sessionclean[2076846]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 05:09:06 ip-172-31-29-215 sessionclean[2076846]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 05:09:06 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Apr 18 05:09:06 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Apr 18 05:09:32 ip-172-31-29-215 snapd[1662050]: storehelpers.go:916: cannot refresh: snap has no updates available: "amazon-ssm-agent", "core18", "core20", "core22", "lxd", "snapd" Apr 18 05:17:01 ip-172-31-29-215 CRON[2076892]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Apr 18 05:20:01 ip-172-31-29-215 CRON[2076897]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 05:22:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 05:22:58.9064 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 05:22:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 05:22:58.9365 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 05:22:59 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: aa101356-adc7-4882-a8c9-76c64f7ee7a4 Apr 18 05:39:01 ip-172-31-29-215 CRON[2077182]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 05:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 05:39:19 ip-172-31-29-215 sessionclean[2077195]: Cannot load Xdebug - it was already loaded Apr 18 05:39:19 ip-172-31-29-215 sessionclean[2077195]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Apr 18 05:39:19 ip-172-31-29-215 sessionclean[2077195]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Apr 18 05:39:19 ip-172-31-29-215 sessionclean[2077195]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 05:39:19 ip-172-31-29-215 sessionclean[2077195]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 05:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Apr 18 05:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Apr 18 05:40:01 ip-172-31-29-215 CRON[2077240]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 05:48:14 ip-172-31-29-215 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs... Apr 18 05:48:15 ip-172-31-29-215 systemd[1]: ua-timer.service: Succeeded. Apr 18 05:48:15 ip-172-31-29-215 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs. Apr 18 05:51:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 05:51:55.9992 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 05:51:56 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 05:51:56.0299 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account5:21:39 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:39 -0600] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:39 -0600] "GET /saorix1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:39 -0600] "GET /themes.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /lib.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /file-kikikoko.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /wp-kikikoko.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /ganja.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /sad821.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /sad8210.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:40 -0600] "GET /BDKR28WP.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:41 -0600] "GET //man.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:41 -0600] "GET /aboute.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:41 -0600] "GET /ayk.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:41 -0600] "GET /wps.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:42 -0600] "GET /f35.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:42 -0600] "GET /12.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /acp.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /Ov-Simple1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /link.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /dass.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /ws66.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /db.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /flower.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:43 -0600] "GET /ws81.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /r2.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /tiny.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /tiny HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET //edit.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /ws80.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET //f6.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /roksad1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:44 -0600] "GET /ortasekerli1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /fone1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /config.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /xltt.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /sadcut1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /dx.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /xff.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /wglum1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:45 -0600] "GET /ng.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:46 -0600] "GET /footer.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:46 -0600] "GET /wgift1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:46 -0600] "GET /xynz.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:46 -0600] "GET /wp-admin/images/admin.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:47 -0600] "GET /press.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:47 -0600] "GET /xwx1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:48 -0600] "GET /rh.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:48 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:48 -0600] "GET /d.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:48 -0600] "GET /classwithtostring.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:48 -0600] "GET /wp-kz.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /view.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /cilus.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /adminfuns.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /doc.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /xper1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /2.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /gelio1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:49 -0600] "GET /ws82.