Was my new VM hacked?
Solution 1:
Those are just random GET requests to your server, that NGINX dutifully tried to find from disk, naturally couldn't find, and as such couldn't serve, which generated the error. Basically what's happening is that either somebody before you had that specific IP and hosted that stuff, or it's just somebody firing random GET requests around the world for reasons that will forever be unclear.
TL;DR: Those are requests, so no indication of a compromised server, just Internet background noise. The Internet is a weird place.