line 0 Oct 6 00:39:02 ip-172-31-29-215 sessionclean[3925712]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 6 00:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 6 00:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 6 00:40:01 ip-172-31-29-215 CRON[3925755]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 00:42:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 00:42:14.3424 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 6 00:42:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 00:42:14.3823 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 6 00:42:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: bcab51c1-824f-4f9f-90ae-34156ceb6212 Oct 6 01:00:01 ip-172-31-29-215 CRON[3925791]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 01:07:16 ip-172-31-29-215 systemd[1]: Starting Daily apt download activities... Oct 6 01:07:46 ip-172-31-29-215 apt-helper[3925820]: E: Sub-process nm-online returned an error code (1) Oct 6 01:07:46 ip-172-31-29-215 systemd[1]: Starting Update APT News... Oct 6 01:07:46 ip-172-31-29-215 systemd[1]: Starting Update the local ESM caches... Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: apt-news.service: Succeeded. Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: Finished Update APT News. Oct 6 01:07:47 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.PackageKit' unit='packagekit.service' requested by ':1.36058' (uid=0 pid=3926331 comm="/usr/bin/gdbus call --system --dest org.freedeskto" label="unconfined") Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: Starting PackageKit Daemon... Oct 6 01:07:47 ip-172-31-29-215 PackageKit: daemon start Oct 6 01:07:47 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.PackageKit' Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: Started PackageKit Daemon. Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: esm-cache.service: Succeeded. Oct 6 01:07:47 ip-172-31-29-215 systemd[1]: Finished Update the local ESM caches. Oct 6 01:07:58 ip-172-31-29-215 systemd[1]: apt-daily.service: Succeeded. Oct 6 01:07:58 ip-172-31-29-215 systemd[1]: Finished Daily apt download activities. Oct 6 01:09:01 ip-172-31-29-215 CRON[3926579]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 6 01:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 6 01:09:02 ip-172-31-29-215 sessionclean[3926592]: Cannot load Xdebug - it was already loaded Oct 6 01:09:02 ip-172-31-29-215 sessionclean[3926592]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 6 01:09:02 ip-172-31-29-215 sessionclean[3926592]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 6 01:09:02 ip-172-31-29-215 sessionclean[3926592]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 6 01:09:02 ip-172-31-29-215 sessionclean[3926592]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 6 01:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 6 01:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 6 01:11:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 01:11:07.3839 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 6 01:11:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 01:11:07.4293 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 6 01:11:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 1f30ab54-93dc-4a7c-ad5d-69cf4f196746 Oct 6 01:12:52 ip-172-31-29-215 PackageKit: daemon quit Oct 6 01:12:52 ip-172-31-29-215 systemd[1]: packagekit.service: Succeeded. Oct 6 01:17:01 ip-172-31-29-215 CRON[3926638]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 6 01:20:01 ip-172-31-29-215 CRON[3926644]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 01:38:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 01:38:17.4310 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 6 01:38:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 01:38:17.4722 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 6 01:38:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: d99ab1b9-df84-4b94-9dd1-09f0027a2221 Oct 6 01:39:01 ip-172-31-29-215 CRON[3926707]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 6 01:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 6 01:39:02 ip-172-31-29-215 sessionclean[3926720]: Cannot load Xdebug - it was already loaded Oct 6 01:39:02 ip-172-31-29-215 sessionclean[3926720]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 6 01:39:02 ip-172-31-29-215 sessionclean[3926720]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 6 01:39:02 ip-172-31-29-215 sessionclean[3926720]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 6 01:39:02 ip-172-31-29-215 sessionclean[3926720]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 6 01:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 6 01:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 6 01:40:01 ip-172-31-29-215 CRON[3926763]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 02:00:01 ip-172-31-29-215 CRON[3926850]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 02:04:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 02:04:25.5669 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved crede "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 138.68.145.167 - - [06/Oct/2025:01:22:39 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 138.68.145.167 - - [06/Oct/2025:01:22:39 -0600] "GET /favicon.ico HTTP/1.1" 404 498 "http://cfdi.aptuslegal.app/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 138.68.145.167 - - [06/Oct/2025:01:22:40 -0600] "GET / HTTP/1.1" 200 7279 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 138.68.145.167 - - [06/Oct/2025:01:22:42 -0600] "GET /favicon.ico HTTP/1.1" 404 4257 "https://cfdi.aptuslegal.app/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 91.224.92.120 - - [06/Oct/2025:01:26:34 -0600] "GET /wp-login.php HTTP/1.1" 404 4267 "https://www.google.