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /wp-class.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /tiny/index.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /layout.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /ws85.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:50 -0600] "GET /zogy1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:51 -0600] "GET /state.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:51 -0600] "GET /ss.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /1s7y8wt9dz.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /bthil.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /error_log.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /mifta.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /ws57.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /ws86.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:52 -0600] "GET /fs.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /packsin1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /xs.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /img.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /chosen.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /index.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /maxro.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /a7.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /wp-block.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:53 -0600] "GET /aa.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /areak1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /sallu.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /tiny2.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /7.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /gz.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /8.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /gecko.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:54 -0600] "GET /aevly.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /ws68.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /pp.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /yuzuru1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /son1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /tx79.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /wmore1.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /ws80.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:55 -0600] "GET /ws84.php HTTP/1.1" 404 442 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:56 -0600] "GET /ws61.php HTTP/1.1" 404 461 "-" "-" 20.215.251.188 - - [18/Apr/2026:05:21:56 -0600] "GET /class-wp-image.php HTTP/1.1" 404 442 "-" "-" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET / HTTP/1.1" 200 11229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET / HTTP/1.1" 200 11228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET /xmlrpc.php?rsd HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET / HTTP/1.1" 200 11228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:44 -0600] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.244.57.92 - - [18/Apr/2026:05:25:45 -0600] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (: 227937466084 Apr 18 05:51:56 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: 5b3993aa-99a3-4daa-86da-e92af5e82873 Apr 18 06:00:01 ip-172-31-29-215 CRON[2077285]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 06:08:33 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities... Apr 18 06:09:00 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 06:09:00 ip-172-31-29-215 sessionclean[2077330]: Cannot load Xdebug - it was already loaded Apr 18 06:09:00 ip-172-31-29-215 sessionclean[2077330]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Apr 18 06:09:00 ip-172-31-29-215 sessionclean[2077330]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Apr 18 06:09:00 ip-172-31-29-215 sessionclean[2077330]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 06:09:00 ip-172-31-29-215 sessionclean[2077330]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 06:09:00 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Apr 18 06:09:00 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Apr 18 06:09:01 ip-172-31-29-215 CRON[2077373]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 06:09:03 ip-172-31-29-215 apt-helper[2077310]: E: Sub-process nm-online returned an error code (1) Apr 18 06:09:07 ip-172-31-29-215 systemd[1]: apt-daily-upgrade.service: Succeeded. Apr 18 06:09:07 ip-172-31-29-215 systemd[1]: Finished Daily apt upgrade and clean activities. Apr 18 06:17:01 ip-172-31-29-215 CRON[2077454]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Apr 18 06:19:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 06:19:41.0328 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 06:19:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 06:19:41.0630 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 06:19:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: a5ec50e5-0d18-443f-92ca-d58706596888 Apr 18 06:20:01 ip-172-31-29-215 CRON[2077459]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 06:25:01 ip-172-31-29-215 CRON[2077484]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Apr 18 06:25:01 ip-172-31-29-215 cracklib: no dictionary update necessary. Apr 18 06:39:01 ip-172-31-29-215 CRON[2077581]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 06:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 06:39:19 ip-172-31-29-215 sessionclean[2077594]: Cannot load Xdebug - it was already loaded Apr 18 06:39:19 ip-172-31-29-215 sessionclean[2077594]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No suc "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:02 -0600] "GET /.git/packed-refs HTTP/1.1" 404 4210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 45.88.138.44 - - [18/Apr/2026:06:13:02 -0600] "GET /.git/logs/HEAD HTTP/1.1" 404 4210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /config/.env HTTP/1.1" 404 460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /.env.prod HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /.env.staging HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /.env.dev HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /.env.old HTTP/1.1" 404 460 