{
  "hostname": "Linux-Webguide-Web-02",
  "os_release": {
    "PRETTY_NAME": "Ubuntu 22.04.4 LTS",
    "ID": "ubuntu",
    "VERSION_ID": "22.04"
  },
  "kernel_version": "5.15.0-97-generic",
  "timezone": "Asia/Taipei",
  "ip": "10.20.88.10",
  "uptime": "up 1 year, 31 weeks, 17 hours, 28 minutes",
  "boot_time": "2024-12-02 18:08",
  "cpu_model": "Intel(R) Xeon(R) Gold 6342 CPU @ 2.80GHz",
  "cpu_count": 4,
  "memory": {
    "total_gb": 7.73,
    "used_gb": 0.66,
    "free_gb": 7.07,
    "percent": 8
  },
  "disk_info": [{"filesystem":"/dev/sda2","mounted_on":"/","size":"96G","used":"76G","avail":"16G","use":"84%","percent":84},{"filesystem":"/dev/sda1","mounted_on":"/boot/efi","size":"511M","used":"6.1M","avail":"505M","use":"2%","percent":2}],
  "ntp_status": "active",
  "ntp_servers": [],
  "firewall_status": "active",
  "firewall_type": "ufw",
  "fail2ban_status": "inactive",
  "antivirus_installed": true,
  "antivirus_version": "ClamAV 0.103.11/27778/Tue Sep 30 16:29:52 2025",
  "security_updates": 198,
  "mac_type": "apparmor",
  "mac_status": "enabled",
  "apache_version": "2.4.62",
  "php_version": "8.1.29",
  "mysql_version": "8.0.36-0ubuntu0.22.04.1",
  "openssl_version": "3.0.2",
  "openssh_version": "8.9p1",
  "ssh_config": {
    "port": "22",
    "permit_root_login": "yes",
    "pubkey_auth": "yes",
    "password_auth": "yes",
    "max_auth_tries": "6"
  },
  "password_policy": {
    "pam_pwquality": false
  },
  "privileged_accounts": ["steps","www-data"],
  "log_rotate_180days": true,
  "log_rotate_detail": "daily/rotate 180\uff08\u2265180\u5929\uff09",
  "apache_logrotate_180days": true,
  "apache_logrotate_detail": "daily/rotate 180",
  "accounts_detail": [{"user":"root","is_sudo":true,"groups":"root","chage":{"shell":"/bin/bash","last_change":"Feb 21, 2024","pw_expires":"never","acct_expires":"never","max_days":"99999","min_days":"0","warn_days":"7"}},{"user":"steps","is_sudo":false,"groups":"steps","chage":{"shell":"/bin/bash","last_change":"Jun 17, 2026","pw_expires":"never","acct_expires":"Dec 31, 2030","max_days":"99999","min_days":"0","warn_days":"7"}},{"user":"modauser","is_sudo":false,"groups":"modauser","chage":{"shell":"/bin/bash","last_change":"May 25, 2026","pw_expires":"never","acct_expires":"Dec 31, 2030","max_days":"99999","min_days":"0","warn_days":"7"}},{"user":"cisauser","is_sudo":false,"groups":"cisauser","chage":{"shell":"/bin/bash","last_change":"May 25, 2026","pw_expires":"never","acct_expires":"Dec 31, 2030","max_days":"99999","min_days":"0","warn_days":"7"}},{"user":"pake","is_sudo":false,"groups":"pake","chage":{"shell":"/bin/sh","last_change":"May 25, 2026","pw_expires":"never","acct_expires":"Dec 31, 2030","max_days":"99999","min_days":"0","warn_days":"7"}}],
  "failed_logins_24h": 0,
  "last_logins": "root     pts/0        10.20.88.14      Fri Jun 26 14:06 - 14:06  (00:00)\u00a7root     pts/0        10.20.88.11      Wed Jun 17 16:02 - 16:02  (00:00)\u00a7wtmp begins Mon May 25 14:55:27 2026",
  "failed_login_count": 0
0,
  "listening_ports_parsed": [{"protocol":"TCP","port":"3306","service":"mysqld","address":"127.0.0.1"},{"protocol":"TCP","port":"53","service":"systemd-resolve","address":"127.0.0.53%lo"},{"protocol":"TCP","port":"22","service":"sshd","address":"0.0.0.0"},{"protocol":"TCP","port":"33060","service":"mysqld","address":"127.0.0.1"},{"protocol":"TCP","port":"80","service":"apache2","address":"*"},{"protocol":"TCP","port":"22","service":"sshd","address":"[::]"},{"protocol":"TCP","port":"443","service":"apache2","address":"*"},{"protocol":"UDP","port":"53","service":"systemd-resolve","address":"127.0.0.53%lo"},{"protocol":"UDP","port":"68","service":"systemd-network","address":"10.20.88.10%eth0"}],
  "cron_jobs": [{"source":"/etc/crontab","job":"SHELL=/bin/sh"},{"source":"/etc/crontab","job":"17 *\t* * *\troot    cd / && run-parts --report /etc/cron.hourly"},{"source":"/etc/crontab","job":"25 6\t* * *\troot\ttest -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )"},{"source":"/etc/crontab","job":"47 6\t* * 7\troot\ttest -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )"},{"source":"/etc/crontab","job":"52 6\t1 * *\troot\ttest -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )"},{"source":"cron.d/certbot","job":"SHELL=/bin/sh"},{"source":"cron.d/certbot","job":"PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin"},{"source":"cron.d/certbot","job":"0 */12 * * * root test -x /usr/bin/certbot -a \\! