after studying the following log entries what is the attacker ultimately trying