[Sun Jan 11 04:43:34.278285 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/cong.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Jan 11 04:43:34.938273 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/wp-signup.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Jan 11 04:43:35.171487 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/wp-themes.php' not found or unable to stat, referer: https://www.google.de/
[Sun Jan 11 04:43:35.390789 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/wso112233.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Jan 11 04:43:35.835152 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/hehe.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Jan 11 04:43:36.054703 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/mln.php' not found or unable to stat, referer: https://www.google.com/
[Sun Jan 11 04:43:36.276270 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/test1.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Jan 11 04:43:36.495473 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/accah.php' not found or unable to stat, referer: https://www.google.de/
[Sun Jan 11 04:43:36.714726 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/gecko-new.php' not found or unable to stat, referer: https://www.google.de/
[Sun Jan 11 04:43:36.955507 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/x.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Jan 11 04:43:37.394580 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/sf.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Jan 11 04:43:37.613771 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/sts.php' not found or unable to stat, referer: https://www.google.com/
[Sun Jan 11 04:43:38.282285 2026] [php7:error] [pid 822891] [client 74.225.193.147:51195] script '/var/www/html/xwpg.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Jan 11 05:41:09.580016 2026] [core:error] [pid 822888] [client 101.36.123.102:46440] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
[Sun Jan 11 05:41:50.965570 2026] [php7:error] [pid 822887] [client 101.36.123.102:45730] script '/var/www/html/index.php' not found or unable to stat
[Sun Jan 11 05:41:51.369729 2026] [php7:error] [pid 822887] [client 101.36.123.102:45730] script '/var/www/html/index.php' not found or unable to stat
[Sun Jan 11 05:41:51.577550 2026] [php7:error] [pid 822887] [client 101.36.123.102:45730] script '/var/www/html/index.php' not found or unable to stat
[Sun Jan 11 07:06:17.915546 2026] [php7:error] [pid 822939] [client 172.236.143.75:50196] script '/var/www/html/config.php' not found or unable to stat
[Sun Jan 11 07:06:18.521522 2026] [php7:error] [pid 822890] [client 172.236.143.75:50204] script '/var/www/html/configuration.php' not found or unable to stat
[Sun Jan 11 07:06:19.155687 2026] [php7:error] [pid 822887] [client 172.236.143.75:50210] script '/var/www/html/settings.php' not found or unable to stat
[Sun Jan 11 07:06:19.770061 2026] [php7:error] [pid 822891] [client 172.236.143.75:50218] script '/var/www/html/db.php' not found or unable to stat
[Sun Jan 11 07:06:20.397447 2026] [php7:error] [pid 822889] [client 172.236.143.75:50222] script '/var/www/html/database.php' not found or unable to stat
[Sun Jan 11 07:06:21.022820 2026] [php7:error] [pid 823350] [client 172.236.143.75:50232] script '/var/www/html/conn.php' not found or unable to stat
[Sun Jan 11 07:06:21.665581 2026] [php7:error] [pid 822888] [client 172.236.143.75:50236] script '/var/www/html/connect.php' Kit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:28 -0600] "GET /system_log.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:28 -0600] "GET /wp-content/uploads/index.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:28 -0600] "GET /.well-known/wso112233.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:28 -0600] "GET /log.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:29 -0600] "GET /wp-content/plugins HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:29 -0600] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:29 -0600] "GET /wp-includes HTTP/1.1" 404 437 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:29 -0600] "GET /themes.php HTTP/1.1" 404 437 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:30 -0600] "GET /wp-admin/includes/index.php HTTP/1.1" 404 437 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:30 -0600] "GET /wp-admin/images/index.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:30 -0600] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:30 -0600] "GET /post.php HTTP/1.1" 404 437 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:30 -0600] "GET /wp-includes/Text/about.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15"
74.225.193.147 - - [11/Jan/2026:04:43:31 -0600] "GET /alfa-rex.php7 HTTP/1.1" 404 437 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:31 -0600] "GET /options.php HTTP/1.1" 404 437 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:31 -0600] "GET /wp-admin/about.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:31 -0600] "GET /wordpress/wp-admin/maint HTTP/1.1" 404 437 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:32 -0600] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:32 -0600] "GET /hplfuns.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:32 -0600] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 404 437 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:32 -0600] "GET /wp-conflg.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:32 -0600] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:33 -0600] "GET /ca5.php HTTP/1.1" 404 437 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:33 -0600] "GET /wp-admin.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:33 -0600] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:33 -0600] "GET /wp-signin.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:34 -0600] "GET /cgi-bin HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:34 -0600] "GET /cong.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:34 -0600] "GET /wp-content/dn.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:34 -0600] "GET /wp-content/themes/admin.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:34 -0600] "GET /wp-signup.