65.49.1.156 - - [17/Oct/2025:00:00:17 -0600] "GET /favicon.ico HTTP/1.1" 404 3540 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0" 65.49.1.158 - - [17/Oct/2025:00:02:47 -0600] "GET / HTTP/1.1" 200 7155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0" 94.141.16.244 - - [17/Oct/2025:00:03:50 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-89103.png HTTP/1.1" 200 79515 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 Edg/116.0.1938.81" 38.147.104.83 - - [17/Oct/2025:00:05:13 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2503.0 Safari/537.36" 202.60.225.251 - - [17/Oct/2025:00:07:18 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 200 202342 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice rmj)" 170.64.154.53 - - [17/Oct/2025:00:10:43 -0600] "GET /aaa9 HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x" 170.64.154.53 - - [17/Oct/2025:00:10:49 -0600] "GET /aab8 HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x" 170.64.154.53 - - [17/Oct/2025:00:10:56 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 zgrab/0.x" 135.232.20.5 - - [17/Oct/2025:00:14:32 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 200 202784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 65.49.1.152 - - [17/Oct/2025:00:15:15 -0600] "GET /geoserver/web/ HTTP/1.1" 404 3540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 217.110.242.76 - - [17/Oct/2025:00:17:39 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111676.png HTTP/1.1" 200 49383 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 217.110.242.76 - - [17/Oct/2025:00:17:54 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111676.png HTTP/1.1" 304 335 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 217.110.242.76 - - [17/Oct/2025:00:17:55 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111676.png HTTP/1.1" 304 210 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 65.49.1.152 - - [17/Oct/2025:00:19:42 -0600] "GET /.git/config HTTP/1.1" 404 3540 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 202.60.225.251 - - [17/Oct/2025:00:20:29 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 304 3488 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [17/Oct/2025:00:25:31 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 304 3488 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [17/Oct/2025:00:25:31 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 304 336 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.96.251.92 - - [17/Oct/2025:00:27:38 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111676.png HTTP/1.1" 200 49830 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [17/Oct/2025:00:31:50 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 304 3488 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [17/Oct/2025:00:32:03 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112474.png HTTP/1.1" 304 336 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 176.65.141.86 - - [17/Oct/2025:00:35:08 -0600] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 454 "-" "-" 217.110.242.76 - - [17/Oct/2025:00:36:41 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111676.png HTTP/1.1" 304 3487 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 172.237.111.149 - - [17/Oct/2025:00:37:00 -0600] "\x16\x03\x01\x02" 400 488 "-" "-" 172.237.111.149 - - [17/Oct/2025:00:37:01 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0" 87.121.84.17 - - [17/Oct/2025:00:40:17 -0PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 PHP Warning: Module 'gettext' already loaded in Unknown on line 0 PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 [Fri Oct 17 00:00:01.661824 2025] [mpm_prefork:notice] [pid 1759300] AH00163: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f configured -- resuming normal operations [Fri Oct 17 00:00:01.661832 2025] [core:notice] [pid 1759300] AH00094: Command line: '/usr/sbin/apache2' [Fri Oct 17 00:54:00.858799 2025] [php7:error] [pid 4033571] [client 67.220.94.150:58872] script '/var/www/html/app_dev.php' not found or unable to stat [Fri Oct 17 01:37:55.825947 2025] [php7:error] [pid 4033559] [client 67.220.94.150:52274] script '/var/www/html/app_dev.php' not found or unable to stat [Fri Oct 17 02:42:04.559826 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/infophp.php' not found or unable to stat [Fri Oct 17 02:42:04.601977 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/php_info.php' not found or unable to stat [Fri Oct 17 02:42:04.669879 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/test.php' not found or unable to stat [Fri Oct 17 02:42:04.701567 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/i.php' not found or unable to stat [Fri Oct 17 02:42:04.769598 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/asdf.php' not found or unable to stat [Fri Oct 17 02:42:04.835007 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/pinfo.php' not found or unable to stat [Fri Oct 17 02:42:04.961980 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/phpversion.php' not found or unable to stat [Fri Oct 17 02:42:05.096765 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/time.php' not found or unable to stat [Fri Oct 17 02:42:05.135503 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/temp.php' not found or unable to stat [Fri Oct 17 02:42:05.186779 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/old_phpinfo.php' not found or unable to stat [Fri Oct 17 02:42:05.232630 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/infos.php' not found or unable to stat [Fri Oct 17 02:42:05.281697 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/linusadmin-phpinfo.php' not found or unable to stat [Fri Oct 17 02:42:05.317251 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/php-info.php' not found or unable to stat [Fri Oct 17 02:42:05.566228 2025] [php7:error] [pid 4034136] [client 31.220.99.243:58672] script '/var/www/html/phpinfos.php' not found or unable to stat [Fri Oct 17 03:09:57.334070 2025] [authz_core:error] [pid 4033559] [client 64.227.70.2:45936] AH01630: client denied by server configuration: /var/www/html/server-status [Fri Oct 17 03:10:00.170955 2025] [php7:error] [pid 4033571] [client 64.227.70.2:45996] script '/var/www/html/info.php' not found or unable to stat [Fri Oct 17 03:56:41.083879 2025] [php7:error] [pid 4034136] [client 172.207.154.183:51942] script '/var/www/html/shoha.php' not found or unable to stat [Fri Oct 17 03:56:41.231685 2025] [php7:error] [pid 4034136] [client 172.207.154.183:51942] script '/var/www/html/error.php' not found or unable to stat [Fri Oct 17 03:56:41.379520 2025] [php7:error] [pid 4034136] [client 