14:22:27 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [13/Jan/2023:14:22:27 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [13/Jan/2023:14:22:28 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [13/Jan/2023:14:22:29 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [13/Jan/2023:14:22:29 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [13/Jan/2023:14:22:30 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [13/Jan/2023:14:22:30 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [13/Jan/2023:14:22:31 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [13/Jan/2023:14:22:31 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [13/Jan/2023:14:22:32 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [13/Jan/2023:14:22:33 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 312 [13/Jan/2023:14:22:33 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 312 [13/Jan/2023:15:02:26 +0100] 138.68.165.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [13/Jan/2023:15:02:30 +0100] 138.68.165.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [13/Jan/2023:15:02:34 +0100] 138.68.165.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [13/Jan/2023:15:39:55 +0100] 205.210.31.55 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [13/Jan/2023:15:40:18 +0100] 159.203.192.9 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [13/Jan/2023:15:55:19 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhost_database.zip HTTP/1.1" 425 [13/Jan/2023:15:58:29 +0100] 178.79.182.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/Jan/2023:16:18:47 +0100] 198.235.24.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 398 [13/Jan/2023:16:26:30 +0100] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:16:36:44 +0100] 74.82.47.4 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [13/Jan/2023:16:41:08 +0100] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:16:42:33 +0100] 74.82.47.4 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [13/Jan/2023:17:17:17 +0100] 198.235.24.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [13/Jan/2023:18:00:49 +0100] 139.162.238.243 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:18:17:55 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhost-database.zip HTTP/1.1" 425 [13/Jan/2023:19:02:17 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [13/Jan/2023:19:19:16 +0100] 192.241.215.17 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [13/Jan/2023:20:01:15 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.atdb.zip HTTP/1.1" 417 [13/Jan/2023:20:09:36 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.atdb.zip HTTP/1.1" 399 [13/Jan/2023:20:10:38 +0100] 167.94.138.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [13/Jan/2023:20:10:38 +0100] 167.94.138.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:20:10:39 +0100] 167.94.138.62 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [13/Jan/2023:20:52:39 +0100] 198.235.24.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [13/Jan/2023:21:15:44 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [13/Jan/2023:21:32:25 +0100] 161.35.90.171 TLSv1.2 AES256-SHA "GET /login.php HTTP/1.1" 308 [13/Jan/2023:22:01:42 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\": 1, \"method\": \"mining.subscribe\", \"params\": [\"cpuminer/2.5.1\"]}" 379 [13/Jan/2023:22:01:49 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\": 1, \"method\": \"mining.subscribe\", \"params\": [\"MinerName/1.0.0\", \"EthereumStratum/1.0.0\"]}" 379 [13/Jan/2023:22:01:52 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\":1,\"method\":\"eth_submitLogin\",\"worker\":\"eth1.0\",\"params\":[\"0x72aa40094d3ef2671063272fcd8124b687946c7b\",\"x\"],\"jsonrpc\":\"2.0\"}" 379 [13/Jan/2023:22:01:56 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"49ugAbU7N7zbRNRwnYaCbLRvKfECy892Q4hRKh9kMXLcePjTWdp4Kjg1nHh1GidoD7ZRDfL3bbRwK8ySNt9ygnqNCcrRujW\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}" 379 [13/Jan/2023:22:02:02 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/Jan/2023:22:02:08 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [13/Jan/2023:22:02:14 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [13/Jan/2023:22:02:22 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /WuEL HTTP/1.1" 387 [13/Jan/2023:22:02:28 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET stager64 HTTP/1.1" 293 [13/Jan/2023:22:02:32 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /a HTTP/1.1" 302 [13/Jan/2023:22:02:35 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /download/file.ext HTTP/1.1" 313 [13/Jan/2023:22:02:37 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /SiteLoader HTTP/1.1" 307 [13/Jan/2023:22:02:49 +0100] 45.14.226.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /mPlayer HTTP/1.1" 306 [13/Jan/2023:22:22:31 +0100] 35.87.7.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [13/Jan/2023:22:23:10 +0100] 34.221.78.171 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [13/Jan/2023:22:23:48 +0100] 54.187.163.132 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [13/Jan/2023:22:23:58 +0100] 35.86.156.6 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [13/Jan/2023:22:24:07 +0100] 34.220.156.5 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [13/Jan/2023:22:35:20 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [13/Jan/2023:22:40:22 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:22:40:45 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [13/Jan/2023:22:41:12 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [13/Jan/2023:22:53:34 +0100] 198.235.24.15 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [13/Jan/2023:23:04:48 +0100] 103.149.192.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/Jan/2023:23:41:47 +0100] 198.235.24.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 381 [14/Jan/2023:00:00:14 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:00:13:11 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com-db.zip HTTP/1.1" 434 [14/Jan/2023:00:16:13 +0100] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:00:22:24 +0100] 185.180.143.6 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:00:41:50 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [14/Jan/2023:00:41:51 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [14/Jan/2023:00:41:53 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [14/Jan/2023:00:41:54 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [14/Jan/2023:00:41:55 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [14/Jan/2023:00:41:56 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [14/Jan/2023:00:41:57 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [14/Jan/2023:00:41:57 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [14/Jan/2023:00:41:59 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [14/Jan/2023:00:42:00 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [14/Jan/2023:00:42:01 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [14/Jan/2023:00:42:02 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [14/Jan/2023:00:42:03 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [14/Jan/2023:00:42:04 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [14/Jan/2023:00:42:05 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [14/Jan/2023:00:42:06 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [14/Jan/2023:00:42:07 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [14/Jan/2023:00:42:08 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [14/Jan/2023:00:42:09 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [14/Jan/2023:00:42:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307