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew"},{"source":"cron.d/e2scrub_all","job":"30 3 * * 0 root test -e /run/systemd/system || SERVICE_MODE=1 /usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron"},{"source":"cron.d/e2scrub_all","job":"10 3 * * * root test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r"},{"source":"cron.d/host-agent","job":"*/5 * * * * root flock -n /opt/host-agent/agent.lock timeout 90 /opt/host-agent/agent.sh >/dev/null 2>&1"},{"source":"cron.d/host-agent","job":"0 2 * * 6 root /opt/host-agent/av_scan.sh >> /var/log/av_scan.log 2>&1"},{"source":"cron.d/php","job":"09,39 *     * * *     root   [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi"},{"source":"cron.d/popularity-contest","job":"SHELL=/bin/sh"},{"source":"cron.d/popularity-contest","job":"PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin"},{"source":"cron.d/popularity-contest","job":"47 3 * * *   root    test -x /etc/cron.daily/popularity-contest && /etc/cron.daily/popularity-contest --crond"},{"source":"root crontab","job":"5 3 * * * /home/backup/data/data.sh"},{"source":"root crontab","job":"05 3 * * * /home/backup/system/system.sh"},{"source":"root crontab","job":"0 5 * * * /usr/bin/aide --check"},{"source":"root crontab","job":"*/10 * * * * cd /var/www/html/cisa-web-check/ && php artisan schedule:run >> /dev/null 2>&1"}],
  "apache_security": {"server_tokens":"Prod","server_signature":"Off","trace_enable":"off"},
  "screensaver_configured": true,
  "screensaver_timeout": "",
  "apache_sites_certificates": {
    "exists": true,
    "details": [{"name":"webcheck","certificate_file":"/etc/ssl/webssl/webcheck.crt","certificate_expiry":"Jul 18 05:22:43 2025 GMT"},{"name":"webguide","certificate_file":"/etc/ssl/webssl/webguide.crt","certificate_expiry":"Jul 19 03:18:23 2025 GMT"}]
  },
  "web_service": {
    "name": "apache2",
    "status": "active",
    "http_code": 200,
    "response_ms": 0,
    "ssl_cert_expiry": "Jul 18 05:22:43 2025 GMT",
    "ssl_cert_days_left": -353,
    "ssl_tls": {
      "sslv3":          false,
      "tls10":          false,
      "tls11":          false,
      "tls12":          true,
      "tls13":          true,
      "forward_secrecy": true,
      "weak_cipher":    true,
      "cert_bits":      "2048",
      "cert_sig":       "sha256WithRSAEncryption",
      "cert_issuer":    "C = TW, O = \\E8\\A1\\8C\\E6\\94\\BF\\E9\\99\\A2, CN = \\E6\\94\\BF\\E5\\BA\\9C\\E4\\BC\\BA\\E6\\9C\\8D\\E5\\99\\A8\\E6\\95\\B8\\E4\\BD\\8D\\E6\\86\\91\\E8\\AD\\89\\E7\\AE\\A1\\E7\\90\\86\\E4\\B8\\AD\\E5\\BF\\83 - G1"
    },
    "http_headers": {
      "csp": "",
      "hsts": "max-age=485",
      "x_frame_options": "SAMEORIGIN",
      "x_content_type_options": "nosniff",
      "x_xss_protection": "1; mode=block",
      "referrer_policy": "strict-origin-when-cross-origin",
      "permissions_policy": "",
      "server": "Apache"
    },
    "error_count": 0,
    "error_sample": ""
  },
  "db_service": {
    "name": "mysql",
    "status": "active"
  },
  "backup": [{"type":"data","script_found":true,"script_path":"/home/backup/data/data.sh","in_cron":true,"dir_found":true,"dir_path":"/home/backup/data","last_backup":"2026-07-07 03:08:26","last_backup_hours":8,"files_24h":2,"size":"33G"},{"type":"system","script_found":true,"script_path":"/home/backup/system/system.sh","in_cron":true,"dir_found":true,"dir_path":"/home/backup/system","last_backup":"2026-07-07 03:05:03","last_backup_hours":8,"files_24h":1,"size":"63M"}],
  "log_integrity": {"checked":205,"clean":37,"new_files":0,"tampered":168,"tampered_files":["/var/log/apache2/error.log.10.gz","/var/log/apache2/error.log.11.gz","/var/log/apache2/error.log.12.gz","/var/log/apache2/error.log.13.gz","/var/log/apache2/error.log.14.gz","/var/log/apache2/error.log.15.gz","/var/log/apache2/error.log.16.gz","/var/log/apache2/error.log.17.gz","/var/log/apache2/error.log.18.gz","/var/log/apache2/error.log.19.gz","/var/log/apache2/error.log.20.gz","/var/log/apache2/error.log.21.gz","/var/log/apache2/error.log.22.gz","/var/log/apache2/error.log.23.gz","/var/log/apache2/error.log.24.gz","/var/log/apache2/error.log.25.gz","/var/log/apache2/error.log.26.gz","/var/log/apache2/error.log.27.gz","/var/log/apache2/error.log.28.gz","/var/log/apache2/error.log.29.gz","/var/log/apache2/error.log.2.gz","/var/log/apache2/error.log.30.gz","/var