===== CURRENT LOGS ===== /etc/apache2/logs/modsec_audit.log:151605:86.48.1.171 132.243.164.230 - - [02/Jul/2026:17:54:34.171429 +0200] "GET /run.sh HTTP/1.1" 404 10365 "-" "-" akaJuhtKTedSXYOqnzcr4wAAAAE "-" /nobody/20260702/20260702-1754/20260702-175434-akaJuhtKTedSXYOqnzcr4wAAAAE 0 2095 md5:1c3ded77cdea8cf94abd604ec9d45b71 /etc/apache2/logs/modsec_audit.log:151606:86.48.1.171 132.243.164.230 - - [02/Jul/2026:17:54:34.172845 +0200] "GET /run.sh HTTP/1.1" 404 355 "-" "-" akaJuhyir_8vAnAb1k0tiAAAAAc "-" /arvella/20260702/20260702-1754/20260702-175434-akaJuhyir_8vAnAb1k0tiAAAAAc 0 1980 md5:9cae6df6c888f532f811414b25c958c2 /etc/apache2/logs/access_log:64223:195.170.172.128 - - [19/May/2026:04:43:38 +0200] "{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"44YkguuEDYrVrRqxjMsXcwULetBcZKGqiXSkczyrn7hjRkAip2KLc2QQkdES9K3acH5kGsgckXsLL1LfhCzvZdoW27vBSZF\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}\n" 400 10391 "-" "-" /etc/apache2/logs/access_log:196400:185.213.175.171 - - [19/Jun/2026:04:59:12 +0200] "{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"4A5Pzf6izPaUGG4KLMcQ23edU4KSK7zP413GDrhQUfbK9q9Ss9nbre7aUx2CyMPeg4hFdmzqp3nemJDxPRzVrVeM35RY4Ho\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}\n" 400 10390 "-" "-" /etc/apache2/logs/access_log:254950:132.243.164.230 - - [02/Jul/2026:17:54:34 +0200] "GET /run.sh HTTP/1.1" 404 10365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" /etc/apache2/logs/access_log:336748:195.170.172.216 - - [20/Jul/2026:01:04:33 +0200] "{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"46UBgfeZ71s7e77iNVbejw4MSNkzwdczjUNQaQrVZuW8aeVTDchtpkx4HrmbaZSrAwMxMzMobpCdiJsn5uDZVgZQ5EUDQyp\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}\n" 400 10390 "-" "-" ===== ROTATED / COMPRESSED LOGS =====