"-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /t.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /bgymj.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ms.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ms-edit.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ws49.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ioxi-o.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /hots.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /666.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /hplfuns.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /wen.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /gifclass.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ccs.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /a4.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /bnm.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /sid3.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /tool.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /222.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /ws77.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /edit.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /wp-the.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:52 -0600] "GET /wp-blog.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /wp-act.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /1.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /tfm.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /file.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET //tfm.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /abc.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /gettest.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /amp.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /kj.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /xxw.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /term.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /ws60.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /gfd.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /admin-footer.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /166.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /jga.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /wp-admin/css/bolt.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /myfile.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /sa.php7 HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /ws75.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /wp-access.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /init.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /public/ws49.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /66.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:53 -0600] "GET /b.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wp9.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /grsiuk.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wp-content/radio.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /motu.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /fs.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /ajax.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /tx78.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /jp.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wp-blogs.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /edit-tags.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wp-png.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wpc2.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /intall.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /cu.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /callback.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /byypas.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /abrand.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /camara.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /assacc.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /ws83.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /wp-good.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:54 -0600] "GET /%E3%81%AE.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /xtsr.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /zz8.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /mh.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /a5.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /ai.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /amwxl.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /awdld.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /bkyac.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /krntz.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /vhwwnrnmqc.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /xenium4.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /vaza.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /8573.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /rip.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /drhunthq.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /sbhu.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /inege.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /ws84.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /c4.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /lclnqiii.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:55 -0600] "GET /goat.php HTTP/1.1" 404 456 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:56 -0600] "GET /wp-tot.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:56 -0600] "GET /wp-tap.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:56 -0600] "GET /vrhiw.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:56 -0600] "GET /qqjki.php HTTP/1.1" 404 437 "-" "-" 20.151.107.165 - - [11/Mar/2026:02:54:56 -0600] "GET /koiy.php HTTP/1.1" 404 437 "-" "-" 43.130.3.120 - - [11/Mar/2026:02:59:05 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.109.219.100 - - [11/Mar/2026:03:06:39 -0600] "GET /.env HTTP/1.1" 404 4237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 23.109.219.100 - - [11/Mar/2026:03:06:39 -0600] "POST / HTTP/1.1" 200 7266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 176.65.134.20 - - [11/Mar/2026:03:13:20 -0600] "PROPFIND / HTTP/1.1" 405 4221 "http://3.22.251.217:443/" "-" 165.225.95.53 - - [11/Mar/2026:03:18:02 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-43154.gif HTTP/1.1" 200 6361 "-" "Mozilla/5.0" 34.38.53.187 - - [11/Mar/2026:03:19:37 -0600] "GET / HTTP/1.1" 200 3477 "-" "python-requests/2.32.5" 52.30.32.36 - - [11/Mar/2026:03:21:21 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78744.gif HTTP/1.1" 200 56307 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 52.30.32.36 - - [11/Mar/2026:03:21:44 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78743.gif HTTP/1.1" 200 56654 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 34.253.62.30 - - [11/Mar/2026:03:22:35 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78743.gif HTTP/1.1" 200 56654 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 72.153.153.1 - - [11/Mar/2026:03:25:51 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-72531.gif HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 34.253.62.30 - - [11/Mar/2026:03:29:47 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78744.gif HTTP/1.1" 200 56307 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 195.178.110.246 - - [11/Mar/2026:03:30:08 -0600] "GET /.git/config HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1" 2.136.80.171 - - [11/Mar/2026:03:30:57 -0600] "GET /imagenesAptusLegal/arochi/ArochiAndLindner_Logo.png HTTP/1.1" 200 33084 "https://arochiylindneraptusportalatencion.zohocreatorportal.