[17/Jan/2023:01:17:25 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[17/Jan/2023:01:17:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[17/Jan/2023:01:17:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[17/Jan/2023:01:17:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[17/Jan/2023:01:17:27 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[17/Jan/2023:01:17:27 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[17/Jan/2023:01:17:28 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[17/Jan/2023:01:17:28 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[17/Jan/2023:01:17:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[17/Jan/2023:01:17:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[17/Jan/2023:01:17:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[17/Jan/2023:01:17:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[17/Jan/2023:01:17:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[17/Jan/2023:01:17:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[17/Jan/2023:01:17:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[17/Jan/2023:01:17:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[17/Jan/2023:01:17:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[17/Jan/2023:01:17:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[17/Jan/2023:01:17:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[17/Jan/2023:01:17:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[17/Jan/2023:01:35:42 +0100] 64.62.197.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:01:38:09 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[17/Jan/2023:01:44:59 +0100] 64.62.197.60 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[17/Jan/2023:01:48:08 +0100] 64.62.197.49 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:01:49:26 +0100] 64.62.197.59 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[17/Jan/2023:02:33:38 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at-db.tar HTTP/1.1" 400
[17/Jan/2023:03:01:36 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-db.tar HTTP/1.1" 418
[17/Jan/2023:03:18:40 +0100] 95.215.205.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 392
[17/Jan/2023:03:52:52 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315
[17/Jan/2023:05:00:25 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at_database.tar HTTP/1.1" 424
[17/Jan/2023:05:13:09 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at_database.tar HTTP/1.1" 406
[17/Jan/2023:05:14:56 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com_database.tar HTTP/1.1" 440
[17/Jan/2023:05:48:55 +0100] 167.94.146.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[17/Jan/2023:05:48:55 +0100] 167.94.146.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:05:48:55 +0100] 167.94.146.58 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[17/Jan/2023:06:09:38 +0100] 185.189.182.234 TLSv1.2 AES256-SHA "-" -
[17/Jan/2023:06:56:12 +0100] 107.170.238.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:07:05:23 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:07:57:19 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-database.tar HTTP/1.1" 424
[17/Jan/2023:08:04:11 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[17/Jan/2023:10:47:38 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harmdb.tar HTTP/1.1" 396
[17/Jan/2023:13:05:16 +0100] 106.75.80.236 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[17/Jan/2023:13:12:19 +0100] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub_db.tar HTTP/1.1" 406
[17/Jan/2023:13:37:30 +0100] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:13:54:07 +0100] 45.155.126.4 TLSv1.2 AES256-SHA "-" -
[17/Jan/2023:14:44:50 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub-db.tar HTTP/1.1" 406
[17/Jan/2023:14:45:46 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein-db.tar HTTP/1.1" 430
[17/Jan/2023:15:46:03 +0100] 107.170.252.15 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305
[17/Jan/2023:16:17:17 +0100] 205.210.31.181 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[17/Jan/2023:16:37:23 +0100] 183.89.112.16 TLSv1.2 AES256-SHA "GET /license.txt HTTP/1.1" 303
[17/Jan/2023:16:39:21 +0100] 188.166.178.178 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304
[17/Jan/2023:16:39:23 +0100] 188.166.178.178 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304
[17/Jan/2023:17:01:57 +0100] 165.22.80.144 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[17/Jan/2023:17:01:58 +0100] 165.22.80.144 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304
[17/Jan/2023:17:02:04 +0100] 165.22.80.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:17:02:23 +0100] 165.22.80.144 - - "-" -
[17/Jan/2023:17:13:47 +0100] 24.61.111.63 TLSv1.2 AES256-SHA "GET /license.txt HTTP/1.1" 315
[17/Jan/2023:17:13:59 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm_database.tar HTTP/1.1" 403
[17/Jan/2023:17:43:50 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub_database.tar HTTP/1.1" 412
[17/Jan/2023:18:12:45 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein_database.tar HTTP/1.1" 436
[17/Jan/2023:19:07:49 +0100] 18.184.139.87 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 314
[17/Jan/2023:19:09:08 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[17/Jan/2023:19:09:09 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[17/Jan/2023:19:09:09 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[17/Jan/2023:19:09:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[17/Jan/2023:19:09:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[17/Jan/2023:19:09:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[17/Jan/2023:19:09:11 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[17/Jan/2023:19:09:11 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[17/Jan/2023:19:09:12 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[17/Jan/2023:19:09:12 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[17/Jan/2023:19:09:13 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[17/Jan/2023:19:09:13 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[17/Jan/2023:19:09:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[17/Jan/2023:19:09:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[17/Jan/2023:19:09:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[17/Jan/2023:19:09:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[17/Jan/2023:19:09:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[17/Jan/2023:19:09:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[17/Jan/2023:19:09:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[17/Jan/2023:19:09:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[17/Jan/2023:19:19:18 +0100] 192.241.213.67 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[17/Jan/2023:19:30:37 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm-database.tar HTTP/1.1" 403
[17/Jan/2023:19:59:10 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:20:07:13 +0100] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[17/Jan/2023:20:10:07 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[17/Jan/2023:20:10:47 +0100] 20.113.29.76 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[17/Jan/2023:21:23:25 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[17/Jan/2023:21:54:31 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393
[17/Jan/2023:22:11:36 +0100] 198.27.65.25 TLSv1.2 AES256-SHA "GET /Electron/download/windows/%5CProgram%20Files%5C3CX%20Phone%20System%5CData%5CDB%5Cbase%5C16384%5C16393 HTTP/1.1" 369
[17/Jan/2023:22:14:37 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[17/Jan/2023:22:30:18 +0100] 188.166.26.109 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/v1 HTTP/1.1" 305
[17/Jan/2023:23:10:52 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "-" -
[17/Jan/2023:23:46:16 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[18/Jan/2023:00:00:56 +0100] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[18/Jan/2023:00:08:29 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.7z HTTP/1.1" 395
[18/Jan/2023:00:23:18 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET /admin/ HTTP/1.1" 305
[18/Jan/2023:00:28:18 +0100] 220.133.114.62 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 305
[18/Jan/2023:00:37:57 +0100] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.7z HTTP/1.1" 404
[18/Jan/2023:00:57:39 +0100] 165.246.153.84 TLSv1.2 AES256-SHA "GET /wp/license.txt HTTP/1.1" 317