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 91.224.92.120 - - [06/Oct/2025:01:26:35 -0600] "GET /wp-login.php HTTP/1.1" 404 493 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.120 - - [06/Oct/2025:01:26:35 -0600] "GET /wp-admin/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 136.143.176.60 - - [06/Oct/2025:01:26:51 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 165.225.240.114 - - [06/Oct/2025:01:29:49 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-120064.png HTTP/1.1" 200 108609 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 165.225.240.114 - - [06/Oct/2025:01:29:49 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-120064.png HTTP/1.1" 200 108609 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 165.225.240.114 - - [06/Oct/2025:01:29:49 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-120064.png HTTP/1.1" 200 108609 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 45.83.57.104 - - [06/Oct/2025:01:30:22 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 45.83.57.104 - - [06/Oct/2025:01:30:23 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 216.180.246.92 - - [06/Oct/2025:01:44:29 -0600] "\x16\x03\x01" 400 488 "-" "-" 216.180.246.92 - - [06/Oct/2025:01:44:46 -0600] "GET /favicon.ico HTTP/1.1" 404 435 "-" "'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)'" 20.29.23.70 - - [06/Oct/2025:01:57:48 -0600] "GET /developmentserver/metadatauploader HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x" 185.244.104.2 - - [06/Oct/2025:02:05:28 -0600] "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 136.143.176.60 - - [06/Oct/2025:02:09:47 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 62.12.134.201 - - [06/Oct/2025:02:17:57 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156146 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.12.134.201 - - [06/Oct/2025:02:17:57 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156146 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.12.134.201 - - [06/Oct/2025:02:17:57 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156146 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.12.134.201 - - [06/Oct/2025:02:17:58 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156146 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.12.134.201 - - [06/Oct/2025:02:17:58 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156146 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 62.12.134.2CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 6 04:20:01 ip-172-31-29-215 CRON[3927414]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 04:21:03 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 04:21:03.9520 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 6 04:21:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 04:21:03.9882 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 6 04:21:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 5411cdd6-6c17-4b97-8a6f-95f040d140f4 Oct 6 04:39:01 ip-172-31-29-215 CRON[3927588]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 6 04:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 6 04:39:02 ip-172-31-29-215 sessionclean[3927603]: Cannot load Xdebug - it was already loaded Oct 6 04:39:02 ip-172-31-29-215 sessionclean[3927603]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 6 04:39:02 ip-172-31-29-215 sessionclean[3927603]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 6 04:39:02 ip-172-31-29-215 sessionclean[3927603]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 6 04:39:02 ip-172-31-29-215 sessionclean[3927603]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 6 04:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 6 04:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 6 04:40:01 ip-172-31-29-215 CRON[3927650]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 04:40:57 ip-172-31-29-215 systemd[1]: Starting Refresh fwupd metadata and update motd... Oct 6 04:40:57 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.36072' (uid=116 pid=3927673 comm="/usr/bin/fwupdmgr refresh " label="unconfined") Oct 6 04:40:57 ip-172-31-29-215 systemd[1]: Starting Firmware update daemon... Oct 6 04:40:57 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.fwupd' Oct 6 04:40:57 ip-172-31-29-215 systemd[1]: Started Firmware update daemon. Oct 6 04:40:57 ip-172-31-29-215 fwupd[3927678]: 10:40:57:0495 FuPluginLinuxSleep could not open /sys/power/mem_sleep: Error opening file /sys/power/mem_sleep: No such file or directory Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Updating lvfs Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Downloading…: 0% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Downloading…: 35% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Downloading…: 53% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Downloading…: 71% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Downloading…: 89% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Idle…: 100% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Idle…: 100% Oct 6 04:40:57 ip-172-31-29-215 fwupdmgr[3927673]: Successfully downloaded new metadata: 0 local devices supported Oct 6 04:40:57 ip-172-31-29-215 systemd[1]: fwupd-refresh.ser119" Mon Oct 6 04:36:04 2025 [pid 3927492] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:06 2025 [pid 3927495] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:08 2025 [pid 3927494] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:09 2025 [pid 3927497] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:11 2025 [pid 3927496] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:13 2025 [pid 3927499] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:15 2025 [pid 3927498] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:17 2025 [pid 3927501] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:19 2025 [pid 3927500] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:20 2025 [pid 3927503] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:23 2025 [pid 3927502] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:24 2025 [pid 3927505] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:27 2025 [pid 3927504] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:28 2025 [pid 3927507] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:30 2025 [pid 3927506] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:32 2025 [pid 3927509] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:34 2025 [pid 3927508] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:36 2025 [pid 3927511] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:38 