5845.140 Safari/537.36" 91.224.92.162 - - [21/Feb/2026:05:16:26 -0600] "GET /wp-login.php HTTP/1.1" 404 4275 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.162 - - [21/Feb/2026:05:16:26 -0600] "GET /wp-login.php HTTP/1.1" 404 493 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 91.224.92.162 - - [21/Feb/2026:05:16:26 -0600] "GET /wp-admin/ HTTP/1.1" 404 515 "https://www.google.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 66.132.153.136 - - [21/Feb/2026:05:16:44 -0600] "GET / HTTP/1.1" 200 7163 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.153.136 - - [21/Feb/2026:05:16:44 -0600] "GET /favicon.ico HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.153.136 - - [21/Feb/2026:05:16:58 -0600] "GET /sitemap.xml HTTP/1.1" 404 4134 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.134.186.61 - - [21/Feb/2026:05:20:04 -0600] "GET / HTTP/1.0" 400 624 "-" "-" 176.65.132.193 - - [21/Feb/2026:05:24:06 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:06 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:06 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:06 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:07 -0600] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTine 0 Feb 21 05:09:02 ip-172-31-29-215 sessionclean[1374216]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 21 05:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 21 05:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 21 05:15:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-21 05:15:34.0594 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 21 05:15:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-21 05:15:34.0978 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 21 05:15:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 720a4caa-4093-4fce-b21a-dfef1b0c0cbc Feb 21 05:17:01 ip-172-31-29-215 CRON[1374268]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Feb 21 05:20:01 ip-172-31-29-215 CRON[1374280]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 21 05:36:52 ip-172-31-29-215 systemd[1]: Starting Refresh fwupd metadata and update motd... Feb 21 05:36:52 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.48709' (uid=116 pid=1374340 comm="/usr/bin/fwupdmgr refresh " label="unconfined") Feb 21 05:36:52 ip-172-31-29-215 systemd[1]: Starting Firmware update daemon... Feb 21 05:36:52 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.fwupd' Feb 21 05:36:52 ip-172-31-29-215 systemd[1]: Started Firmware update daemon. Feb 21 05:36:52 ip-172-31-29-215 fwupd[1374345]: 11:36:52:0362 FuPluginLinuxSleep could not open /sys/power/mem_sleep: Error opening file /sys/power/mem_sleep: No such file or directory Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Updating lvfs Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Downloading…: 0% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Downloading…: 34% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Downloading…: 52% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Downloading…: 70% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Downloading…: 88% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Idle…: 100% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Idle…: 100% Feb 21 05:36:52 ip-172-31-29-215 fwupdmgr[1374340]: Successfully downloaded new metadata: 0 local devices supported Feb 21 05:36:52 ip-172-31-29-215 systemd[1]: fwupd-refresh.service: Succeeded. Feb 21 05:36:52 ip-172-31-29-215 systemd[1]: Finished Refresh fwupd metadata and update motd. Feb 21 05:39:01 ip-172-31-29-215 CRON[1374357]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 21 05:39:11 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 21 05:39:11 ip-172-31-29-215 sessionclean[1374372]: Cannot load Xdebug - it was already loaded Feb 21 05:39:11 ip-172-31-29-215 sessionclean[1374372]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 21 05:39:11 ip-172-31-29-215 sessionclean[1374372]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 21 05:39:11 ip-172-31-29-215 sessionclean[1374372]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 21 05:39:11 ip-172-31-29-215 sessioTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:08 -0600] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:09 -0600] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:10 -0600] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 490 "-" "libredtail-http" 176.65.132.193 - - [21/Feb/2026:05:24:11 -0600] "GET /containers/json HTTP/1.1" 404 490 "-" "libredtail-http" 89.117.22.117 - - [2in:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-02-21 06:51:20,341:DEBUG:certbot.log:Root logging level set at 30 2026-02-21 06:51:20,343:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2026-02-21 06:51:20,349:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2026-02-21 06:51:20,357:INFO:certbot.renewal:Cert not yet due for renewal 2026-02-21 06:51:20,357:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2026-02-21 06:51:20,358:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2026-02-21 06:51:20,358:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2026-02-21 06:51:20,361:INFO:certbot.renewal:Cert not yet due for renewal 2026-02-21 06:51:20,362:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2026-02-21 06:51:20,362:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2026-02-21 06:51:20,362:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2026-02-21 06:51:20,362:DEBUG:certbot.renewal:no renewal failures 2026-02-21 13:12:32,704:DEBUG:certbot.main:certbot version: 0.40.0 2026-02-21 13:12:32,705:DEBUG:certbot.main:Arguments: ['-q'] 2026-02-21 13:12:32,705:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-02-21 13:12:32,714:DEBUG:certbot.log:Root logging level set at 30 2026-02-21 13:12:32,715:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2026-02-21 13:12:32,722:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2026-02-21 13:12:32,730:INFO:certbot.renewal:Cert not yet due for renewal 2026-02-21 13:12:32,731:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2026-02-21 13:12:32,732:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2026-02-21 13:12:32,732:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2026-02-21 13:12:32,736:INFO:certbot.renewal:Cert not yet due for renewal 2026-02-21 13:12:32,737:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2026-02-21 13:12:32,737:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2026-02-21 13:12:32,737:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2026-02-21 13:12:32,737:DEBUG:certbot.renewal:no renewal failures