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 136.143.177.61 - - [11/Mar/2026:03:33:11 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37378494 "-" "Zoho_Analytics" 179.125.166.178 - - [11/Mar/2026:03:39:11 -0600] "POST /xmlrpc.php HTTP/1.1" 404 3776 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 103.150.242.194 - - [11/Mar/2026:03:39:45 -0600] "POST /xmlrpc.php HTTP/1.1" 404 4228 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/87.0.0.0 Safari/537.36" 3.70.238.146 - - [11/Mar/2026:03:42:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111153.png HTTP/1.1" 200 341496 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 3.70.238.146 - - [11/Mar/2026:03:42:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111153.png HTTP/1.1" 200 341496 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 3.70.238.146 - - [11/Mar/2026:03:42:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111153.png HTTP/1.1" 200 341496 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 3.70.238.146 --ssm-agent.amazon-ssm-agent[480765]: 2026-03-11 03:22:15.6354 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Mar 11 03:22:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 25ed93f1-fafc-40b1-a6ae-cc747ecda4e6 Mar 11 03:39:01 ip-172-31-29-215 CRON[1597550]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Mar 11 03:39:07 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Mar 11 03:39:07 ip-172-31-29-215 sessionclean[1597563]: Cannot load Xdebug - it was already loaded Mar 11 03:39:07 ip-172-31-29-215 sessionclean[1597563]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Mar 11 03:39:07 ip-172-31-29-215 sessionclean[1597563]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Mar 11 03:39:07 ip-172-31-29-215 sessionclean[1597563]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Mar 11 03:39:07 ip-172-31-29-215 sessionclean[1597563]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Mar 11 03:39:08 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Mar 11 03:39:08 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Mar 11 03:40:01 ip-172-31-29-215 CRON[1597607]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Mar 11 03:52:10 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-11 03:52:10.7323 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Mar 11 03:52:10 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-11 03:52:10.7681 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Mar 11 03:52:10 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 5dc419d7-a25e-4768-86c5-ee28bda09467 Mar 11 04:00:01 ip-172-31-29-215 CRON[1597642]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Mar 11 04:09:01 ip-172-31-29-215 CRON[1597668]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Mar 11 04:09:06 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Mar 11 04:09:06 ip-172-31-29-215 sessionclean[1597681]: Cannot load Xdebug - it was already loaded Mar 11 04:09:06 ip-172-31-29-215 sessionclean[1597681]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Mar 11 04:09:06 ip-172-31-29-215 sessionclean[1597681]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Mar 11 04:09:06 ip-172-31-29-215 sessionclean[1597681]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Mar 11 04:09:06 ip-172-31-29-215 sessionclean[1597681]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 M - [11/Mar/2026:03:42:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111153.png HTTP/1.1" 200 341496 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 3.70.238.146 - - [11/Mar/2026:03:42:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111153.png HTTP/1.1" 200 341496 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 52.30.32.36 - - [11/Mar/2026:03:45:17 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78744.gif HTTP/1.1" 200 56307 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 104.28.196.93 - - [11/Mar/2026:03:47:28 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78745.gif HTTP/1.1" 200 28031 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 87.121.84.76 - - [11/Mar/2026:03:52:47 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0" 91.204.194.166 - - [11/Mar/2026:03:53:05 -0600] "OPTIONS /imagenesAptusLegal/arochi/LogosArochi/ HTTP/1.1" 200 3511 "-" "Microsoft Office Outlook 2014" 91.204.194.166 - - [11/Mar/2026:03:53:05 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-74818.gif HTTP/1.1" 200 23801 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 91.204.194.166 - - [11/Mar/2026:03:54:43 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-74818.gif HTTP/1.1" 200 27086 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 205.210.31.130 - - [11/Mar/2026:04:03:35 -0600] "\x16\x03\x01" 400 488 "-" "-" 205.210.31.130 - - [11/Mar/2026:04:03:35 -0600] "\x16\x03\x01" 400 488 "-" "-" 34.248.39.191 - - [11/Mar/2026:04:10:05 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78745.gif HTTP/1.1" 200 27984 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 136.143.176.60 - - [11/Mar/2026:04:13:10 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37378494 "-" "Zoho_Analytics" 136.143.176.64 - - [11/Mar/2026:04:16:40 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4039 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 136.143.176.60 - - [11/Mar/2026:04:33:18 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37378494 "-" "Zoho_Analytics" 136.143.177.228 - - [11/Mar/2026:04:39:17 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.fdf10db42f7642da9bec34e614250546.5c925315378aa63cfd2566e5ec149e2b&pClientId=1000.ENORUOL9IFVJXY8NOCG5H2B2949B2A&pClientSec=4b02841fb396d98d03e790629a35a3c04bdc487909&pRedUri=https:%2F%2Fwww.google.com&pGrantType=refresh_token&pAuthUrl=https:%2F%2Faccounts.zoho.com%2Foauth%2Fv2%2Ftoken&pAppOwner=arochiylindner.aptus&pAppToken=ZCRM HTTP/1.1" 200 4055 "-" "axios/1.1.3" 13.52.227.219 - - [11/Mar/2026:04:50:54 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78745.gif HTTP/1.1" 200 27984 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 13.52.227.219 - - [11/Mar/2026:04:55:14 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78743.gif HTTP/1.1" 200 56654 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 13.52.227.219 - - [11/Mar/2026:04:55:36 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-78744.gif HTTP/1.1" 200 56307 "-" "Mozilla/5.0 (FrontApp.com ImageProxy) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.53 Safari/537.36" 45.156.128.126 - - [11/Mar/2026:05:16:20 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 104.28.50.18 - - [11/Mar/2026:05:17:23 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-72531.gif HTTP/1.1" 200 6389 "-" "Mozilla/5.0" 3.129.187.38 - - [11/Mar/2026:05:20:56 -0600] "\x16\x03\x01" 400 488 "-" "-" 3.129.187.38 - - [11/Mar/2026:05:21:03 -0600] "\x16\x03\x01" 400 488 "-" "-" 3.129.187.38 - - [11/Mar/2026:05:21:08 -0600] "SSH-2.0-Go" 400 488 "-" "-" 73.199.151.43 - - [11/Mar/2026:05:21:15 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13593 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 ded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded [Wed Mar 11 06:01:48.187835 2026] [core:error] [pid 1595353] [client 147.45.60.22:49204] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 [Wed Mar 11 07:20:19.561105 2026] [core:error] [pid 1595353] [client 85.105.253.144:33588] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 dy loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it/usr/share/dict/words /usr/share/dict/words.pre-dictionaries-common dictionaries-common /usr/share/man/man1/sh.1.gz /usr/share/man/man1/sh.distrib.1.gz dash /usr/share/vim/vim81/doc/help.txt /usr/share/vim/vim81/doc/help.txt.vim-tiny vim-runtime /bin/sh /bin/sh.distrib dash /usr/share/vim/vim81/doc/tags /usr/share/vim/vim81/doc/tags.vim-tiny vim-runtime