[14/Jan/2023:01:40:33 +0100] 52.42.197.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Jan/2023:01:41:27 +0100] 20.203.155.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [14/Jan/2023:01:41:27 +0100] 20.203.155.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [14/Jan/2023:01:52:08 +0100] 96.9.88.210 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jan/2023:02:08:31 +0100] 96.9.88.210 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jan/2023:02:53:58 +0100] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:03:07:17 +0100] 87.236.176.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:03:20:01 +0100] 65.49.20.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:03:30:36 +0100] 65.49.20.69 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Jan/2023:03:36:32 +0100] 65.49.20.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:03:38:43 +0100] 65.49.20.69 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [14/Jan/2023:04:10:58 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com-database.zip HTTP/1.1" 440 [14/Jan/2023:04:23:23 +0100] 198.235.24.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 381 [14/Jan/2023:04:25:48 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-database.zip HTTP/1.1" 424 [14/Jan/2023:05:26:29 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [14/Jan/2023:05:30:10 +0100] 45.82.85.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/ HTTP/1.1" 300 [14/Jan/2023:05:30:15 +0100] 168.181.229.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/ HTTP/1.1" 301 [14/Jan/2023:05:30:19 +0100] 200.10.34.102 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /RDWeb HTTP/1.1" 301 [14/Jan/2023:05:30:19 +0100] 181.215.184.106 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:19 +0100] 181.215.184.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vpntunnel HTTP/1.1" 303 [14/Jan/2023:05:30:19 +0100] 108.165.219.191 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /svpn/index.cgi HTTP/1.1" 307 [14/Jan/2023:05:30:19 +0100] 23.26.229.121 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login HTTP/1.1" 305 [14/Jan/2023:05:30:19 +0100] 108.165.219.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:19 +0100] 108.165.219.198 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:19 +0100] 181.215.185.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:19 +0100] 50.114.104.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /clients HTTP/1.1" 301 [14/Jan/2023:05:30:19 +0100] 154.16.150.227 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 297 [14/Jan/2023:05:30:19 +0100] 103.230.69.109 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sslvpnclient?launchplatform=mac&neProto=3&supportipv6=yes HTTP/1.1" 342 [14/Jan/2023:05:30:19 +0100] 199.181.239.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /myvpn?sess=none&hdlc_framing=no&ipv4=1&ipv6=1&Z=none&hostname=none HTTP/1.1" 345 [14/Jan/2023:05:30:19 +0100] 2.59.60.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 346 [14/Jan/2023:05:30:20 +0100] 185.33.85.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:20 +0100] 185.33.85.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_%7BBA195980-CD49-458b-9E23-C84EE0ADCD75%7D/ HTTP/1.1" 337 [14/Jan/2023:05:30:20 +0100] 181.215.184.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:21 +0100] 200.10.34.102 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sslvpnclient?launchplatform=mac&neProto=3&supportipv6=yes HTTP/1.1" 343 [14/Jan/2023:05:30:21 +0100] 108.165.219.198 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 298 [14/Jan/2023:05:30:21 +0100] 154.16.150.227 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 347 [14/Jan/2023:05:30:21 +0100] 23.26.229.121 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vpntunnel HTTP/1.1" 304 [14/Jan/2023:05:30:21 +0100] 108.165.219.191 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /RDWeb HTTP/1.1" 303 [14/Jan/2023:05:30:21 +0100] 68.67.198.209 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:21 +0100] 108.165.219.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /svpn/index.cgi HTTP/1.1" 308 [14/Jan/2023:05:30:21 +0100] 181.215.184.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /myvpn?sess=none&hdlc_framing=no&ipv4=1&ipv6=1&Z=none&hostname=none HTTP/1.1" 346 [14/Jan/2023:05:30:21 +0100] 103.230.69.109 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:21 +0100] 181.215.184.106 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:21 +0100] 92.255.85.182 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Jan/2023:05:30:21 +0100] 199.181.239.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login HTTP/1.1" 306 [14/Jan/2023:05:30:22 +0100] 2.59.60.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:22 +0100] 185.33.85.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_%7BBA195980-CD49-458b-9E23-C84EE0ADCD75%7D/ HTTP/1.1" 338 [14/Jan/2023:05:30:22 +0100] 50.114.104.