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:35 -0600] "GET /wp-themes.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:35 -0600] "GET /wso112233.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:35 -0600] "GET /ALFA_DATA/alfacgiapi HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:35 -0600] "GET /hehe.php HTTP/1.1" 404 437 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:36 -0600] "GET /mln.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:36 -0600] "GET /test1.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:36 -0600] "GET /accah.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:36 -0600] "GET /gecko-new.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:36 -0600] "GET /x.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:37 -0600] "GET /.trash7309/index.php HTTP/1.1" 404 437 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:37 -0600] "GET /sf.php HTTP/1.1" 404 437 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:37 -0600] "GET /sts.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:37 -0600] "GET /wp-includes/css HTTP/1.1" 404 437 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:38 -0600] "GET /wp-includes/index.php HTTP/1.1" 404 437 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
74.225.193.147 - - [11/Jan/2026:04:43:38 -0600] "GET /xwpg.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:38 -0600] "GET /.well-known/index.php HTTP/1.1" 404 437 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
74.225.193.147 - - [11/Jan/2026:04:43:38 -0600] "GET /images/index.php HTTP/1.1" 404 437 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
191.96.117.85 - - [11/Jan/2026:04:44:15 -0600] "GET /.env HTTP/1.1" 404 4228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
191.96.117.85 - - [11/Jan/2026:04:44:17 -0600] "POST / HTTP/1.1" 200 7257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
15.235.98.253 - - [11/Jan/2026:05:14:18 -0600] "GET /robots.txt HTTP/1.1" 404 4210 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
54.39.136.142 - - [11/Jan/2026:05:14:22 -0600] "GET / HTTP/1.1" 200 7237 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
136.143.176.64 - - [11/Jan/2026:05:29:32 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37189481 "-" "Zoho_Analytics"
45.131.94.129 - - [11/Jan/2026:05:33:07 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
45.131.94.129 - - [11/Jan/2026:05:33:07 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
157.205.95.46 - - [11/Jan/2026:05:35:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-133445.png HTTP/1.1" 200 46276 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)"
157.205.95.46 - - [11/Jan/2026:05:35:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-133445.png HTTP/1.1" 200 46276 "-" "Mozilla/4.0 (compatible; ms-office; MSOffice 16)"
103.252.89.75 - - [11/Jan/2026:05:37:08 -0600] "GET / HTTP/1.1" 200 11173 "-" "-"
101.36.123.102 - - [11/Jan/2026:05:41:09 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:41 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:43 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:43 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:43 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:43 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:43 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:44 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:44 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:44 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:44 -0600] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:44 -0600] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:45 -0600] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:45 -0600] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:45 -0600] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:45 -0600] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:45 -0600] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:46 -0600] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:46 -0600] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
101.36.123.102 - - [11/Jan/2026:05:41:46 -0600] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-oad dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 11 05:39:19 ip-172-31-29-215 sessionclean[825568]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jan 11 05:39:19 ip-172-31-29-215 sessionclean[825568]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jan 11 05:39:19 ip-172-31-29-215 sessionclean[825568]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jan 11 05:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jan 11 05:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jan 11 05:40:01 ip-172-31-29-215 CRON[825608]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 11 06:00:01 ip-172-31-29-215 CRON[825637]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 11 06:02:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:02:33.1242 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jan 11 06:02:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:02:33.1739 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jan 11 06:02:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: b4d8f533-4b8b-46fc-93fb-a38d42e14d12
Jan 11 06:09:01 ip-172-31-29-215 CRON[825662]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 11 06:09:03 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jan 11 06:09:03 ip-172-31-29-215 sessionclean[825675]: Cannot load Xdebug - it was already loaded
Jan 11 06:09:03 ip-172-31-29-215 sessionclean[825675]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 11 06:09:03 ip-172-31-29-215 sessionclean[825675]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jan 11 06:09:03 ip-172-31-29-215 sessionclean[825675]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jan 11 06:09:03 ip-172-31-29-215 sessionclean[825675]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jan 11 06:09:03 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jan 11 06:09:03 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jan 11 06:17:01 ip-172-31-29-215 CRON[825834]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jan 11 06:18:09 ip-172-31-29-215 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs...