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 45.88.138.44 - - [18/Apr/2026:06:13:04 -0600] "GET /.env.example HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:06 -0600] "GET /build/.env HTTP/1.1" 404 460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:06 -0600] "GET /core/.env HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.88.138.44 - - [18/Apr/2026:06:13:06 -0600] "GET /public/.env HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 45.88.138.44 - - [18/Apr/2026:06:13:06 -0600] "GET /web/.env HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ::1 - - [18/Apr/2026:06:13:06 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" ::1 - - [18/Apr/2026:06:13:07 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" 155.254.39.49 - - [18/Apr/2026:06:13:25 -0600] "GET /.env HTTP/1.1" 404 4228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 155.254.39.49 - - [18/Apr/2026:06:13:25 -0600] "POST / HTTP/1.1" 200 7257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ::1 - - [18/Apr/2026:06:13:26 -0600] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f (internal dummy connection)" 101.33.66.34 - - [18/Apr/2026:06:19:36 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.133.192.88 - - [18/Apr/2026:06:22:39 -0600] "GET / HTTP/1.1" 200 7190 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 5.133.192.88 - - [18/Apr/2026:06:22:40 -0600] "GET /favicon.ico HTTP/1.1" 404 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 87.236.176.195 - - [18/Apr/2026:06:25:06 -0600] "GET / HTTP/1.1" 200 7173 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 176.120.22.139 - - [18/Apr/2026:06:48:36 -0600] "GET /Citrix/XenApp/au5 CRON[2077753]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Apr 18 07:17:02 ip-172-31-29-215 systemd[1]: Starting Certbot... Apr 18 07:17:02 ip-172-31-29-215 systemd[1]: certbot.service: Succeeded. Apr 18 07:17:02 ip-172-31-29-215 systemd[1]: Finished Certbot. Apr 18 07:20:01 ip-172-31-29-215 CRON[2077767]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 07:39:01 ip-172-31-29-215 CRON[2078019]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 07:39:09 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 07:39:09 ip-172-31-29-215 sessionclean[2078032]: Cannot load Xdebug - it was already loaded Apr 18 07:39:09 ip-172-31-29-215 sessionclean[2078032]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Apr 18 07:39:09 ip-172-31-29-215 sessionclean[2078032]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Apr 18 07:39:09 ip-172-31-29-215 sessionclean[2078032]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 07:39:09 ip-172-31-29-215 sessionclean[2078032]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 07:39:09 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Apr 18 07:39:09 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Apr 18 07:40:01 ip-172-31-29-215 CRON[2078075]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 07:40:19 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 07:40:19.2395 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 07:40:19 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 07:40:19.2720 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 07:40:19 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: 3f431802-7182-4865-b9d1-734f02a98d20 Apr 18 08:00:01 ip-172-31-29-215 CRON[2078103]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 08:08:47 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 08:08:47.2766 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 08:08:47 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 08:08:47.3124 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 08:08:47 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: fcc4727f-af5f-40c9-b645-3e715851bb09 Apr 18 08:09:01 ip-172-31-29-215 CRON[2078130]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 08:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 08:09:19 ip-172-31-29-215 sessionclean[20781Error: no EC2 instance role found Apr 18 09:04:42 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 09:04:42.4358 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 09:04:42 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: f0627bbe-32a5-4d8f-867d-480bdfde8189 Apr 18 09:09:01 ip-172-31-29-215 CRON[2078343]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 09:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 09:09:19 ip-172-31-29-215 sessionclean[2078356]: Cannot load Xdebug - it was already loaded Apr 18 09:09:19 ip-172-31-29-215 sessionclean[2078356]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Apr 18 09:09:19 ip-172-31-29-215 sessionclean[2078356]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Apr 18 09:09:19 ip-172-31-29-215 sessionclean[2078356]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 09:09:19 ip-172-31-29-215 sessionclean[2078356]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 09:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Apr 18 09:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Apr 18 09:17:01 ip-172-31-29-215 CRON[2078401]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Apr 18 09:20:01 ip-172-31-29-215 CRON[2078407]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Apr 18 09:34:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 09:34:39.4377 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Apr 18 09:34:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-18 09:34:39.4705 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Apr 18 09:34:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: 78ffdbf6-8f4e-470b-80f8-5ad37e721e50 Apr 18 09:39:01 ip-172-31-29-215 CRON[2078662]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Apr 18 09:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Apr 18 09:39:19 ip-172-31-29-215 sessionclean[2078675]: Cannot load Xdebug - it was already loaded Apr 18 09:39:19 ip-172-31-29-215 sessionclean[2078675]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Apr 18 09:39:19 ip-172-31-29-215 sessionclean[2078675]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Apr 18 09:39:19 ip-172-31-29-215 sessionclean[2078675]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Apr 18 09:39:19 ip-172-31-29-215 sessionclean[2078675]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Apr 18 09:39:20 ip-172-