1.162.241.188 - - [14/Feb/2026:01:35:20 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-130220.png HTTP/1.1" 200 115770 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:34 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-39702.gif HTTP/1.1" 200 46356 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68121.gif HTTP/1.1" 200 27623 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68119.gif HTTP/1.1" 200 30165 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68123.gif HTTP/1.1" 200 30748 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68120.gif HTTP/1.1" 200 31011 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:35:52 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68122.gif HTTP/1.1" 200 30032 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 201.162.241.188 - - [14/Feb/2026:01:38:20 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-114890.png HTTP/1.1" 200 140581 "-" "Mozilla/5.0 (Linux; Android 16; SM-G990E Build/BP2A.250605.031.A3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/144.0.7559.132 Mobile Safari/537.36" 81.29.142.100 - - [14/Feb/2026:02:16:38 -0600] "GET / HTTP/1.1" 200 14929 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.135 YaBrowser/21.6.2.855 Yowser/2.5 Safari/537.36" 81.29.142.100 - - [14/Feb/2026:02:16:38 -0600] "GET /favicon.ico HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.135 YaBrowser/21.6.2.855 Yowser/2.5 Safari/537.36" 136.143.176.64 - - [14/Feb/2026:02:22:10 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37317303 "-" "Zoho_Analytics" 204.76.203.25 - - [14/Feb/2026:02:23:48 -0600] "GET / HTTP/1.1" 200 14980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 45.249.59.15 - - [14/Feb/2026:02:29:07 -0600] "GET /.env HTTP/1.1" 404 4237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 45.249.59.15 - - [14/Feb/2026:02:29:08 -0600] "POST / HTTP/1.1" 200 7266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 204.76.203.206 - - [14/Feb/2026:02:29:30 -0600] "GET / HTTP/1.1" 200 11192 "-" "Wget" 136.143.176.64 - - [14/Feb/2026:02:29:52 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4039 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 124.156.187.113 - - [14/Feb/2026:02:38:14 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 34.38.83.65 - - [14/Feb/2026:02:54:14 -0600] "GET / HTTP/1.1" 200 3477 "-" "python-req65]: #011status code: 400, request id: e1b03ba7-8c05-4627-ada3-19997294b235 Feb 14 02:09:01 ip-172-31-29-215 CRON[1271505]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 02:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 02:09:19 ip-172-31-29-215 sessionclean[1271518]: Cannot load Xdebug - it was already loaded Feb 14 02:09:19 ip-172-31-29-215 sessionclean[1271518]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 14 02:09:19 ip-172-31-29-215 sessionclean[1271518]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 14 02:09:19 ip-172-31-29-215 sessionclean[1271518]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 14 02:09:19 ip-172-31-29-215 sessionclean[1271518]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 14 02:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 14 02:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 14 02:17:01 ip-172-31-29-215 CRON[1271563]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Feb 14 02:20:01 ip-172-31-29-215 CRON[1271568]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 02:25:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 02:25:39.6161 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 14 02:25:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 02:25:39.6492 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 14 02:25:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: c7e33afc-c952-40c5-b858-af7c4efaedb2 Feb 14 02:39:01 ip-172-31-29-215 CRON[1271819]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 02:39:04 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 02:39:04 ip-172-31-29-215 sessionclean[1271832]: Cannot load Xdebug - it was already loaded Feb 14 02:39:04 ip-172-31-29-215 sessionclean[1271832]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 14 02:39:04 ip-172-31-29-215 sessionclean[1271832]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 14 02:39:04 ip-172-31-29-215 sessionclean[1271832]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 14 02:39:04 ip-172-31-29-215 sessionclean[1271832]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 14 02:39:04 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 14 02:39:04 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 14 02:40:01 ip-172-31-29-215 CRON[1271876]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 02:52:35 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 02:52:35.6508 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 14 02:52:35 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 02:52:35.6851 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 14 02:52:35 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: ec76205a-66df-471d-ae18-f5099f690fba Feb 14 03:00:01 ip-172-31-29-215 CRON[1271907]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 03:09:01 ip-172-31-29-215 CRON[1271939]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 03:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 03:09:19 ip-172-31-29-215 sessionclean[1271952]: Cannot load Xdebug - it was already loaded Feb 14 03:09:19 ip-172-31-29-215 sessionclean[1271952]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 14 03:09:19 ip-172-31-29-215 sessionclean[1271952]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 14 03:09:19 ip-172-31-29-215 sessionclean[1271952]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 14 03:09:19 ip-172-31-29-215 sessionclean[1271952]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 