/log/apache2/error.log.31.gz","/var/log/apache2/error.log.32.gz","/var/log/apache2/error.log.33.gz","/var/log/apache2/error.log.34.gz","/var/log/apache2/error.log.35.gz","/var/log/apache2/error.log.36.gz","/var/log/apache2/error.log.37.gz","/var/log/apache2/error.log.38.gz","/var/log/apache2/error.log.39.gz","/var/log/apache2/error.log.3.gz","/var/log/apache2/error.log.40.gz","/var/log/apache2/error.log.41.gz","/var/log/apache2/error.log.42.gz","/var/log/apache2/error.log.43.gz","/var/log/apache2/error.log.44.gz","/var/log/apache2/error.log.45.gz","/var/log/apache2/error.log.46.gz","/var/log/apache2/error.log.47.gz","/var/log/apache2/error.log.48.gz","/var/log/apache2/error.log.49.gz","/var/log/apache2/error.log.4.gz","/var/log/apache2/error.log.50.gz","/var/log/apache2/error.log.51.gz","/var/log/apache2/error.log.52.gz","/var/log/apache2/error.log.53.gz","/var/log/apache2/error.log.54.gz","/var/log/apache2/error.log.55.gz","/var/log/apache2/error.log.56.gz","/var/log/apache2/error.log.57.gz","/var/log/apache2/error.log.58.gz","/var/log/apache2/error.log.59.gz","/var/log/apache2/error.log.5.gz","/var/log/apache2/error.log.60.gz","/var/log/apache2/error.log.61.gz","/var/log/apache2/error.log.62.gz","/var/log/apache2/error.log.63.gz","/var/log/apache2/error.log.64.gz","/var/log/apache2/error.log.65.gz","/var/log/apache2/error.log.66.gz","/var/log/apache2/error.log.67.gz","/var/log/apache2/error.log.68.gz","/var/log/apache2/error.log.69.gz","/var/log/apache2/error.log.6.gz","/var/log/apache2/error.log.70.gz","/var/log/apache2/error.log.71.gz","/var/log/apache2/error.log.72.gz","/var/log/apache2/error.log.73.gz","/var/log/apache2/error.log.74.gz","/var/log/apache2/error.log.75.gz","/var/log/apache2/error.log.76.gz","/var/log/apache2/error.log.77.gz","/var/log/apache2/error.log.78.gz","/var/log/apache2/error.log.79.gz","/var/log/apache2/error.log.7.gz","/var/log/apache2/error.log.80.gz","/var/log/apache2/error.log.81.gz","/var/log/apache2/error.log.82.gz","/var/log/apache2/error.log.83.gz","/var/log/apache2/error.log.84.gz","/var/log/apache2/error.log.85.gz","/var/log/apache2/error.log.86.gz","/var/log/apache2/error.log.87.gz","/var/log/apache2/error.log.88.gz","/var/log/apache2/error.log.89.gz","/var/log/apache2/error.log.8.gz","/var/log/apache2/error.log.90.gz","/var/log/apache2/error.log.91.gz","/var/log/apache2/error.log.92.gz","/var/log/apache2/error.log.93.gz","/var/log/apache2/error.log.94.gz","/var/log/apache2/error.log.95.gz","/var/log/apache2/error.log.96.gz","/var/log/apache2/error.log.97.gz","/var/log/apache2/error.log.98.gz","/var/log/apache2/error.log.99.gz","/var/log/apache2/error.log.9.gz","/var/log/auth.log.2.gz","/var/log/auth.log.3.gz","/var/log/auth.log.4.gz","/var/log/btmp.1","/var/log/clamav/freshclam.log.1","/var/log/clamav/freshclam.log.10.gz","/var/log/clamav/freshclam.log.11.gz","/var/log/clamav/freshclam.log.12.gz","/var/log/clamav/freshclam.log.2.gz","/var/log/clamav/freshclam.log.3.gz","/var/log/clamav/freshclam.log.4.gz","/var/log/clamav/freshclam.log.5.gz","/var/log/clamav/freshclam.log.6.gz","/var/log/clamav/freshclam.log.7.gz","/var/log/clamav/freshclam.log.8.gz","/var/log/clamav/freshclam.log.9.gz","/var/log/kern.log.1","/var/log/kern.log.2.gz","/var/log/kern.log.3.gz","/var/log/kern.log.4.gz","/var/log/letsencrypt/letsencrypt.log.10.gz","/var/log/letsencrypt/letsencrypt.log.11.gz","/var/log/letsencrypt/letsencrypt.log.12.gz","/var/log/letsencrypt/letsencrypt.log.1.gz","/var/log/letsencrypt/letsencrypt.log.2.gz","/var/log/letsencrypt/letsencrypt.log.3.gz","/var/log/letsencrypt/letsencrypt.log.4.gz","/var/log/letsencrypt/letsencrypt.log.5.gz","/var/log/letsencrypt/letsencrypt.log.6.gz","/var/log/letsencrypt/letsencrypt.log.7.gz","/var/log/letsencrypt/letsencrypt.log.8.gz","/var/log/letsencrypt/letsencrypt.log.9.gz","/var/log/mysql/error.log.1.gz","/var/log/mysql/error.log.2.gz","/var/log/mysql/error.log.3.gz","/var/log/mysql/error.log.4.gz","/var/log/mysql/error.log.5.gz","/var/log/mysql/error.log.6.gz","/var/log/mysql/error.log.7.gz","/var/log/php8.1-fpm.log.1","/var/log/php8.1-fpm.log.10.gz","/var/log/php8.1-fpm.log.11.gz","/var/log/php8.1-fpm.log.12.gz","/var/log/php8.1-fpm.log.2.gz","/var/log/php8.1-fpm.log.3.gz","/var/log/php8.1-fpm.log.4.gz","/var/log/php8.1-fpm.log.5.gz","/var/log/php8.1-fpm.log.6.gz","/var/log/php8.1-fpm.log.7.gz","/var/log/php8.1-fpm.log.8.gz","/var/log/php8.1-fpm.log.9.gz