[22/Jan/2023:01:29:32 +0100] 183.136.225.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377
[22/Jan/2023:01:30:47 +0100] 183.136.225.46 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302
[22/Jan/2023:02:43:55 +0100] 220.135.120.154 TLSv1.2 AES256-SHA "GET /103/license.txt HTTP/1.1" 305
[22/Jan/2023:02:45:10 +0100] 92.255.85.183 - - "-" -
[22/Jan/2023:02:52:59 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[22/Jan/2023:03:02:25 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wpback.tar.gz HTTP/1.1" 399
[22/Jan/2023:03:24:08 +0100] 1.161.184.81 TLSv1.2 AES256-SHA "GET /103/license.txt HTTP/1.1" 317
[22/Jan/2023:05:23:01 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backupklub.kornland.at.zip HTTP/1.1" 412
[22/Jan/2023:05:24:29 +0100] 192.241.209.135 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[22/Jan/2023:05:27:16 +0100] 128.199.35.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:05:38:33 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315
[22/Jan/2023:05:41:37 +0100] 64.62.197.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:05:52:53 +0100] 64.62.197.166 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[22/Jan/2023:05:59:08 +0100] 64.62.197.154 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:06:01:31 +0100] 64.62.197.161 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[22/Jan/2023:07:07:41 +0100] 192.241.232.14 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:07:27:43 +0100] 111.172.165.27 TLSv1.2 AES256-SHA "GET /1998/license.txt HTTP/1.1" 319
[22/Jan/2023:07:33:56 +0100] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:08:13:39 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backupklub.kornland.at.tar HTTP/1.1" 412
[22/Jan/2023:09:27:45 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jan/2023:09:34:28 +0100] 34.241.224.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jan/2023:09:42:22 +0100] 43.158.217.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:09:42:46 +0100] 43.158.217.16 - - "-" -
[22/Jan/2023:09:42:57 +0100] 43.158.217.16 - - "-" -
[22/Jan/2023:10:06:35 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:10:06:38 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:10:07:05 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET /webfig/ HTTP/1.1" 307
[22/Jan/2023:10:07:39 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:10:07:41 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304
[22/Jan/2023:10:07:43 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?a..foo.var/owa/?&Email=autodiscover/autodiscover.json?a..foo.var&Protocol=XYZ&FooProtocol=%50owershell HTTP/1.1" 378
[22/Jan/2023:10:08:19 +0100] 185.180.143.80 TLSv1.2 AES256-SHA "GET /solr/ HTTP/1.1" 304
[22/Jan/2023:10:08:28 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backupklub.tar HTTP/1.1" 400
[22/Jan/2023:10:13:00 +0100] 92.255.85.183 - - "-" -
[22/Jan/2023:10:50:29 +0100] 211.186.165.244 TLSv1.2 AES256-SHA "GET /1999/license.txt HTTP/1.1" 306
[22/Jan/2023:11:14:18 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[22/Jan/2023:11:14:18 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[22/Jan/2023:11:14:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[22/Jan/2023:11:14:19 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[22/Jan/2023:11:14:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[22/Jan/2023:11:14:20 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[22/Jan/2023:11:14:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[22/Jan/2023:11:14:21 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[22/Jan/2023:11:14:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[22/Jan/2023:11:14:22 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[22/Jan/2023:11:14:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[22/Jan/2023:11:14:23 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[22/Jan/2023:11:14:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[22/Jan/2023:11:14:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[22/Jan/2023:11:14:24 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[22/Jan/2023:11:14:25 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[22/Jan/2023:11:14:25 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[22/Jan/2023:11:14:26 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[22/Jan/2023:11:14:26 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[22/Jan/2023:11:14:27 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[22/Jan/2023:11:33:15 +0100] 89.177.77.9 TLSv1.2 AES256-SHA "GET /1999/license.txt HTTP/1.1" 319
[22/Jan/2023:11:42:46 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:14:17:32 +0100] 92.118.36.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /spog/welcome HTTP/1.1" 309
[22/Jan/2023:14:17:33 +0100] 92.118.36.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/welcome HTTP/1.1" 313
[22/Jan/2023:14:48:49 +0100] 167.94.138.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[22/Jan/2023:14:48:49 +0100] 167.94.138.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:14:48:50 +0100] 167.94.138.120 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[22/Jan/2023:14:56:51 +0100] 71.59.232.131 TLSv1.2 AES256-SHA "GET /1x1/license.txt HTTP/1.1" 306
[22/Jan/2023:15:19:57 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET /cgi-bin/config.exp HTTP/1.1" 315
[22/Jan/2023:15:21:06 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known.zip HTTP/1.1" 401
[22/Jan/2023:15:21:51 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1" 498
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /rest/applinks/1.0/manifest HTTP/1.1" 409
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /api/v2/cmdb/system/admin/admin HTTP/1.1" 413
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /casa/nodes/thumbprints HTTP/1.1" 398
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1" 503
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json%3F@abc.com HTTP/1.1" 484
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1" 458
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aspnet-ajax/Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 434
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1" 374
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /logon/LogonPoint/tmindex.html HTTP/1.1" 412
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 422
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /secure/rest/applinks/1.0/manifest HTTP/1.1" 416
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /ui/login.action HTTP/1.1" 391
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /jira/rest/applinks/1.0/manifest HTTP/1.1" 414
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /confluence/rest/applinks/1.0/manifest HTTP/1.1" 420
[22/Jan/2023:15:21:52 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1" 419