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /clients HTTP/1.1" 302 [14/Jan/2023:05:30:22 +0100] 108.165.219.198 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dana-na HTTP/1.1" 301 [14/Jan/2023:05:30:22 +0100] 154.16.150.227 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "CONNECT /CSCOSSLC/tunnel HTTP/1.1" 379 [14/Jan/2023:05:30:22 +0100] 185.33.85.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:22 +0100] 199.181.239.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /my.policy HTTP/1.1" 303 [14/Jan/2023:05:30:22 +0100] 103.230.69.109 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [14/Jan/2023:05:30:22 +0100] 23.26.229.121 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:23 +0100] 2.59.60.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ssl-vpn/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 341 [14/Jan/2023:05:30:24 +0100] 200.10.34.102 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [14/Jan/2023:05:30:24 +0100] 108.165.219.198 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "CONNECT /CSCOSSLC/tunnel HTTP/1.1" 379 [14/Jan/2023:05:30:24 +0100] 92.255.85.182 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Jan/2023:05:30:24 +0100] 154.16.150.227 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ssl-vpn/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 342 [14/Jan/2023:05:30:24 +0100] 181.215.184.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /my.policy HTTP/1.1" 304 [14/Jan/2023:05:30:24 +0100] 2.59.60.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dana-na HTTP/1.1" 302 [14/Jan/2023:05:30:29 +0100] 94.124.161.68 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/ HTTP/1.1" 301 [14/Jan/2023:05:30:43 +0100] 94.124.161.68 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/ HTTP/1.1" 300 [14/Jan/2023:05:35:21 +0100] 167.172.94.187 TLSv1.2 AES256-SHA "POST /login.php HTTP/1.1" 308 [14/Jan/2023:05:56:40 +0100] 107.170.239.28 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [14/Jan/2023:06:19:18 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerscheindb.zip HTTP/1.1" 429 [14/Jan/2023:06:47:24 +0100] 192.241.237.24 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:07:05:09 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:07:36:02 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [14/Jan/2023:07:43:55 +0100] 185.180.143.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:08:36:13 +0100] 198.235.24.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [14/Jan/2023:08:53:11 +0100] 198.199.93.53 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [14/Jan/2023:11:29:05 +0100] 51.12.217.93 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [14/Jan/2023:11:35:00 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein-db.zip HTTP/1.1" 430 [14/Jan/2023:11:59:44 +0100] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [14/Jan/2023:12:20:59 +0100] 178.128.159.24 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [14/Jan/2023:12:21:00 +0100] 178.128.159.24 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [14/Jan/2023:12:21:04 +0100] 178.128.159.24 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:12:34:32 +0100] 107.170.192.15 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [14/Jan/2023:12:38:29 +0100] 52.91.141.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [14/Jan/2023:12:44:43 +0100] 194.110.203.111 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Autodiscover/autodiscover.json?a=cecelia.muller@ratke-ullrich.name/mapi/nspi/ HTTP/1.1" 460 [14/Jan/2023:12:52:10 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm_database.zip HTTP/1.1" 403 [14/Jan/2023:12:53:12 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub_database.zip HTTP/1.1" 412 [14/Jan/2023:13:03:17 +0100] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [14/Jan/2023:13:47:53 +0100] 205.210.31.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [14/Jan/2023:13:51:14 +0100] 185.180.143.138 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:14:35:41 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [14/Jan/2023:14:35:42 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298 [14/Jan/2023:14:35:42 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304 [14/Jan/2023:14:35:43 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304 [14/Jan/2023:14:35:44 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303 [14/Jan/2023:14:35:44 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303 [14/Jan/2023:14:35:45 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 304 [14/Jan/2023:14:35:45 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 304 [14/Jan/2023:14:35:46 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 302 [14/Jan/2023:14:35:46 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 302 [14/Jan/2023:14:35:47 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 300 [14/Jan/2023:14:35:47 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 300 [14/Jan/2023:14:35:48 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 