14 03:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 14 03:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 14 03:10:01 ip-172-31-29-215 CRON[1271998]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r) Feb 14 03:14:22 ip-172-31-29-215 systemd[1]: fwupd.service: Succeeded. Feb 14 03:17:01 ip-172-31-29-215 CRON[1272021]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Feb 14 03:20:01 ip-172-31-29-215 CRON[1272034]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 03:22:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 03:22:25.7870 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 14 03:22:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 03:22:25.8207 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 14 03:22:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 31862984-3775-4d63-a858-b05e6dba69d1 Feb 14 03:39:01 ip-172-31-29-215 CRON[1272094]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 03:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 03:39:19 ip-172-31-29-215 sessionclean[1272107]: Cannot load Xdebug - it was already loaded Feb 14 03:39:19 ip-172-31-29-215 sessionclean[1272107]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unreguests/2.32.5" 104.168.28.15 - - [14/Feb/2026:02:58:16 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 38.225.2.51 - - [14/Feb/2026:02:59:13 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 38.225.2.51 - - [14/Feb/2026:02:59:13 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 152.42.206.46 - - [14/Feb/2026:03:05:01 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 4185 "-" "libredtail-http" 43.155.162.41 - - [14/Feb/2026:03:09:16 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.40.61.98 - - [14/Feb/2026:03:20:13 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 4185 "-" "libredtail-http" 136.143.176.64 - - [14/Feb/2026:03:22:17 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37317303 "-" "Zoho_Analytics" 204.76.203.206 - - [14/Feb/2026:03:24:25 -0600] "GET / HTTP/1.1" 200 11192 "-" "Wget" 35.216.189.16 - - [14/Feb/2026:03:26:04 -0600] "GET / HTTP/1.1" 400 4187 "-" "-" 35.216.189.16 - - [14/Feb/2026:03:26:06 -0600] "GET / HTTP/1.1" 200 14912 "-" "abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:09 -0600] "GET /.git/config HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:10 -0600] "GET /server-status HTTP/1.1" 403 4156 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:11 -0600] "GET /config.json HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:11 -0600] "GET /.env HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:12 -0600] "GET /telescope/requests HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 35.216.189.16 - - [14/Feb/2026:03:26:13 -0600] "GET /info.php HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.fr" 162.62.213.187 - - [14/Feb/2026:03:38:23 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.143.177.61 - - [14/Feb/2026:03:46:06 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37317303 "-" "Zoho_Analytics" 130.12.182.151 - - [14/Feb/2026:03:57:21 -0600] "GET / HTTP/1.1" 200 7265 "-" "Mozilla/5.0" 193.232.90.186 - - [14/Feb/2026:04:03:09 -0600] "HEAD / HTTP/1.1" 200 339 "-" "axios/1.11.0" 193.232.204.17 - - [14/Feb/2026:04:03:10 -0600] "HEAD / HTTP/1.1" 200 4037 "-" "axios/1.11.0" 45.196.124.37 - - [14/Feb/2026:04:03:10 -0600] "GET /.env HTTP/1.1" 404 491 "-" "axios/1.11.0" 45.196.127.219 - - [14/Feb/2026:04:03:10 -0600] "GET /.git/config HTTP/1.1" 404 491 "-" "axios/1.11.0" 135.106.32.122 - - [14/Feb/2026:04:03:10 -0600] "GET / HTTP/1.1" 200 3477 "-" "axios/1.11.0" 153.80.120.250 - - [14/Feb/2026:04:03:10 -0600] "GET /.git/config HTTP/1.1" 404 4190 "-" "axios/1.11.0" 87.247.141.81 - - [14/Feb/2026:04:03:10 -0600] "GET / HTTP/1.1" 200 7219 "-" "axios/1.11.0" ::1 - - [14/Feb/2026:04:03:14 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [14/Feb/2026:04:03:15 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" 153.80.120.250 - - [14/Feb/2026:04:03:18 -0600] "HEAD / 5.245.188.128 - - [14/Feb/2026:04:12:04 -0600] "GET /.env.stage.local HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:04 -0600] "GET /.env.staging HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:05 -0600] "GET /.env.template HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:05 -0600] "GET /.env.test HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:06 -0600] "GET /.env~ HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:06 -0600] "GET /_profiler/phpinfo HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:07 -0600] "GET /.gitlab-ci.yml HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:07 -0600] "GET /env HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:08 -0600] "GET /env.json HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:08 -0600] "GET /git/.env HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:09 -0600] "GET /gitlab-ci.yml HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:09 -0600] "GET /docker_compose.yml HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:09 -0600] "GET /docker-compose.yml HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:10 -0600] "GET /phpinfo HTTP/1.1" 404 435 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:10 -0600] "GET /phpinfo.php HTTP/1.1" 200 92467 "-" "Go-http-client/1.1" 165.245.188.128 - - [14/Feb/2026:04:12:11 -0600] "GET /sms.py HTTP/1.1" 404 435 "-" "Go-http-client/1.1" ::1 - - [14/Feb/2026:04:12:13 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [14/Feb/2026:04:12:14 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [14/Feb/2026:04:12:15 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" 162.216.150.153 - - [14/Feb/2026:04:14:48 -0600] "GET / HTTP/1.1" 200 3421 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 136.143.177.62 - - [14/Feb/2026:04:22:24 