PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 PHP Warning: Module 'gettext' already loaded in Unknown on line 0 PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 [Sun Oct 12 00:00:01.815571 2025] [mpm_prefork:notice] [pid 1759300] AH00163: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f configured -- resuming normal operations [Sun Oct 12 00:00:01.815579 2025] [core:notice] [pid 1759300] AH00094: Command line: '/usr/sbin/apache2' [Sun Oct 12 02:32:51.421735 2025] [php7:error] [pid 3984510] [client 82.165.122.51:53222] script '/var/www/html/xmlrpc.php' not found or unable to stat [Sun Oct 12 03:16:07.743511 2025] [authz_core:error] [pid 3984511] [client 157.245.113.227:60618] AH01630: client denied by server configuration: /var/www/html/server-status [Sun Oct 12 03:16:09.376617 2025] [php7:error] [pid 3984509] [client 157.245.113.227:60728] script '/var/www/html/info.php' not found or unable to stat t was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded Cannot load Xdebug - it was already loaded [Sun Oct 12 04:26:34.111637 2025] [php7:error] [pid 3984582] [client 223.181.104.174:18958] script '/var/www/html/xmlrpc.php' not found or unable to stat [Sun Oct 12 04:33:06.906874 2025] [php7:error] [pid 3984509] [client 182.8.227.76:34623] script '/var/www/html/0x00000.php' not found or unable to stat [Sun Oct 12 04:33:07.968348 2025] [php7:error] [pid 3985305] [client 182.8.227.76:34912] script '/var/www/html/conv.php' not found or unable to stat [Sun Oct 12 05:01:28.861506 2025] [core:error] [pid 3985305] [client 43.142.87.72:33866] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 [Sun Oct 12 05:02:50.113557 2025] [php7:error] [pid 3984511] [client 182.8.227.76:10041] script '/var/www/html/0x00000.php' not found or unable to stat [Sun Oct 12 05:02:51.147582 2025] [php7:error] [pid 3984512] [client 182.8.227.76:10417] script '/var/www/html/conv.php' not found or unable to stat [Sun Oct 12 05:17:41.838128 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/error.php' not found or unable to stat [Sun Oct 12 05:17:41.989096 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/kao.php' not found or unable to stat [Sun Oct 12 05:17:42.147359 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/gggssdd.php' not found or unable to stat [Sun Oct 12 05:17:42.298074 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/cincinnus.php' not found or unable to stat [Sun Oct 12 05:17:42.450758 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/riming.php' not found or unable to stat [Sun Oct 12 05:17:42.607691 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/sphaeristeria.php' not found or unable to stat [Sun Oct 12 05:17:42.757557 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/html/kaza.php' not found or unable to stat [Sun Oct 12 05:17:42.911184 2025] [php7:error] [pid 3984508] [client 74.176.69.58:36807] script '/var/www/hOct 12 00:00:01 ip-172-31-29-215 systemd[1]: man-db.service: Succeeded. Oct 12 00:00:01 ip-172-31-29-215 systemd[1]: Finished Daily man-db regeneration. Oct 12 00:00:01 ip-172-31-29-215 systemd[1]: logrotate.service: Succeeded. Oct 12 00:00:01 ip-172-31-29-215 systemd[1]: Finished Rotate log files. Oct 12 00:03:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 00:03:43.7909 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 00:03:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 00:03:43.8281 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 00:03:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 73c0b68c-6a63-4eda-8564-191ccd673c2a Oct 12 00:09:01 ip-172-31-29-215 CRON[3984531]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 00:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 00:09:02 ip-172-31-29-215 sessionclean[3984544]: Cannot load Xdebug - it was already loaded Oct 12 00:09:02 ip-172-31-29-215 sessionclean[3984544]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 00:09:02 ip-172-31-29-215 sessionclean[3984544]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 00:09:02 ip-172-31-29-215 sessionclean[3984544]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 00:09:02 ip-172-31-29-215 sessionclean[3984544]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 00:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 00:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 00:17:01 ip-172-31-29-215 CRON[3984586]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 12 00:20:01 ip-172-31-29-215 CRON[3984592]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 00:32:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 00:32:43.8299 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 00:32:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 00:32:43.8604 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 00:32:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: b938187f-0ce2-4403-ade4-29f8104616cb Oct 12 00:39:01 ip-172-31-29-215 CRON[3984624]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 00:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 00:39:02 ip-172-31-29-215 sessionclean[3984637]: Cannot load Xdebug - it was already loaded Oct 12 00:39:02 ip-172-31-29-215 sessionclean[3984637]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_Oct 12 00:09:01 ip-172-31-29-215 CRON[3984530]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 00:09:01 ip-172-31-29-215 CRON[3984530]: pam_unix(cron:session): session closed for user root Oct 12 00:17:01 ip-172-31-29-215 CRON[3984585]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 00:17:01 ip-172-31-29-215 CRON[3984585]: pam_unix(cron:session): session closed for user root Oct 12 00:20:01 ip-172-31-29-215 CRON[3984591]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 00:20:01 ip-172-31-29-215 CRON[3984591]: pam_unix(cron:session): session closed for user smmsp Oct 12 00:32:46 ip-172-31-29-215 sshd[3984617]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Oct 12 00:32:47 ip-172-31-29-215 sshd[3984618]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" Oct 12 00:39:01 ip-172-31-29-215 CRON[3984623]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 00:39:01 ip-172-31-29-215 CRON[3984623]: pam_unix(cron:session): session closed for user root Oct 12 00:40:01 ip-172-31-29-215 CRON[3984677]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 00:40:01 ip-172-31-29-215 CRON[3984677]: pam_unix(cron:session): session closed for user smmsp Oct 12 01:00:01 ip-172-31-29-215 CRON[3984705]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 01:00:01 ip-172-31-29-215 CRON[3984705]: pam_unix(cron:session): session closed for user smmsp Oct 12 01:07:02 ip-172-31-29-215 sshd[3984763]: Connection closed by 206.168.34.219 port 57366 [preauth] Oct 12 01:09:01 ip-172-31-29-215 CRON[3984767]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 01:09:01 ip-172-31-29-215 CRON[3984767]: pam_unix(cron:session): session closed for user root Oct 12 01:11:17 ip-172-31-29-215 sshd[3984820]: error: kex_exchange_identification: client sent invalid protocol identifier "" Oct 12 01:13:48 ip-172-31-29-215 sshd[3984822]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Oct 12 01:15:05 ip-172-31-29-215 sshd[3984823]: error: kex_exchange_identification: banner line contains invalid characters Oct 12 01:16:42 ip-172-31-29-215 sshd[3984824]: Connection closed by 3.149.59.26 port 45332 [preauth] Oct 12 01:17:01 ip-172-31-29-215 CRON[3984826]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 01:17:01 ip-172-31-29-215 CRON[3984826]: pam_unix(cron:session): session closed for user root Oct 12 01:18:14 ip-172-31-29-215 sshd[3984831]: error: kex_exchange_identification: banner line contains invalid characters Oct 12 01:20:01 ip-172-31-29-215 CRON[3984834]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 01:20:01 ip-172-31-29-215 CRON[3984834]: pam_unix(cron:session): session closed for user smmsp Oct 12 01:39:01 ip-172-31-29-215 CRON[3984864]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 01:39:01 ip-172-31-29-215 CRON[3984864]: pam_unix(cron:session): session closed for user root Oct 12 01:40:01 ip-172-31-29-215 CRON[3984920]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 01:40:01 ip-172-31-29-215 CRON[3984920]: pam_unix(cron:session): session closed for user smmsp Oct 12 02:00:01 ip-172-31-29-215 CRON[3984953]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 02:00:01 ip-172-31-29-215 CRON[3984953]: pam_unix(cron:session): session closed for user smmsp Oct 12 