Jan 11 06:18:10 ip-172-31-29-215 systemd[1]: ua-timer.service: Succeeded.
Jan 11 06:18:10 ip-172-31-29-215 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs.
Jan 11 06:20:01 ip-172-31-29-215 CRON[825961]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 11 06:25:01 ip-172-31-29-215 CRON[825984]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily ))
Jan 11 06:2Sun Jan 11 06:10:27 2026 [pid 825717] CONNECT: Client "52.21.0.206"
Sun Jan 11 06:46:23 2026 [pid 826236] CONNECT: Client "3.130.96.91"
Sun Jan 11 06:59:56 2026 [pid 826253] CONNECT: Client "40.124.174.248"
Sun Jan 11 06:59:57 2026 [pid 826255] CONNECT: Client "40.124.174.248"
Sun Jan 11 07:17:53 2026 [pid 826369] CONNECT: Client "3.137.73.221"
Sun Jan 11 09:48:28 2026 [pid 827185] CONNECT: Client "198.235.24.231"
Sun Jan 11 11:36:59 2026 [pid 827940] CONNECT: Client "47.88.6.181"
Sun Jan 11 11:42:47 2026 [pid 828050] CONNECT: Client "35.216.195.77"
Sun Jan 11 11:42:48 2026 [pid 828053] CONNECT: Client "35.216.195.77"
Sun Jan 11 11:42:48 2026 [pid 828056] CONNECT: Client "35.216.195.77"
Sun Jan 11 11:42:48 2026 [pid 828058] CONNECT: Client "35.216.195.77"
Sun Jan 11 11:42:48 2026 [pid 828057] [ftp] OK LOGIN: Client "35.216.195.77", anon password "?"
Sun Jan 11 13:35:46 2026 [pid 828979] CONNECT: Client "66.132.153.124"
Sun Jan 11 14:08:52 2026 [pid 829167] CONNECT: Client "221.207.35.159"
Sun Jan 11 15:29:39 2026 [pid 829766] CONNECT: Client "167.94.138.183"
Sun Jan 11 16:06:39 2026 [pid 829939] CONNECT: Client "162.142.125.223"
Sun Jan 11 18:05:10 2026 [pid 830867] CONNECT: Client "66.240.223.240"
Sun Jan 11 18:38:07 2026 [pid 831306] CONNECT: Client "205.210.31.10"
Sun Jan 11 19:27:49 2026 [pid 831550] CONNECT: Client "216.180.246.112"
Sun Jan 11 19:27:56 2026 [pid 831553] CONNECT: Client "216.180.246.112"
Sun Jan 11 20:43:52 2026 [pid 832151] CONNECT: Client "3.134.100.58"
Sun Jan 11 22:58:30 2026 [pid 832852] CONNECT: Client "199.45.154.151"
Sun Jan 11 23:01:12 2026 [pid 832880] CONNECT: Client "194.187.179.100"
Mon Jan 12 00:07:31 2026 [pid 833172] CONNECT: Client "45.79.181.90"
Mon Jan 12 00:07:33 2026 [pid 833176] CONNECT: Client "45.79.181.90"
Mon Jan 12 00:08:47 2026 [pid 833183] CONNECT: Client "45.79.181.90"
Mon Jan 12 00:08:47 2026 [pid 833185] CONNECT: Client "45.79.181.90"
Mon Jan 12 06:10:29 2026 [pid 836433] CONNECT: Client "98.93.63.52"
Mon Jan 12 06:52:02 2026 [pid 836979] CONNECT: Client "3.143.33.63"
Mon Jan 12 07:45:14 2026 [pid 837216] CONNECT: Client "3.143.33.63"
Mon Jan 12 09:54:19 2026 [pid 838453] CONNECT: Client "205.210.31.205"
Mon Jan 12 11:08:19 2026 [pid 839530] CONNECT: Client "20.169.81.155"
Mon Jan 12 11:08:19 2026 [pid 839532] CONNECT: Client "20.169.81.155"
Mon Jan 12 15:50:45 2026 [pid 843214] CONNECT: Client "71.6.232.22"
Mon Jan 12 16:35:35 2026 [pid 843628] CONNECT: Client "206.168.34.121"
Mon Jan 12 16:37:39 2026 [pid 843671] CONNECT: Client "172.105.224.72"
Mon Jan 12 19:04:27 2026 [pid 845232] CONNECT: Client "205.210.31.25"
Mon Jan 12 21:49:16 2026 [pid 846441] CONNECT: Client "103.203.59.5"
Tue Jan 13 03:07:33 2026 [pid 849144] CONNECT: Client "20.163.10.187"
Tue Jan 13 03:07:34 2026 [pid 849146] CONNECT: Client "20.163.10.187"
Tue Jan 13 06:10:08 2026 [pid 851265] CONNECT: Client "54.147.154.147"
Tue Jan 13 06:36:35 2026 [pid 851545] CONNECT: Client "18.223.2.197"
Tue Jan 13 07:44:01 2026 [pid 852093] CONNECT: Client "3.134.148.59"
Tue Jan 13 08:04:09 2026 [pid 852128] CONNECT: Client "91.230.168.109"
Tue Jan 13 08:04:10 2026 [pid 852131] CONNECT: Client "91.230.168.204"
Tue Jan 13 09:22:39 2026 [pid 853026] CONNECT: Client "205.210.31.129"
