[04/Feb/2023:01:32:55 +0100] 65.49.20.67 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:01:41:09 +0100] 65.49.20.67 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [04/Feb/2023:01:44:55 +0100] 65.49.20.67 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:01:45:58 +0100] 65.49.20.67 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [04/Feb/2023:02:22:58 +0100] 195.154.56.160 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:03:02:33 +0100] 193.235.141.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [04/Feb/2023:03:08:06 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [04/Feb/2023:03:27:07 +0100] 198.235.24.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386 [04/Feb/2023:03:31:26 +0100] 205.210.31.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [04/Feb/2023:04:20:38 +0100] 193.32.162.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [04/Feb/2023:04:29:00 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:04:39:35 +0100] 205.210.31.31 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [04/Feb/2023:04:50:53 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [04/Feb/2023:05:28:08 +0100] 164.90.222.84 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:05:34:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [04/Feb/2023:05:34:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [04/Feb/2023:05:34:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [04/Feb/2023:05:34:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [04/Feb/2023:05:34:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [04/Feb/2023:05:34:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [04/Feb/2023:05:34:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [04/Feb/2023:05:34:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [04/Feb/2023:05:34:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [04/Feb/2023:05:34:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [04/Feb/2023:05:34:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [04/Feb/2023:05:34:35 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [04/Feb/2023:05:34:35 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [04/Feb/2023:05:34:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [04/Feb/2023:05:34:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [04/Feb/2023:05:34:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [04/Feb/2023:05:34:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [04/Feb/2023:05:34:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [04/Feb/2023:05:34:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [04/Feb/2023:05:34:38 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [04/Feb/2023:05:47:48 +0100] 198.235.24.156 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [04/Feb/2023:05:48:21 +0100] 198.235.24.15 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [04/Feb/2023:06:14:14 +0100] 178.79.139.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [04/Feb/2023:06:30:32 +0100] 147.182.144.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/v1 HTTP/1.1" 305 [04/Feb/2023:06:34:44 +0100] 193.35.18.108 TLSv1.2 AES256-SHA "POST /ztp/cgi-bin/handler HTTP/1.1" 402 [04/Feb/2023:06:37:54 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:07:27:11 +0100] 162.243.129.15 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:08:09:30 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein_31082022.zip HTTP/1.1" 427 [04/Feb/2023:08:17:02 +0100] 198.235.24.34 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [04/Feb/2023:08:38:19 +0100] 198.235.24.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [04/Feb/2023:09:54:58 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /easyzumfuehrerschein_29082022.zip HTTP/1.1" 427 [04/Feb/2023:10:04:10 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [04/Feb/2023:10:35:11 +0100] 180.149.125.159 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:11:55:29 +0100] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:13:20:58 +0100] 192.241.232.14 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [04/Feb/2023:14:33:28 +0100] 91.240.118.188 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 356 [04/Feb/2023:14:33:39 +0100] 91.240.118.188 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 356 [04/Feb/2023:15:16:34 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [04/Feb/2023:15:16:34 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [04/Feb/2023:15:16:35 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [04/Feb/2023:15:16:35 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [04/Feb/2023:15:16:36 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [04/Feb/2023:15:16:36 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [04/Feb/2023:15:16:37 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [04/Feb/2023:15:16:37 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [04/Feb/2023:15:16:38 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [04/Feb/2023:15:16:38 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [04/Feb/2023:15:16:39 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [04/Feb/2023:15:16:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [04/Feb/2023:15:16:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [04/Feb/2023:15:16:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [04/Feb/2023:15:16:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [04/Feb/2023:15:16:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [04/Feb/2023:15:16:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [04/Feb/2023:15:16:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [04/Feb/2023:15:16:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [04/Feb/2023:15:16:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [04/Feb/2023:15:29:41 +0100] 100.26.145.162 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [04/Feb/2023:15:52:19 +0100] 198.199.115.67 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [04/Feb/2023:16:35:08 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [04/Feb/2023:17:59:46 +0100] 178.32.197.85 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Feb/2023:18:06:02 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm_24082022.zip HTTP/1.1" 394 [04/Feb/2023:18:28:17 +0100] 188.165.87.106 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [04/Feb/2023:18:31:39 +0100] 188.165.87.99 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [04/Feb/2023:18:32:31 +0100] 142.4.218.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Feb/2023:18:43:28 +0100] 51.254.49.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Feb/2023:18:49:58 +0100] 165.227.196.249 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [04/Feb/2023:19:17:35 +0100] 37.187.215.253 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [04/Feb/2023:19:32:01 +0100] 188.165.87.100 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [04/Feb/2023:19:36:50 +0100] 107.170.239.12 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [04/Feb/2023:19:37:38 +0100] 198.199.115.67 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [04/Feb/2023:20:00:13 +0100] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:20:00:23 +0100] 162.221.192.26 TLSv1.2 AES256-SHA "HEAD /icons/sphere1.png HTTP/1.1" - [04/Feb/2023:20:16:18 +0100] 199.16.157.182 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [04/Feb/2023:20:16:20 +0100] 199.16.157.182 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [04/Feb/2023:20:43:34 +0100] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [04/Feb/2023:20:43:34 +0100] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [04/Feb/2023:20:47:00 +0100] 51.254.49.111 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [04/Feb/2023:21:09:17 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm_22082022.zip HTTP/1.1" 394 [04/Feb/2023:21:17:23 +0100] 188.165.87.100 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [04/Feb/2023:22:09:01 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /klub_21082022.zip HTTP/1.1" 403 [04/Feb/2023:22:19:16 +0100] 45.134.144.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [04/Feb/2023:22:27:10 +0100] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:22:52:32 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm_21082022.zip HTTP/1.1" 394 [04/Feb/2023:23:42:39 +0100] 154.89.5.107 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [04/Feb/2023:23:55:56 +0100] 36.156.28.132 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [04/Feb/2023:23:55:58 +0100] 36.156.28.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Feb/2023:23:56:09 +0100] 36.156.28.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [05/Feb/2023:00:46:11 +0100] 52.33.173.146 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [05/Feb/2023:00:46:34 +0100] 54.70.87.169 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [05/Feb/2023:00:53:15 +0100] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301