02:09:01 ip-172-31-29-215 CRON[3984978]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 02:09:01 ip-172-31-29-215 CRON[3984978]: pam_unix(cron:session): session closed for user root Oct 12 02:17:01 ip-172-31-29-215 CRON[3985034]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 02:17:01 ip-172-31-29-215 CRON[3985034]: pam_unix(cron:session): session closed for user root Oct 12 02:20:01 ip-172-31-29-215 CRON[3985040]: pam_unix(cron:session): session opened on line 0 Oct 12 02:09:02 ip-172-31-29-215 sessionclean[3984992]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 02:09:02 ip-172-31-29-215 sessionclean[3984992]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 02:09:02 ip-172-31-29-215 sessionclean[3984992]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 02:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 02:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 02:17:01 ip-172-31-29-215 CRON[3985035]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 12 02:20:01 ip-172-31-29-215 CRON[3985041]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 02:26:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 02:26:58.0760 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 02:26:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 02:26:58.1209 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 02:26:58 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: b4240210-808d-44ce-88a1-cd596937f077 Oct 12 02:39:01 ip-172-31-29-215 CRON[3985079]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 02:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 02:39:02 ip-172-31-29-215 sessionclean[3985092]: Cannot load Xdebug - it was already loaded Oct 12 02:39:02 ip-172-31-29-215 sessionclean[3985092]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 02:39:02 ip-172-31-29-215 sessionclean[3985092]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 02:39:02 ip-172-31-29-215 sessionclean[3985092]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 02:39:02 ip-172-31-29-215 sessionclean[3985092]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 02:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 02:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 02:40:01 ip-172-31-29-215 CRON[3985134]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 02:54:31 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 02:54:31.2122 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 02:54:31 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 02:54:31.2536 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 02:54:31 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 474652a7-5caf-45ba-985a-332f02117314 Oct 12 03:00:01 ip-172-31-29-215 CRON[3985179]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && testozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.73 - - [12/Oct/2025:02:09:14 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13538 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.75 - - [12/Oct/2025:02:09:14 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_check.png HTTP/1.1" 200 7599 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.74 - - [12/Oct/2025:02:09:43 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_check.png HTTP/1.1" 200 7599 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.73 - - [12/Oct/2025:02:09:43 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13538 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.73 - - [12/Oct/2025:02:09:43 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_wire_transfer.png HTTP/1.1" 200 5516 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 185.244.104.2 - - [12/Oct/2025:02:22:09 -0600] "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 142.111.113.85 - - [12/Oct/2025:02:23:48 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 142.111.113.85 - - [12/Oct/2025:02:23:49 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 5.252.21.18 - - [12/Oct/2025:02:24:29 -0600] "GET / HTTP/1.1" 200 11229 "-" "Wget/1.21.4" 5.252.21.18 - - [12/Oct/2025:02:24:29 -0600] "GET /robots.txt HTTP/1.1" 404 490 "-" "Wget/1.21.4" 5.252.21.18 - - [12/Oct/2025:02:24:29 -0600] "GET /icons/ubuntu-logo.png HTTP/1.1" 200 3623 "http://3.22.251.217/" "Wget/1.21.4" 