[19/Jan/2023:01:25:14 +0100] 60.173.195.214 TLSv1.2 AES256-SHA "GET /1/license.txt HTTP/1.1" 316 [19/Jan/2023:01:37:14 +0100] 176.111.173.153 TLSv1.2 AES256-SHA "POST /wp-plain.php HTTP/1.1" 405 [19/Jan/2023:01:37:14 +0100] 176.111.173.153 TLSv1.2 AES256-SHA "GET /czxawyye.php?Fox=d3wL7 HTTP/1.1" 415 [19/Jan/2023:02:01:16 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [19/Jan/2023:02:03:47 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [19/Jan/2023:02:03:49 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [19/Jan/2023:02:03:50 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [19/Jan/2023:02:03:52 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [19/Jan/2023:02:03:54 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [19/Jan/2023:02:03:56 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [19/Jan/2023:02:03:58 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [19/Jan/2023:02:04:00 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [19/Jan/2023:02:04:02 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [19/Jan/2023:02:04:04 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [19/Jan/2023:02:04:06 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [19/Jan/2023:02:04:08 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [19/Jan/2023:02:04:10 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [19/Jan/2023:02:04:12 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [19/Jan/2023:02:04:13 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [19/Jan/2023:02:04:15 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [19/Jan/2023:02:04:17 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [19/Jan/2023:02:04:18 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [19/Jan/2023:02:26:29 +0100] 64.62.197.43 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:02:26:50 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [19/Jan/2023:02:34:35 +0100] 64.62.197.38 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [19/Jan/2023:02:37:48 +0100] 64.62.197.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:02:38:49 +0100] 64.62.197.42 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [19/Jan/2023:02:49:13 +0100] 23.229.104.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:02:49:15 +0100] 23.229.104.2 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [19/Jan/2023:02:49:17 +0100] 23.229.104.2 TLSv1.2 AES256-SHA "GET /ads.txt HTTP/1.1" 306 [19/Jan/2023:02:56:08 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.atdb.7z HTTP/1.1" 398 [19/Jan/2023:03:21:36 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.comdb.7z HTTP/1.1" 432 [19/Jan/2023:04:02:02 +0100] 23.251.102.82 TLSv1.2 AES256-SHA "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 330 [19/Jan/2023:04:25:08 +0100] 175.139.228.85 TLSv1.2 AES256-SHA "GET /tmp/license.txt HTTP/1.1" 317 [19/Jan/2023:04:36:23 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [19/Jan/2023:04:51:53 +0100] 89.23.100.160 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 349 [19/Jan/2023:05:11:52 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com_db.7z HTTP/1.1" 433 [19/Jan/2023:05:28:34 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [19/Jan/2023:05:45:48 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at_db.7z HTTP/1.1" 399 [19/Jan/2023:06:26:49 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.atdb.7z HTTP/1.1" 416 [19/Jan/2023:06:51:38 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at_db.7z HTTP/1.1" 417 [19/Jan/2023:06:57:12 +0100] 159.89.111.238 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [19/Jan/2023:06:57:13 +0100] 159.89.111.238 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:06:57:58 +0100] 14.72.39.84 TLSv1.2 AES256-SHA "GET /temp/license.txt HTTP/1.1" 305 [19/Jan/2023:07:06:28 +0100] 107.170.246.28 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:07:29:06 +0100] 78.156.33.241 TLSv1.2 AES256-SHA "GET /temp/license.txt HTTP/1.1" 318 [19/Jan/2023:07:54:09 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/easyzumfuehrerschein.com-db.7z HTTP/1.1" 433 [19/Jan/2023:08:28:48 +0100] 66.240.236.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:10:03:08 +0100] 114.79.137.190 TLSv1.2 AES256-SHA "GET /shop/license.txt HTTP/1.1" 306 [19/Jan/2023:10:18:39 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at_database.7z HTTP/1.1" 405 [19/Jan/2023:10:34:10 +0100] 94.189.15.81 TLSv1.2 AES256-SHA "GET /shop/license.txt HTTP/1.1" 318 [19/Jan/2023:10:35:04 +0100] 167.248.133.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [19/Jan/2023:10:35:05 +0100] 167.248.133.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:10:35:05 +0100] 167.248.133.47 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [19/Jan/2023:10:47:19 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/Jan/2023:10:59:44 +0100] 192.241.209.125 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1" 458 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aspnet-ajax/Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 434 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1" 498 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /api/v2/cmdb/system/admin/admin HTTP/1.1" 413 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /rest/applinks/1.0/manifest HTTP/1.1" 409 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /logon/LogonPoint/tmindex.html HTTP/1.1" 412 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1" 503 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1" 374 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json%3F@abc.com HTTP/1.1" 484 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /casa/nodes/thumbprints HTTP/1.1" 398 [19/Jan/2023:11:49:43 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 422 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /secure/rest/applinks/1.0/manifest HTTP/1.1" 416 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /ui/login.action HTTP/1.1" 391 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /jira/rest/applinks/1.0/manifest HTTP/1.1" 414 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /confluence/rest/applinks/1.0/manifest HTTP/1.1" 420 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1" 419 [19/Jan/2023:11:49:44 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1" 416 [19/Jan/2023:11:49:45 +0100] 146.0.75.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crowd/rest/applinks/1.0/manifest HTTP/1.1" 415 [19/Jan/2023:12:35:57 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/klub.kornland.at-database.7z HTTP/1.1" 423 [19/Jan/2023:12:50:06 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/harm.at-database.7z HTTP/1.1" 405 [19/Jan/2023:14:29:39 +0100] 105.72.195.124 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [19/Jan/2023:14:29:39 +0100] 105.72.195.124 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [19/Jan/2023:14:38:22 +0100] 188.166.179.95 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304 [19/Jan/2023:14:38:24 +0100] 188.166.179.95 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [19/Jan/2023:14:49:10 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.rar HTTP/1.1" 396 [19/Jan/2023:15:30:50 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/dbdump.rar HTTP/1.1" 413 [19/Jan/2023:16:09:06 +0100] 23.90.160.