","/var/log/syslog.2.gz","/var/log/syslog.3.gz","/var/log/syslog.4.gz","/var/log/ubuntu-advantage.log.1","/var/log/ubuntu-advantage.log.2.gz","/var/log/ubuntu-advantage.log.3.gz","/var/log/ubuntu-advantage.log.4.gz","/var/log/ubuntu-advantage.log.5.gz","/var/log/ubuntu-advantage.log.6.gz","/var/log/ufw.log.1","/var/log/ufw.log.2.gz","/var/log/ufw.log.3.gz","/var/log/ufw.log.4.gz","/var/log/unattended-upgrades/unattended-upgrades.log.1.gz","/var/log/unattended-upgrades/unattended-upgrades.log.2.gz","/var/log/unattended-upgrades/unattended-upgrades.log.3.gz","/var/log/unattended-upgrades/unattended-upgrades.log.4.gz","/var/log/unattended-upgrades/unattended-upgrades.log.5.gz","/var/log/unattended-upgrades/unattended-upgrades.log.6.gz"],"categories":[{"name":"Apache","checked":98,"clean":0,"new_files":0,"tampered":98},{"name":"Auth","checked":4,"clean":1,"new_files":0,"tampered":3},{"name":"Kernel","checked":4,"clean":0,"new_files":0,"tampered":4},{"name":"MySQL","checked":7,"clean":0,"new_files":0,"tampered":7},{"name":"Syslog","checked":6,"clean":3,"new_files":0,"tampered":3},{"name":"Other","checked":86,"clean":33,"new_files":0,"tampered":53}],"files":[{"path":"/var/log/alternatives.log.1","cat":"Other","status":"clean"},{"path":"/var/log/alternatives.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/alternatives.log.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/alternatives.log.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/alternatives.log.5.gz","cat":"Other","status":"clean"},{"path":"/var/log/alternatives.log.6.gz","cat":"Other","status":"clean"},{"path":"/var/log/apache2/error.log.10.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.11.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.12.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.13.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.14.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.15.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.16.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.17.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.18.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.19.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.20.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.21.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.22.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.23.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.24.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.25.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.26.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.27.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.28.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.29.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.2.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.30.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.31.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.32.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.33.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.34.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.35.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.36.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.37.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.38.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.39.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.3.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.40.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.41.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.42.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.43.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.44.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.45.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.46.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.47.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.48.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.49.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.4.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.50.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.51.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.52.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.53.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.54.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.55.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.56.