303 [14/Jan/2023:14:35:48 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 303 [14/Jan/2023:14:35:49 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 301 [14/Jan/2023:14:35:49 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 301 [14/Jan/2023:14:35:50 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 300 [14/Jan/2023:14:35:50 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 300 [14/Jan/2023:14:35:51 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 300 [14/Jan/2023:14:35:52 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 300 [14/Jan/2023:14:48:42 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm-database.zip HTTP/1.1" 403 [14/Jan/2023:17:01:09 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/db.tar.gz HTTP/1.1" 395 [14/Jan/2023:18:05:21 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Jan/2023:18:06:55 +0100] 172.104.43.121 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:18:06:59 +0100] 172.104.43.121 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:18:07:18 +0100] 167.172.28.49 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [14/Jan/2023:18:07:19 +0100] 167.172.28.49 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [14/Jan/2023:18:07:23 +0100] 167.172.28.49 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:18:10:49 +0100] 185.180.143.137 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:18:11:47 +0100] 162.142.125.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Jan/2023:18:11:48 +0100] 162.142.125.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:18:11:49 +0100] 162.142.125.10 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [14/Jan/2023:18:12:27 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:18:12:48 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Jan/2023:18:13:30 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [14/Jan/2023:18:16:08 +0100] 157.245.147.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:18:16:12 +0100] 157.245.147.154 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:19:11:29 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.tar.gz HTTP/1.1" 416 [14/Jan/2023:19:21:34 +0100] 24.199.127.17 TLSv1.2 AES256-SHA "GET /auth.asp HTTP/1.1" 306 [14/Jan/2023:19:36:07 +0100] 167.99.215.242 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:19:55:56 +0100] 205.210.31.174 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [14/Jan/2023:20:25:45 +0100] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Jan/2023:20:31:57 +0100] 192.241.203.5 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [14/Jan/2023:20:53:07 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/database.tar.gz HTTP/1.1" 418 [14/Jan/2023:22:40:02 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:22:50:50 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [14/Jan/2023:22:56:10 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhostdb.tar.gz HTTP/1.1" 404 [14/Jan/2023:23:25:40 +0100] 13.38.230.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [14/Jan/2023:23:35:59 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [14/Jan/2023:23:35:59 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [14/Jan/2023:23:36:00 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [14/Jan/2023:23:36:00 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [14/Jan/2023:23:36:01 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [14/Jan/2023:23:36:01 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [14/Jan/2023:23:36:02 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [14/Jan/2023:23:36:02 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [14/Jan/2023:23:36:03 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [14/Jan/2023:23:36:03 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [14/Jan/2023:23:36:03 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [14/Jan/2023:23:36:04 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [14/Jan/2023:23:36:04 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [14/Jan/2023:23:36:05 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [14/Jan/2023:23:36:05 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [14/Jan/2023:23:36:06 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [14/Jan/2023:23:36:06 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [14/Jan/2023:23:36:07 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [14/Jan/2023:23:36:07 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [14/Jan/2023:23:36:08 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [14/Jan/2023:23:47:51 +0100] 45.55.129.108 TLSv1.2 AES256-SHA "GET /auth.asp HTTP/1.1" 306 [15/Jan/2023:00:19:37 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [15/Jan/2023:00:49:19 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhost_db.tar.gz HTTP/1.1" 414 [15/Jan/2023:00:49:35 +0100] 18.236.154.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [15/Jan/2023:00:50:07 +0100] 35.92.96.48 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313