mpatible; ms-office; MSOffice 16)" 202.60.225.251 - - [18/Nov/2025:00:44:57 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-129360.png HTTP/1.1" 304 3488 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 198.46.246.177 - - [18/Nov/2025:00:45:26 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 198.46.246.177 - - [18/Nov/2025:00:45:26 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 202.60.225.251 - - [18/Nov/2025:00:46:03 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-129361.png HTTP/1.1" 200 111161 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice rmj)" 91.232.238.112 - - [18/Nov/2025:00:47:06 -0600] "GET / HTTP/1.0" 200 11192 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" 198.235.24.23 - - [18/Nov/2025:00:47:17 -0600] "GET / HTTP/1.1" 200 3421 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 91.232.238.112 - - [18/Nov/2025:00:51:11 -0600] "GET /robots.txt HTTP/1.1" 404 454 "-" "Mozilla/5.0" 91.232.238.112 - - [18/Nov/2025:00:51:11 -0600] "GET /robots.txt HTTP/1.1" 404 4192 "-" "Mozilla/5.0" 13.89.124.214 - - [18/Nov/2025:01:02:30 -0600] "GET /ReportServer HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x" 43.130.67.6 - - [18/Nov/2025:01:10:40 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.156.128.128 - - [18/Nov/2025:01:20:30 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 20.14.88.150 - - [18/Nov/2025:01:21:55 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 zgrab/0.x" 202.60.225.251 - - [18/Nov/2025:01:36:09 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-129361.png HTTP/1.1" 304 3488 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)" 136.143.177.62 - - [18/Nov/2025:01:39:02 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 89.35.130.146 - - [18/Nov/2025:01:45:57 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:58 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:58 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:58 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:58 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:59 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:59 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:59 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:45:59 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:46:00 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:46:00 -0600] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 89.35.130.146 - - [18/Nov/2025:01:46:00 -0600] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-h.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.143.176.60 - - [18/Nov/2025:03:39:15 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 159.203.171.249 - - [18/Nov/2025:03:44:16 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:16 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:17 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:17 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:17 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:17 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:17 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:18 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:18 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:18 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:18 -0600] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:19 -0600] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:19 -0600] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:19 -0600] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:19 -0600] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:19 -0600] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:20 -0600] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:20 -0600] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:20 -0600] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:20 -0600] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:21 -0600] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:21 -0600] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:21 -0600] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:22 -0600] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:22 -0600] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 159.203.171.249 - - [18/Nov/2025:03:44:22 -0600] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredta:25:01 ip-172-31-29-215 cracklib: no dictionary update necessary. Nov 18 06:39:01 ip-172-31-29-215 CRON[148069]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Nov 18 06:39:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Nov 18 06:39:12 ip-172-31-29-215 sessionclean[148083]: Cannot load Xdebug - it was already loaded Nov 18 06:39:12 ip-172-31-29-215 sessionclean[148083]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Nov 18 06:39:12 ip-172-31-29-215 sessionclean[148083]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Nov 18 06:39:12 ip-172-31-29-215 sessionclean[148083]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Nov 18 06:39:12 ip-172-31-29-215 sessionclean[148083]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Nov 18 06:39:12 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Nov 18 06:39:12 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Nov 18 06:40:01 ip-172-31-29-215 CRON[148127]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Nov 18 06:46:48 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-11-18 06:46:48.9896 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Nov 18 06:46:49 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-11-18 06:46:49.0302 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Nov 18 06:46:49 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: e7f66c02-7a27-4394-99d1-724410c846c0 Nov 18 06:57:19 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities... Nov 18 06:57:49 ip-172-31-29-215 apt-helper[148160]: E: Sub-process nm-online returned an error code (1) Nov 18 06:57:53 ip-172-31-29-215 systemd[1]: apt-daily-upgrade.service: Succeeded. Nov 18 06:57:53 ip-172-31-29-215 systemd[1]: Finished Daily apt upgrade and clean activities. Nov 18 07:00:01 ip-172-31-29-215 CRON[148241]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Nov 18 07:09:01 ip-172-31-29-215 CRON[148267]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Nov 18 07:09:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Nov 18 07:09:12 ip-172-31-29-215 sessionclean[148281]: Cannot load Xdebug - it was already loaded Nov 18 07:09:12 ip-172-31-29-215 sessionclean[148281]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Nov 18 07:09:12 ip-172-31-29-215 sessionclean[148281]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Nov 18 07:09:12 ip-172-31-29-215 sessionclean[148281]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Nov 18 07:09:12 ip-172-31-29-215 sessionclean[148281]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Nov 18 07:09:12 ip-1/usr/share/dict/words /usr/share/dict/words.pre-dictionaries-common dictionaries-common /usr/share/man/man1/sh.1.gz /usr/share/man/man1/sh.distrib.1.gz dash /usr/share/vim/vim81/doc/help.txt /usr/share/vim/vim81/doc/help.txt.vim-tiny vim-runtime /bin/sh /bin/sh.distrib dash /usr/share/vim/vim81/doc/tags /usr/share/vim/vim81/doc/tags.vim-tiny vim-runtime