.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93457.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93457.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93414.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93414.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93414.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 202.60.225.251 - - [20/May/2025:02:02:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-93414.gif HTTP/1.1" 304 3523 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" ::1 - - [20/May/2025:02:03:00 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:01 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:02 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:03 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:04 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:05 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:06 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [20/May/2025:02:03:07 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" 185.189.182.234 - - [20/May/2025:02:03:35 -0600] "GET / HTTP/1.0" 400 624 "-" "-" 206.168.34.194 - - [20/May/2025:02:45:25 -0600] "GET / HTTP/1.1" 200 7191 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 206.168.34.194 - - [20/May/2025:02:45:26 -0600] "GET /favicon.ico HTTP/1.1" 404 4181 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 206.168.34.194 - - [20/May/2025:02:45:45 -0600] "GET /favicon.ico HTTP/1.1" 404 4181 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 98.209.162.22 - - [20/May/2025:03:03:39 -0600] "GET / HTTP/1.1" 200 11229 "-" "Hello-World/1.0" 192.241.155.120 - - [20/May/2025:03:40:40 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0" 139.59.151.250 - - [20/May/2025:03:45:15 -0600] "\x16\x03\x01" 400 488 "-" "-" 139.59.151.250 - - [20/May/2025:03:45:15 -0600] "\x16\x03\x01" 400 488 "-" "-" 139.59.151.250 - - [20/May/2025:03:45:16 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 139.59.151.250 - - [20/May/2025:03:45:16 -0600] "GET /form.html HTTP/1.1" 404 435 "-" "curl/8.1.2" 139.59.151.250 - - [20/May/2025:03:45:16 -0600] "GET /upl.php HTTP/1.1" 404 435 "-" "Mozilla/5.0" 139.59.151.250 - - [20/May/2025:03:45:16 -0600] "GET /t4 HTTP/1.1" 404 435 "-" "Mozilla/5.0" 139.59.151.250 - - [20/May/2025:03:45:17 -0600] "GET /geoip/ HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 139.59.151.250 - - [20/May/2025:03:45:17 -0600] "GET /favicon.ico HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 139.59.151.250 - - [20/May/2025:03:45:17 -0600] "GET /1.php uch file or directory)) in Unknown on line 0 May 20 03:39:19 ip-172-31-29-215 sessionclean[2186348]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 May 20 03:39:19 ip-172-31-29-215 sessionclean[2186348]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 May 20 03:39:19 ip-172-31-29-215 sessionclean[2186348]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 May 20 03:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. May 20 03:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. May 20 03:40:01 ip-172-31-29-215 CRON[2186391]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) May 20 03:41:42 ip-172-31-29-215 PackageKit: daemon quit May 20 03:41:42 ip-172-31-29-215 systemd[1]: packagekit.service: Succeeded. May 20 03:53:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-05-20 03:53:27.6374 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found May 20 03:53:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-05-20 03:53:27.6744 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 May 20 03:53:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: a5b939ed-7d90-4f17-9408-98454f4d9fc8 May 20 04:00:01 ip-172-31-29-215 CRON[2186423]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) May 20 04:09:01 ip-172-31-29-215 CRON[2186449]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) May 20 04:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... May 20 04:09:19 ip-172-31-29-215 sessionclean[2186462]: Cannot load Xdebug - it was already loaded May 20 04:09:19 ip-172-31-29-215 sessionclean[2186462]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 May 20 04:09:19 ip-172-31-29-215 sessionclean[2186462]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 May 20 04:09:19 ip-172-31-29-215 sessionclean[2186462]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 May 20 04:09:19 ip-172-31-29-215 sessionclean[2186462]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 May 20 04:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. May 20 04:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. May 20 04:13:19 ip-172-31-29-215 systemd[1]: Starting Refresh fwupd metadata and update motd... May 20 04:13:20 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.21980' (uid=116 pid=2186505 comm="/usr/bin/fwupdmgr refresh " label="unconfined") May 20 04:13:20 ip-172-31-29-215 systemd[1]: Starting Firmware update daemon... May 20 04:13:20 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.fwupd' May 20 04:13:20 ip-172-31-29-215 systemd[1]: Started Firmware update daemon. May 20 04:13:20 ip-172-31-29-215 fwupd[2186510]: 10:13:20:0383 FuPluginLinuxSleep could not open /sys/power/mem_sleep: Error opening file /sys/power/mem_sleep: No such file or directory May 20 04:13:20 ip-172-31-29-215 systemd[1]: fwupd-refresh.service: Succeeded. MaHTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 139.59.151.250 - - [20/May/2025:03:45:17 -0600] "GET /systembc/password.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 139.59.151.250 - - [20/May/2025:03:45:17 -0600] "GET /password.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.159.152.184 - - [20/May/2025:03:47:14 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.242.226.116 - - [20/May/2025:03:47:43 -0600] "\x16\x03\x01" 400 488 "-" "-" 172.236.228.111 - - [20/May/2025:03:54:17 -0600] "\x16\x03\x01\x01\n" 400 488 "-" "-" 172.236.228.111 - - [20/May/2025:03:54:17 -0600] "\x16\x03\x01\x01\n" 400 488 "-" "-" 124.156.187.113 - - [20/May/2025:04:08:58 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 3.137.73.221 - - [20/May/2025:04:20:37 -0600] "GET / HTTP/1.0" 400 624 "-" "-" 192.178.6.74 - - [20/May/2025:04:21:31 -0600] "GET /robots.txt HTTP/1.1" 404 493 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.239.14.59 - - [20/May/2025:04:22:20 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-107264.png HTTP/1.1" 200 260069 "-" "Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.4849; Pro)" 3.137.73.221 - - [20/May/2025:04:24:42 -0600] "GET / HTTP/1.0" 400 624 "-" "-" 92.112.236.155 - - [20/May/2025:04:25:40 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 92.112.236.155 - - [20/May/2025:04:25:40 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 20.65.194.16 - - [20/May/2025:04:26:57 -0600] "GET /version HTTP/1.1" 404 3576 "-" "Mozilla/5.0 zgrab/0.x" 3.137.73.221 - - [20/May/2025:04:28:14 -0600] "GET / HTTP/1.1" 200 6619 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 198.203.28.114 - - [20/May/2025:04:31:58 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:31:58 -0600] "GET /phpinfo.php HTTP/1.1" 200 24713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:31:59 -0600] "GET /test.php HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:31:59 -0600] "GET /_profiler/phpinfo HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:31:59 -0600] "GET /.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:32:00 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:32:00 -0600] "GET /index.php HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 198.203.28.114 - - [20/May/2025:04:32:00 -0600] "GET /.aws/credentials HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 52.3.199.226 - - [20/May/2025:04:39:30 -0600] "GET /i