[22/Jan/2023:15:21:53 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1" 416
[22/Jan/2023:15:21:53 +0100] 185.130.224.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crowd/rest/applinks/1.0/manifest HTTP/1.1" 415
[22/Jan/2023:15:24:02 +0100] 61.147.15.65 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[22/Jan/2023:15:24:05 +0100] 61.147.15.65 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[22/Jan/2023:15:36:37 +0100] 142.93.53.230 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[22/Jan/2023:15:36:38 +0100] 142.93.53.230 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304
[22/Jan/2023:15:36:42 +0100] 142.93.53.230 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:15:37:38 +0100] 212.170.169.139 TLSv1.2 AES256-SHA "GET /1x1/license.txt HTTP/1.1" 318
[22/Jan/2023:15:47:41 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known.zip HTTP/1.1" 392
[22/Jan/2023:16:56:05 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-admin.zip HTTP/1.1" 406
[22/Jan/2023:17:08:25 +0100] 198.235.24.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394
[22/Jan/2023:17:18:17 +0100] 167.94.138.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:17:18:19 +0100] 167.94.138.117 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[22/Jan/2023:17:41:04 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298
[22/Jan/2023:17:41:06 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298
[22/Jan/2023:17:41:08 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304
[22/Jan/2023:17:41:10 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304
[22/Jan/2023:17:41:12 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303
[22/Jan/2023:17:41:13 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303
[22/Jan/2023:17:41:15 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 304
[22/Jan/2023:17:41:17 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 304
[22/Jan/2023:17:41:18 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 302
[22/Jan/2023:17:41:20 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 302
[22/Jan/2023:17:41:22 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 300
[22/Jan/2023:17:41:23 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 300
[22/Jan/2023:17:41:25 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 303
[22/Jan/2023:17:41:27 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 303
[22/Jan/2023:17:41:28 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 301
[22/Jan/2023:17:41:30 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 301
[22/Jan/2023:17:41:31 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 300
[22/Jan/2023:17:41:32 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 300
[22/Jan/2023:17:48:19 +0100] 137.184.193.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:18:04:09 +0100] 23.251.102.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:18:14:06 +0100] 87.236.176.173 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:18:15:50 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /administrator.zip HTTP/1.1" 394
[22/Jan/2023:18:27:23 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /administrator.zip HTTP/1.1" 411
[22/Jan/2023:18:37:44 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /administrator.zip HTTP/1.1" 403
[22/Jan/2023:18:49:23 +0100] 162.243.145.19 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328
[22/Jan/2023:19:06:10 +0100] 111.172.165.27 TLSv1.2 AES256-SHA "GET /2/license.txt HTTP/1.1" 304
[22/Jan/2023:19:23:41 +0100] 192.241.218.45 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[22/Jan/2023:19:40:57 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.zip HTTP/1.1" 395
[22/Jan/2023:19:56:17 +0100] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin.zip HTTP/1.1" 403
[22/Jan/2023:20:22:12 +0100] 95.90.245.112 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297
[22/Jan/2023:21:02:17 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /1.zip HTTP/1.1" 399
[22/Jan/2023:22:25:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[22/Jan/2023:22:25:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[22/Jan/2023:22:25:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[22/Jan/2023:22:25:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[22/Jan/2023:22:25:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[22/Jan/2023:22:25:39 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[22/Jan/2023:22:25:39 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[22/Jan/2023:22:25:40 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[22/Jan/2023:22:25:40 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[22/Jan/2023:22:25:41 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[22/Jan/2023:22:25:41 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[22/Jan/2023:22:25:41 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[22/Jan/2023:22:25:42 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[22/Jan/2023:22:25:42 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[22/Jan/2023:22:25:43 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[22/Jan/2023:22:25:43 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[22/Jan/2023:22:25:44 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[22/Jan/2023:22:25:44 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[22/Jan/2023:22:25:45 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[22/Jan/2023:22:25:45 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[22/Jan/2023:22:29:17 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.zip HTTP/1.1" 398
[22/Jan/2023:22:35:07 +0100] 205.210.31.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385
[22/Jan/2023:23:14:49 +0100] 125.228.72.220 TLSv1.2 AES256-SHA "GET /20/license.txt HTTP/1.1" 305
[22/Jan/2023:23:22:04 +0100] 205.210.31.169 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[22/Jan/2023:23:22:30 +0100] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:23:32:48 +0100] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jan/2023:23:36:08 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /service.zip HTTP/1.1" 405
[22/Jan/2023:23:38:19 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /service.zip HTTP/1.1" 397
[22/Jan/2023:23:52:59 +0100] 34.76.158.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jan/2023:23:55:39 +0100] 185.45.239.1 TLSv1.2 AES256-SHA "GET /20/license.txt HTTP/1.1" 317
[22/Jan/2023:23:57:13 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /service.zip HTTP/1.1" 388
[23/Jan/2023:00:20:28 +0100] 34.212.135.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[23/Jan/2023:00:20:58 +0100] 35.91.240.179 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313
[23/Jan/2023:00:21:01 +0100] 35.91.240.179 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306