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.57.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.58.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.59.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.5.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.60.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.61.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.62.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.63.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.64.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.65.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.66.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.67.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.68.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.69.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.6.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.70.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.71.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.72.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.73.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.74.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.75.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.76.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.77.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.78.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.79.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.7.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.80.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.81.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.82.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.83.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.84.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.85.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.86.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.87.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.88.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.89.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.8.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.90.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.91.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.92.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.93.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.94.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.95.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.96.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.97.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.98.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.99.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apache2/error.log.9.gz","cat":"Apache","status":"tampered"},{"path":"/var/log/apt/history.log.1.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/history.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/history.log.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/history.log.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/history.log.5.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/term.log.1.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/term.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/term.log.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/term.log.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/apt/term.log.5.gz","cat":"Other","status":"clean"},{"path":"/var/log/auth.log.1","cat":"Auth","status":"clean"},{"path":"/var/log/auth.log.2.gz","cat":"Auth","status":"tampered"},{"path":"/var/log/auth.log.3.gz","cat":"Auth","status":"tampered"},{"path":"/var/log/auth.log.4.gz","cat":"Auth","status":"tampered"},{"path":"/var/log/btmp.1","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.1","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.10.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.11.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.12.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.5.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.6.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.7.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.8.gz","cat":"Other","status":"tampered"},{"path":"/var/log/clamav/freshclam.log.9.gz","cat":"Other","status":"tampered"},{"path":"/var/log/dmesg.0","cat":"Other","status":"clean"},{"path":"/var/log/dmesg.1.gz","cat":"Other","status":"clean"},{"path":"/var/log/dmesg.