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37317303 "-" "Zoho_Analytics" 82.165.46.85 - - [14/Feb/2026:04:22:53 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:53 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:53 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:54 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:54 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:54 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:54 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:55 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:55 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:55 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:22:55 -ort /etc/cron.hourly) Feb 14 04:20:01 ip-172-31-29-215 CRON[1272302]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 04:39:01 ip-172-31-29-215 CRON[1272564]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 04:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 04:39:19 ip-172-31-29-215 sessionclean[1272577]: Cannot load Xdebug - it was already loaded Feb 14 04:39:19 ip-172-31-29-215 sessionclean[1272577]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 14 04:39:19 ip-172-31-29-215 sessionclean[1272577]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 14 04:39:19 ip-172-31-29-215 sessionclean[1272577]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 14 04:39:19 ip-172-31-29-215 sessionclean[1272577]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 14 04:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 14 04:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 14 04:40:01 ip-172-31-29-215 CRON[1272621]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 04:40:54 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 04:40:54.9615 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 14 04:40:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-14 04:40:54.9951 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 14 04:40:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: cb7862a6-096b-46de-83f6-323b45f930a5 Feb 14 05:00:01 ip-172-31-29-215 CRON[1272650]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 14 05:09:01 ip-172-31-29-215 CRON[1272674]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 14 05:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 14 05:09:19 ip-172-31-29-215 sessionclean[1272687]: Cannot load Xdebug - it was already loaded Feb 14 05:09:19 ip-172-31-29-215 sessionclean[1272687]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 14 05:09:19 ip-172-31-29-215 sessionclean[1272687]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 14 05:09:19 ip-172-31-29-215 sessionclean[1272687]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 14 05:09:19 ip-172-31-29-215 sessionclean[1272687]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 14 05:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 14 05:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 14 05:09:20 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-ag.165.46.85:57554] script '/var/www/html/index.php' not found or unable to stat [Sat Feb 14 06:55:44.910209 2026] [php7:error] [pid 1272282] [client 165.245.188.128:60390] script '/var/www/html/.env.php' not found or unable to stat dy loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded dy loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebugphp HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 490 "-" "libredtail-http" 82.165.46.85 - - [14/Feb/2026:04:23:02 -0600] "GET /containers/json HTTP/1.1" 404 490 "-" "libredtail-http" 101.42.46.71 - - [14/Feb/2026:04:23:14 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.133.192.175 - - [14/Feb/2026:04:24:46 -0600] "GET /robots.txt HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 185.13.99.111 - - [14/Feb/2026:04:24:47 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 129.213.147.229 - - [14/Feb/2026:04:26:20 -0600] "GET / HTTP/1.1" 200 7246 "-" "Mozilla/5.0 (compatible; Googlebot/2.1)" 136.143.176.60 - - [14/Feb/2026:04:30:51 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4039 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)" 140.99.206.65 - - [14/Feb/2026:04:35:20 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 140.99.206.65 - - [14/Feb/2026:04:35:21 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 20.221.71.226 - - [14/Feb/2026:04:36:13 -0600] "GET /owa/auth/x.js HTTP/1.1" 404 3548 "-" "Mozilla/5.0 zgrab/0.x" 18.218.0.174 - - [14/Feb/2026:04:44:35 -0600] "GET / HTTP/1.1" 400 4187 "-" "-" 18.218.0.174 - - [14/Feb/2026:04:44:35 -0600] "GET / HTTP/1.1" 200 14912 "-" "l9tcpid/v1.1.0" 104.28.132.121 - - [14/Feb/2026:04:48:16 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-106893.gif HTTP/1.1" 200 29704 "-" "Mozilla/5.0" 104.28.132.121 - - [14/Feb/2026:04:48:18 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-106892.gif HTTP/1.1" 200 25944 "-" "Mozilla/5.0" 81.29.142.100 - - [14/Feb/2026:04:48:21 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 81.29.142.100 - - [14/Feb/2026:04:48:22 -0600] "GET /favicon.ico HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 81.29.142.6 - - [14/Feb/2026:04:48:26 -0600] "GET / HTTP/1.1" 200 14929 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36" 81.29.142.6 - - [14/Feb/2026:04:48:27 -0600] "GET /favicon.ico HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36" 204.76.203.206 - - [14/Feb/2026:04:54:43 -0600] "GET / HTTP/1.1" 200 11192 "-" "Wget" 43.132.214.228 - - [14/Feb/2026:05:12:37 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13art-and-design books-and-reference development devices-and-iot education entertainment featured finance games health-and-fitness music-and-audio news-and-weather personalisation photo-and-video productivity science security server-and-cloud social utilities