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:16:09:18 +0100] 23.90.160.130 TLSv1.2 AES256-SHA "GET /api/jsonws/ HTTP/1.1" 309 [19/Jan/2023:16:20:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [19/Jan/2023:16:20:11 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [19/Jan/2023:16:20:12 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [19/Jan/2023:16:20:13 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [19/Jan/2023:16:20:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [19/Jan/2023:16:20:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [19/Jan/2023:16:20:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [19/Jan/2023:16:20:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [19/Jan/2023:16:20:17 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [19/Jan/2023:16:20:18 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [19/Jan/2023:16:20:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [19/Jan/2023:16:20:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [19/Jan/2023:16:20:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [19/Jan/2023:16:20:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [19/Jan/2023:16:20:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [19/Jan/2023:16:20:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [19/Jan/2023:16:20:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [19/Jan/2023:16:20:25 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [19/Jan/2023:16:20:27 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [19/Jan/2023:16:20:28 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [19/Jan/2023:16:27:41 +0100] 45.72.48.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [19/Jan/2023:16:27:44 +0100] 45.72.48.130 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [19/Jan/2023:16:27:46 +0100] 45.72.48.130 TLSv1.2 AES256-SHA "GET /ads.txt HTTP/1.1" 300 [19/Jan/2023:16:39:00 +0100] 192.241.201.11 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [19/Jan/2023:16:57:05 +0100] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [19/Jan/2023:17:02:33 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/database.rar HTTP/1.1" 398 [19/Jan/2023:17:26:24 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [19/Jan/2023:17:35:28 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [19/Jan/2023:17:35:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [19/Jan/2023:17:35:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [19/Jan/2023:17:35:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [19/Jan/2023:17:35:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [19/Jan/2023:17:35:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [19/Jan/2023:17:35:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [19/Jan/2023:17:35:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [19/Jan/2023:17:35:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [19/Jan/2023:17:35:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [19/Jan/2023:17:35:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [19/Jan/2023:17:35:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [19/Jan/2023:17:35:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [19/Jan/2023:17:35:35 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [19/Jan/2023:17:35:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [19/Jan/2023:17:35:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [19/Jan/2023:17:35:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [19/Jan/2023:17:35:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [19/Jan/2023:17:35:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [19/Jan/2023:17:35:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [19/Jan/2023:17:49:29 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [19/Jan/2023:18:06:49 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [19/Jan/2023:18:22:06 +0100] 178.62.82.176 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [19/Jan/2023:18:22:06 +0100] 178.62.82.176 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [19/Jan/2023:18:22:08 +0100] 178.62.82.176 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:18:48:15 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/database.rar HTTP/1.1" 415 [19/Jan/2023:19:20:36 +0100] 107.170.227.31 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [19/Jan/2023:19:21:14 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhostdb.rar HTTP/1.1" 410 [19/Jan/2023:19:23:33 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhostdb.rar HTTP/1.1" 418 [19/Jan/2023:19:59:49 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [19/Jan/2023:21:01:22 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:21:08:41 +0100] 3.89.139.37 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 304 [19/Jan/2023:21:19:11 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/localhost_db.rar HTTP/1.1" 402 [19/Jan/2023:21:39:03 +0100] 205.210.31.56 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [19/Jan/2023:22:14:44 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [19/Jan/2023:22:27:13 +0100] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:22:43:35 +0100] 192.53.170.243 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Jan/2023:22:52:13 +0100] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [20/Jan/2023:00:00:46 +0100] 208.100.26.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [20/Jan/2023:00:04:43 +0100] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [20/Jan/2023:00:05:28 +0100] 87.236.176.239 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Jan/2023:00:08:16 +0100] 134.209.150.216 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [20/Jan/2023:00:08:18 +0100] 134.209.150.216 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [20/Jan/2023:00:08:23 +0100] 134.209.150.216 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/Jan/2023:00:14:39 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [20/Jan/2023:00:14:39 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [20/Jan/2023:00:14:40 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [20/Jan/2023:00:14:41 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [20/Jan/2023:00:14:42 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [20/Jan/2023:00:14:42 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [20/Jan/2023:00:14:43 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [20/Jan/2023:00:14:44 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [20/Jan/2023:00:14:44 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [20/Jan/2023:00:14:45 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [20/Jan/2023:00:14:45 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [20/Jan/2023:00:14:46 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [20/Jan/2023:00:14:46 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [20/Jan/2023:00:14:47 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [20/Jan/2023:00:14:47 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [20/Jan/2023:00:14:48 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [20/Jan/2023:00:14:48 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [20/Jan/2023:00:14:49 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [20/Jan/2023:00:14:49 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 312 [20/Jan/2023:00:14:50 +0100] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 312