172.207.154.183:51942] script '/var/www/html/031.php' not found or unable to stat [Fri Oct 17 03:56:41.527485 2025] [php7:error] [Oct 17 00:00:01 ip-172-31-29-215 systemd[1]: logrotate.service: Succeeded. Oct 17 00:00:01 ip-172-31-29-215 systemd[1]: Finished Rotate log files. Oct 17 00:00:01 ip-172-31-29-215 systemd[1]: man-db.service: Succeeded. Oct 17 00:00:01 ip-172-31-29-215 systemd[1]: Finished Daily man-db regeneration. Oct 17 00:06:36 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 00:06:36.8505 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 00:06:36 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 00:06:36.8954 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 00:06:36 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: d14bef32-d24f-4a23-bf1f-e79e742f297a Oct 17 00:09:01 ip-172-31-29-215 CRON[4033576]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 17 00:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 17 00:09:02 ip-172-31-29-215 sessionclean[4033589]: Cannot load Xdebug - it was already loaded Oct 17 00:09:02 ip-172-31-29-215 sessionclean[4033589]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 17 00:09:02 ip-172-31-29-215 sessionclean[4033589]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 17 00:09:02 ip-172-31-29-215 sessionclean[4033589]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 17 00:09:02 ip-172-31-29-215 sessionclean[4033589]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 17 00:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 17 00:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 17 00:17:01 ip-172-31-29-215 CRON[4033637]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 17 00:20:01 ip-172-31-29-215 CRON[4033643]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 00:32:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 00:32:25.8968 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 00:32:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 00:32:25.9355 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 00:32:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: b499f083-fd62-445f-9403-21d9cf5ca591 Oct 17 00:39:01 ip-172-31-29-215 CRON[4033811]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 17 00:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 17 00:39:02 ip-172-31-29-215 sessionclean[4033824]: Cannot load Xdebug - it was already loaded Oct 17 00:39:02 ip-172-31-29-215 sessionclean[4033824]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_00:30:01 2025 [pid 4033760] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:03 2025 [pid 4033763] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:05 2025 [pid 4033762] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:07 2025 [pid 4033765] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:09 2025 [pid 4033764] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:11 2025 [pid 4033767] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:13 2025 [pid 4033766] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:15 2025 [pid 4033769] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:18 2025 [pid 4033768] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:19 2025 [pid 4033771] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:22 2025 [pid 4033770] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:23 2025 [pid 4033773] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:27 2025 [pid 4033772] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:28 2025 [pid 4033775] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:31 2025 [pid 4033774] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:33 2025 [pid 4033777] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:36 2025 [pid 4033776] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:38 2025 [pid 4033779] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:41 2025 [pid 4033778] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:42 2025 [pid 4033781] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:45 2025 [pid 4033780] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:46 2025 [pid 4033783] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:50 2025 [pid 4033782] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:51 2025 [pid 4033785] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:54 2025 [pid 4033784] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:30:55 2025 [pid 4033787] CONNECT: Client "103.117.180.96" Fri Oct 17 00:30:58 2025 [pid 4033786] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:00 2025 [pid 4033789] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:03 2025 [pid 4033788] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:05 2025 [pid 4033791] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:07 2025 [pid 4033790] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:08 2025 [pid 4033793] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:11 2025 [pid 4033792] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:13 2025 [pid 4033795] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:16 2025 [pid 4033794] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:18 2025 [pid 4033797] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:20 2025 [pid 4033796] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:22 2025 [pid 4033799] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:25 2025 [pid 4033798] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:27 2025 [pid 4033801] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:29 2025 [pid 4033800] [www] FAIL LOGIN: Client "103.117.180.96" Fri Oct 17 00:31:31 2025 [pid 4033803] CONNECT: Client "103.117.180.96" Fri Oct 17 00:31:31 2025 [pid 4033802] [ftp] OK LOGIN: Client "103.117.180.96", anon password "anonymous" Fri Oct 17 00:31:32 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//Photo.scr", 0.00Kbyte/sec Fri Oct 17 00:31:33 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//Video.scr", 0.00Kbyte/sec Fri Oct 17 00:31:34 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//AV.scr", 0.00Kbyte/sec Fri Oct 17 00:31:35 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//Photo.lnk", 0.00Kbyte/sec Fri Oct 17 00:31:35 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//Video.lnk", 0.00Kbyte/sec Fri Oct 17 00:31:36 2025 [pid 4033804] [ftp] FAIL UPLOAD: Client "103.117.180.96", "//AV.lnk", 0.00Kbyte/sec Fri Oct 17 02:44:26 2025 [pid 4034459] CONNECT: Client "64.62.197.167" Fri Oct 17 08:57:53 2025 [pid 4036302] CONNECT: Cli * Introducing Expanded Security Maintenance for Applications. Receive updates to over 25,000 software packages with your Ubuntu Pro subscription. Free for personal use. https://ubuntu.com/aws/pro