2025 [pid 3927510] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:39 2025 [pid 3927513] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:42 2025 [pid 3927512] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:43 2025 [pid 3927515] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:46 2025 [pid 3927514] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:47 2025 [pid 3927517] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:50 2025 [pid 3927516] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:51 2025 [pid 3927519] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:53 2025 [pid 3927518] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:54 2025 [pid 3927522] CONNECT: Client "186.136.1.119" Mon Oct 6 04:36:57 2025 [pid 3927521] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:36:58 2025 [pid 3927524] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:01 2025 [pid 3927523] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:03 2025 [pid 3927526] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:05 2025 [pid 3927525] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:06 2025 [pid 3927528] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:09 2025 [pid 3927527] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:10 2025 [pid 3927530] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:12 2025 [pid 3927529] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:14 2025 [pid 3927532] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:16 2025 [pid 3927531] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:18 2025 [pid 3927534] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:20 2025 [pid 3927533] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:22 2025 [pid 3927536] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:24 2025 [pid 3927535] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:25 2025 [pid 3927538] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:28 2025 [pid 3927537] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:30 2025 [pid 3927540] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:32 2025 [pid 3927539] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:34 2025 [pid 3927542] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:36 2025 [pid 3927541] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:37 2025 [pid 3927544] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:40 2025 [pid 3927543] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:42 2025 [pid 3927546] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:44 2025 [pid 3927545] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:46 2025 [pid 3927548] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:48 2025 [pid 3927547] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:49 2025 [pid 3927550] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:52 2025 [pid 3927549] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:53 2025 [pid 3927552] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:55 2025 [pid 3927551] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:37:57 2025 [pid 3927554] CONNECT: Client "186.136.1.119" Mon Oct 6 04:37:59 2025 [pid 3927553] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:03 2025 [pid 3927557] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:06 2025 [pid 3927556] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:07 2025 [pid 3927559] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:10 2025 [pid 3927558] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:11 2025 [pid 3927561] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:14 2025 [pid 3927560] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:15 2025 [pid 3927563] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:18 2025 [pid 3927562] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:19 2025 [pid 3927565] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:22 2025 [pid 3927564] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:23 2025 [pid 3927567] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:26 2025 [pid 3927566] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:27 2025 [pid 3927569] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:29 2025 [pid 3927568] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:31 2025 [pid 3927571] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:33 2025 [pid 3927570] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:35 2025 [pid 3927573] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:37 2025 [pid 3927572] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:39 2025 [pid 3927575] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:41 2025 [pid 3927574] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:42 2025 [pid 3927577] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:45 2025 [pid 3927576] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:46 2025 [pid 3927579] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:49 2025 [pid 3927578] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:50 2025 [pid 3927581] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:53 2025 [pid 3927580] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:54 2025 [pid 3927583] CONNECT: Client "186.136.1.119" Mon Oct 6 04:38:57 2025 [pid 3927582] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:38:58 2025 [pid 3927585] CONNECT: Client "186.136.1.119" Mon Oct 6 04:39:00 2025 [pid 3927584] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:39:02 2025 [pid 3927591] CONNECT: Client "186.136.1.119" Mon Oct 6 04:39:05 2025 [pid 3927590] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:39:06 2025 [pid 3927645] CONNECT: Client "186.136.1.119" Mon Oct 6 04:39:09 2025 [pid 3927644] [www] FAIL LOGIN: Client "186.136.1.119" Mon Oct 6 04:39:10 2025 [pid 3927647] CONNECT: Client "186.136.1.119" Mon Oct 6 04:39:10 2025 [pid 3927646] [ftp] OK LOGIN: Client "186.136.1.119", anon password "anonymous" Mon Oct 6 04:39:11 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//Photo.scr", 0.00Kbyte/sec Mon Oct 6 04:39:12 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//Video.scr", 0.00Kbyte/sec Mon Oct 6 04:39:13 