5.252.21.18 - - [12/Oct/2025:02:24:29 -0600] "GET /manual HTTP/1.1" 404 490 "http://3.22.251.217/" "Wget/1.21.4" 136.143.176.64 - - [12/Oct/2025:02:25:19 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 205.210.31.159 - - [12/Oct/2025:02:25:41 -0600] "GET / HTTP/1.1" 200 3421 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 87.121.84.17 - - [12/Oct/2025:02:30:55 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET / HTTP/1.1" 200 11229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET / HTTP/1.1" 200 11228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET /xmlrpc.php?rsd HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET / HTTP/1.1" 200 11228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:51 -0600] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:52 -0600] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.122.51 - - [12/Oct/2025:02:32:53 -0600] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 66.102.8.73 - - [12/Oct/2025:02:43:22 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13538 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.74 - - [12/Oct/2025:02:43:22 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_wire_transfer.png HTTP/1.1" 200 9221 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.75 - - [12/Oct/2025:02:43:22 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_check.png HTTP/1.1" 200 7599 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.73 - - [12/Oct/2025:02:43:25 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_check.png HTTP/1.1" 200 3894 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.75 - - [12/Oct/2025:02:43:25 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_wire_transfer.png HTTP/1.1" 200 5516 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 66.102.8.73 - - [12/Oct/2025:02:43:25 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13538 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 222.79.103.59 - - [12/Oct/2025:03:03:55 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.244.104.2 - - [12/Oct/2025:03:12:09 -0600] "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 157.245.113.227 - - [12/Oct/2025:03:16:06 -0600] "GET / HTTP/1.1" 200 14940 "-" "-" 157.245.113.227 - - [12/Oct/2025:03:16:07 -0600] "GET / HTTP/1.1" 200 14940 "-" "Mozilla/5.0 (Linux; A -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 03:09:01 ip-172-31-29-215 CRON[3985225]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 03:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 03:09:02 ip-172-31-29-215 sessionclean[3985238]: Cannot load Xdebug - it was already loaded Oct 12 03:09:02 ip-172-31-29-215 sessionclean[3985238]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 03:09:02 ip-172-31-29-215 sessionclean[3985238]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 03:09:02 ip-172-31-29-215 sessionclean[3985238]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 03:09:02 ip-172-31-29-215 sessionclean[3985238]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 03:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 03:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 03:10:01 ip-172-31-29-215 CRON[3985282]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r) Oct 12 03:10:33 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems... Oct 12 03:10:33 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded. Oct 12 03:10:33 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems. Oct 12 03:17:02 ip-172-31-29-215 CRON[3985307]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 12 03:20:01 ip-172-31-29-215 CRON[3985319]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 03:21:16 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 03:21:16.3045 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 03:21:16 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 03:21:16.3415 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 03:21:16 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: dc4ae7fa-a387-4fcd-9eb0-276d5a611af2 Oct 12 03:30:01 ip-172-31-29-215 CRON[3985354]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron) Oct 12 03:39:01 ip-172-31-29-215 CRON[3985390]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 03:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 03:39:02 ip-172-31-29-215 sessionclean[3985403]: Cannot load Xdebug - it was already loaded Oct 12 03:39:02 ip-172-31-29-215 sessionclean[3985403]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 03:39:02 ip-172-31-29-215 sessionclean[3985403]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 03:39:02 ip-172-31-29-215 sessionclean[3985403]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 03:39:02 ip-172-31-212 03:17:02 ip-172-31-29-215 CRON[3985306]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 03:17:02 ip-172-31-29-215 CRON[3985306]: pam_unix(cron:session): session closed for user root Oct 12 03:17:15 ip-172-31-29-215 sshd[3985309]: Invalid user user14 from 104.28.246.49 port 18422 Oct 12 03:17:15 ip-172-31-29-215 sshd[3985309]: Received disconnect from 104.28.246.49 port 18422:11: Bye Bye [preauth] Oct 12 03:17:15 ip-172-31-29-215 sshd[3985309]: Disconnected from invalid user user14 104.28.246.49 port 18422 [preauth] Oct 12 03:18:07 ip-172-31-29-215 sshd[3985313]: Received disconnect from 104.28.246.49 port 15175:11: Bye Bye [preauth] Oct 12 03:18:07 ip-172-31-29-215 sshd[3985313]: Disconnected from authenticating user root 104.28.246.49 port 15175 [preauth] Oct 12 03:18:59 ip-172-31-29-215 sshd[3985315]: Invalid user autumn from 104.28.214.49 port 48743 Oct 12 03:18:59 ip-172-31-29-215 sshd[3985315]: Received disconnect from 104.28.214.49 port 48743:11: Bye Bye [preauth] Oct 12 03:18:59 ip-172-31-29-215 sshd[3985315]: Disconnected from invalid user autumn 104.28.214.49 port 48743 [preauth] Oct 12 03:20:01 ip-172-31-29-215 CRON[3985318]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 03:20:01 ip-172-31-29-215 CRON[3985318]: pam_unix(cron:session): session closed for user smmsp Oct 12 03:21:33 ip-172-31-29-215 sshd[3985341]: Invalid user yash from 104.28.246.49 port 60759 Oct 12 03:21:33 ip-172-31-29-215 sshd[3985341]: Received disconnect from 104.28.246.49 port 60759:11: Bye Bye [preauth] Oct 12 03:21:33 ip-172-31-29-215 sshd[3985341]: Disconnected from invalid user yash 104.28.246.49 port 60759 [preauth] Oct 12 03:28:05 ip-172-31-29-215 sshd[3985345]: Received disconnect from 103.23.199.49 port 33232:11: Bye Bye [preauth] Oct 12 03:28:05 ip-172-31-29-215 sshd[3985345]: Disconnected from authenticating user root 103.23.199.49 port 33232 [preauth] Oct 12 03:29:01 ip-172-31-29-215 sshd[3985348]: Received disconnect from 103.23.199.49 port 50606:11: Bye Bye [preauth] Oct 12 03:29:01 ip-172-31-29-215 sshd[3985348]: Disconnected from authenticating user root 103.23.199.49 port 50606 [preauth] Oct 12 03:29:34 ip-172-31-29-215 sshd[3985351]: Invalid user nabi from 103.23.199.49 port 39088 Oct 12 03:29:34 ip-172-31-29-215 sshd[3985351]: Received disconnect from 103.23.199.49 port 39088:11: Bye Bye [preauth] Oct 12 03:29:34 ip-172-31-29-215 sshd[3985351]: Disconnected from invalid user nabi 103.23.199.49 port 39088 [preauth] Oct 12 03:30:01 ip-172-31-29-215 CRON[3985353]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 03:30:01 ip-172-31-29-215 CRON[3985353]: pam_unix(cron:session): session closed for user root Oct 12 03:30:14 ip-172-31-29-215 sshd[3985355]: Received disconnect from 103.23.199.49 port 51638:11: Bye Bye [preauth] Oct 12 03:30:14 ip-172-31-29-215 sshd[3985355]: Disconnected from authenticating user root 103.23.199.49 port 51638 [preauth] Oct 12 03:30:48 ip-172-31-29-215 sshd[3985357]: Invalid user pagano from 103.23.199.49 port 43226 Oct 12 03:30:48 ip-172-31-29-215 sshd[3985357]: Received disconnect from 103.23.199.49 port 43226:11: Bye Bye [preauth] Oct 12 03:30:48 ip-172-31-29-215 sshd[3985357]: Disconnected from invalid user pagano 103.23.199.49 port 43226 [preauth] Oct 12 03:31:26 ip-172-31-29-215 sshd[3985361]: error: kex_exchange_identification: Connection closed by remote host Oct 12 03:31:26 ip-172-31-29-215 sshd[3985359]: Invalid user freedom from 103.23.199.49 port 55184 Oct 12 03:31:26 ip-172-31-29-215 sshd[3985359]: Received disconnect from 103.23.199.49 port 55184:11: Bye Bye [preauth] Oct 12 03:31:26 ip-172-31-29-215 sshd[3985359]: Disconnected from invalid user freedom 103.23.199.49 port 55184 [preauth] Oct 12 03:32:00 ip-172-31-29-215 sshd[3985362]: Invalid