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/dmesg.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/dmesg.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/dpkg.log.1","cat":"Other","status":"clean"},{"path":"/var/log/dpkg.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/dpkg.log.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/dpkg.log.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/dpkg.log.5.gz","cat":"Other","status":"clean"},{"path":"/var/log/kern.log.1","cat":"Kernel","status":"tampered"},{"path":"/var/log/kern.log.2.gz","cat":"Kernel","status":"tampered"},{"path":"/var/log/kern.log.3.gz","cat":"Kernel","status":"tampered"},{"path":"/var/log/kern.log.4.gz","cat":"Kernel","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.10.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.11.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.12.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.1.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.5.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.6.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.7.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.8.gz","cat":"Other","status":"tampered"},{"path":"/var/log/letsencrypt/letsencrypt.log.9.gz","cat":"Other","status":"tampered"},{"path":"/var/log/mysql/error.log.1.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.2.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.3.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.4.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.5.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.6.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/mysql/error.log.7.gz","cat":"MySQL","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.1","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.10.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.11.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.12.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.5.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.6.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.7.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.8.gz","cat":"Other","status":"tampered"},{"path":"/var/log/php8.1-fpm.log.9.gz","cat":"Other","status":"tampered"},{"path":"/var/log/syslog.1","cat":"Syslog","status":"clean"},{"path":"/var/log/syslog.2.gz","cat":"Syslog","status":"tampered"},{"path":"/var/log/syslog.3.gz","cat":"Syslog","status":"tampered"},{"path":"/var/log/syslog.4.gz","cat":"Syslog","status":"tampered"},{"path":"/var/log/syslog.6.gz","cat":"Syslog","status":"clean"},{"path":"/var/log/syslog.7.gz","cat":"Syslog","status":"clean"},{"path":"/var/log/ubuntu-advantage.log.1","cat":"Other","status":"tampered"},{"path":"/var/log/ubuntu-advantage.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ubuntu-advantage.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ubuntu-advantage.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ubuntu-advantage.log.5.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ubuntu-advantage.log.6.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ufw.log.1","cat":"Other","status":"tampered"},{"path":"/var/log/ufw.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ufw.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/ufw.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-dpkg.log.1.gz","cat":"Other","status":"clean"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-dpkg.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.1.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.2.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.3.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.4.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.5.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades.log.6.gz","cat":"Other","status":"tampered"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-shutdown.log.1.gz","cat":"Other","status":"clean"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-shutdown.log.2.gz","cat":"Other","status":"clean"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-shutdown.log.3.gz","cat":"Other","status":"clean"},{"path":"/var/log/unattended-upgrades/unattended-upgrades-shutdown.log.4.gz","cat":"Other","status":"clean"},{"path":"/var/log/wtmp.1","cat":"Other","status":"clean"}],"checked_at":"2026-07-07 11:45:19"}
}