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//AV.scr", 0.00Kbyte/sec Mon Oct 6 04:39:13 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//Photo.lnk", 0.00Kbyte/sec Mon Oct 6 04:39:14 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//Video.lnk", 0.00Kbyte/sec Mon Oct 6 04:39:14 2025 [pid 3927648] [ftp] FAIL UPLOAD: Client "186.136.1.119", "//AV.lnk", 0.00Kbyte/sec Mon Oct 6 08:43:08 2025 [pid 3929250] CONNECT: Client "149.102.244.68" Mon Oct 6 08:43:09 2025 [pid 3929249] [ftp] OK LOGIN: Client "149.102.244.68", anon password "wpmgcaf Manager's instance management role is not configured for account: 227937466084 Oct 6 06:10:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: b706819b-64e5-4742-9895-a1d157c98751 Oct 6 06:17:01 ip-172-31-29-215 CRON[3928020]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 6 06:20:01 ip-172-31-29-215 CRON[3928031]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 06:25:01 ip-172-31-29-215 CRON[3928066]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Oct 6 06:25:01 ip-172-31-29-215 cracklib: no dictionary update necessary. Oct 6 06:34:02 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities... Oct 6 06:34:32 ip-172-31-29-215 apt-helper[3928169]: E: Sub-process nm-online returned an error code (1) Oct 6 06:34:36 ip-172-31-29-215 systemd[1]: apt-daily-upgrade.service: Succeeded. Oct 6 06:34:36 ip-172-31-29-215 systemd[1]: Finished Daily apt upgrade and clean activities. Oct 6 06:38:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 06:38:37.3854 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 6 06:38:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-06 06:38:37.4239 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 6 06:38:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 372a6886-91d8-4c69-ac2d-a04563a2ce79 Oct 6 06:39:01 ip-172-31-29-215 CRON[3928250]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 6 06:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 6 06:39:02 ip-172-31-29-215 sessionclean[3928263]: Cannot load Xdebug - it was already loaded Oct 6 06:39:02 ip-172-31-29-215 sessionclean[3928263]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 6 06:39:02 ip-172-31-29-215 sessionclean[3928263]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 6 06:39:02 ip-172-31-29-215 sessionclean[3928263]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 6 06:39:02 ip-172-31-29-215 sessionclean[3928263]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 6 06:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 6 06:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 6 06:40:01 ip-172-31-29-215 CRON[3928308]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 06:40:58 ip-172-31-29-215 systemd[1]: fwupd.service: Succeeded. Oct 6 07:00:01 ip-172-31-29-215 CRON[3928356]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 6 07:03:52 ip-172-31-29-215 systemd[1]: Created slice User Slice of UID 1000. Oct 6 07:03:52 ip-172-31-29-215 systemd[1]: Starting User Runtime Directory /run/user/1000... Oct 6 07:03:52 ip-172-31-29-215 systemd[1]: Finished User Runtime Directory /run/user/1000. Oct 6 07:03:52 ip-172-31-29-215 systemd[1]: Starting User Manager for UID 1000... Oct 6 07:03:52 ip-172-31.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:20:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:09 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:09 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:10 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:10 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:13 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:14 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:15 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:15 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:21 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:22 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:23 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:23 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:25 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:25 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:26 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:26 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:28 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:28 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [06/Oct/2025:06:21:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 87.121.84.17 - - [06/Oct/2025:06:22:20 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 182.43.70.143 - - [06/Oct/2025:06:30:21 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 189.217.82.80 - - [06/Oct/2025:06:32:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111151.png HTTP/1.1" 200 156544 "-" "Mozilla/5.0 (Linux; Android 14; RMX3890 Build/UKQ1.230917.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/140.0.7339.207 Mobile Safari/537.36" 54.204.132.116 - - [06/Oct/2025:06:32:07 -0600] "GET /.git/config HTTP/1.1" 404 4220 "-" "Mozilla/4.1 (compatible; MSIE 5.0; Symbian OS; Nokia 6600;452) Opera 6.20 [en-US]" 43.133.187.11 - - [06/Oct/2025:06:33:53 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 71.6.232.20 - - [06/Oct/2025:06:34:27 -0600] "GET / HTTP/1.1" 200 6583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:42 -0600] "GET /.env HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:42 -0600] "GET /.env.save HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:43 -0600] "GET /.env.prod HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:43 -0600] "GET /api/.env HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:43 -0600] "GET /dev/.env HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:44 -0600] "GET /application/.env HTTP/1.1" 404 4267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.178.110.160 - - [06/Oct/2025:06:35:44 -0600] "GET/usr/share/dict/words /usr/share/dict/words.pre-dictionaries-common dictionaries-common /usr/share/man/man1/sh.1.gz /usr/share/man/man1/sh.distrib.1.gz dash /usr/share/vim/vim81/doc/help.txt /usr/share/vim/vim81/doc/help.txt.vim-tiny vim-runtime /bin/sh /bin/sh.distrib dash /usr/share/vim/vim81/doc/tags /usr/share/vim/vim81/doc/tags.vim-tiny vim-runtime