Tue Jan 13 14:55:35 2026 [pid 857225] CONNECT: Client "147.185.132.70"
Tue Jan 13 14:58:40 2026 [pid 857279] CONNECT: Client "91.196.152.79"
Tue Jan 13 14:58:40 2026 [pid 857282] CONNECT: Client "91.196.152.51"
Tue Jan 13 15:10:33 2026 [pid 857614] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:10:50 2026 [pid 857621] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:10:53 2026 [pid 857632] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:10:55 2026 [pid 857649] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:11:03 2026 [pid 857651] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:11:04 2026 [pid 857653] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:11:04 2026 [pid 857655] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:11:05 2026 [pid 857657] CONNECT: Client "139.144.52.241"
Tue Jan 13 15:11:06 2026 [pid 857660] CONNECT: Client "139.144.52.241"
5:01 ip-172-31-29-215 cracklib: no dictionary update necessary.
Jan 11 06:30:28 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:30:28.2614 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jan 11 06:30:28 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:30:28.3062 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jan 11 06:30:28 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: ed4e60e4-85bf-49a2-afc9-be69618b0cb3
Jan 11 06:39:01 ip-172-31-29-215 CRON[826082]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 11 06:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jan 11 06:39:19 ip-172-31-29-215 sessionclean[826095]: Cannot load Xdebug - it was already loaded
Jan 11 06:39:19 ip-172-31-29-215 sessionclean[826095]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 11 06:39:19 ip-172-31-29-215 sessionclean[826095]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jan 11 06:39:19 ip-172-31-29-215 sessionclean[826095]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jan 11 06:39:19 ip-172-31-29-215 sessionclean[826095]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jan 11 06:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jan 11 06:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jan 11 06:40:01 ip-172-31-29-215 CRON[826136]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 11 06:45:33 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities...
Jan 11 06:46:03 ip-172-31-29-215 apt-helper[826159]: E: Sub-process nm-online returned an error code (1)
Jan 11 06:46:07 ip-172-31-29-215 systemd[1]: apt-daily-upgrade.service: Succeeded.
Jan 11 06:46:07 ip-172-31-29-215 systemd[1]: Finished Daily apt upgrade and clean activities.
Jan 11 06:47:01 ip-172-31-29-215 CRON[826239]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly ))
Jan 11 06:56:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:56:01.3079 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jan 11 06:56:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-11 06:56:01.3454 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jan 11 06:56:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 800697ab-67d9-4246-853a-f339900c16d2
Jan 11 07:00:01 ip-172-31-29-215 CRON[826259]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 11 07:09:01 ip-172-31-29-215 CRON[826283]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 11 07:09:07 ip-172-31-29-215 systemd[1]: Starting /usr/share/dict/words
/usr/share/dict/words.pre-dictionaries-common
dictionaries-common
/usr/share/man/man1/sh.1.gz
/usr/share/man/man1/sh.distrib.1.gz
dash
/usr/share/vim/vim81/doc/help.txt
/usr/share/vim/vim81/doc/help.txt.vim-tiny
vim-runtime
/bin/sh
/bin/sh.distrib
dash
/usr/share/vim/vim81/doc/tags
/usr/share/vim/vim81/doc/tags.vim-tiny
vim-runtime