user admin from 103.23.199.49 port 52772 Oct 12 03:32:00 ip-172-31-29-215 sshd[3985362]: Received disconnect from 103.23.199.49 port 52772:11: Bye Bye [preauth] Oct 12 03:32:00 ip-172-31-29-215 sshd[3985362]: Disconnected from invalid user admin 103.23.199.49 port 52772 [preauth] Oct 12 03:32:39 ip-172-31-29-215 sshd[3985365]: Invalid user panda from 103.23.199.49 port 33628 Oct 12 03:32:40 ip-172-31-29-215 sshd[3985365]: Received disconnect from 103.23.199.49 port 33628:11: Bye Bye [preauth] Oct 12 03:32:40 ip-172-31-29-215 sshd[3985365]: Disconnected from invalid user panda 103.23.199.49 port 33628 [preauth] Oct 12 03:33:14 ip-172-31-29-215 sshd[3985368]: Invalid user ark from 103.23.199.49 port 40050 Oct 12 03:33:14 ip-172-31-29-215 sshd[3985368]: Received disconnect from 103.23.199.49 port 40050:11: Bye Bye [preauth] Oct 12 03:33:14 ip-172-31-29-215 sshd[3985368]: Disconnected from invalid user ark 103.23.199.49 port 40050 [preauth] Oct 12 03:33:52 ip-172-31-29-215 sshd[3985370]: Invalid user ugo from 103.23.199.49 port 51186 Oct 12 03:33:53 ip-172-31-29-215 sshd[3985370]: Received disconnect from 103.23.199.49 port 51186:11: Bye Bye [preauth] Oct 12 03:33:53 ip-172-31-29-215 sshd[3985370]: Disconnected from invalid user ugo 103.23.199.49 port 51186 [preauth] Oct 12 03:34:27 ip-172-31-29-215 sshd[3985372]: Received disconnect from 103.23.199.49 port 41686:11: Bye Bye [preauth] Oct 12 03:34:27 ip-172-31-29-215 sshd[3985372]: Disconnected from authenticating user root 103.23.199.49 port 41686 [preauth] Oct 12 03:35:05 ip-172-31-29-215 sshd[3985374]: Invalid user ruby from 103.23.199.49 port 55068 Oct 12 03:35:05 ip-172-31-29-215 sshd[3985374]: Received disconnect from 103.23.199.49 port 55068:11: Bye Bye [preauth] Oct 12 03:35:05 ip-172-31-29-215 sshd[3985374]: Disconnected from invalid user ruby 103.23.199.49 port 55068 [preauth] Oct 12 03:35:42 ip-172-31-29-215 sshd[3985376]: Invalid user gabby from 103.23.199.49 port 58568 Oct 12 03:35:43 ip-172-31-29-215 sshd[3985376]: Received disconnect from 103.23.199.49 port 58568:11: Bye Bye [preauth] Oct 12 03:35:43 ip-172-31-29-215 sshd[3985376]: Disconnected from invalid user gabby 103.23.199.49 port 58568 [preauth] Oct 12 03:36:19 ip-172-31-29-215 sshd[3985378]: Received disconnect from 103.23.199.49 port 39756:11: Bye Bye [preauth] Oct 12 03:36:19 ip-172-31-29-215 sshd[3985378]: Disconnected from authenticating user root 103.23.199.49 port 39756 [preauth] Oct 12 03:36:53 ip-172-31-29-215 sshd[3985380]: Received disconnect from 103.23.199.49 port 37888:11: Bye Bye [preauth] Oct 12 03:36:53 ip-172-31-29-215 sshd[3985380]: Disconnected from authenticating user root 103.23.199.49 port 37888 [preauth] Oct 12 03:37:29 ip-172-31-29-215 sshd[3985382]: Invalid user roots from 103.23.199.49 port 54498 Oct 12 03:37:29 ip-172-31-29-215 sshd[3985382]: Received disconnect from 103.23.199.49 port 54498:11: Bye Bye [preauth] Oct 12 03:37:29 ip-172-31-29-215 sshd[3985382]: Disconnected from invalid user roots 103.23.199.49 port 54498 [preauth] Oct 12 03:38:05 ip-172-31-29-215 sshd[3985385]: Received disconnect from 103.23.199.49 port 39110:11: Bye Bye [preauth] Oct 12 03:38:05 ip-172-31-29-215 sshd[3985385]: Disconnected from authenticating user root 103.23.199.49 port 39110 [preauth] Oct 12 03:39:01 ip-172-31-29-215 CRON[3985389]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 03:39:01 ip-172-31-29-215 CRON[3985389]: pam_unix(cron:session): session closed for user root Oct 12 03:40:01 ip-172-31-29-215 CRON[3985446]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 03:40:01 ip-172-31-29-215 CRON[3985446]: pam_unix(cron:session): session closed for user smmsp Oct 12 03:43:08 ip-172-31-29-215 sshd[3985468]: Invalid user kelvin from 103.171.85.117 port 48834 Oct 12 03:43:08 ip-172-31-29-215 sshd[3985468]: Received disconnect from 103.171.85.117 port 48834:11: Bye Bye [preauth] Oct 12 03:43:08 ip-172-31-29-215 sshd[3985468]: Disconnected from invalid user kelvin 103.171.85.117 port 48834 [preauth] Oct 12 03:46:07 ip-172-31-29-215 sshd[3985471]: Invalid user tsserver from 103.171.85.117 port 43846 Oct 12 03:46:08 ip-172-31-29-215 sshd[3985471]: Received disconnect from 103.171.85.117 port 43846:11: Bye Bye [preauth] Oct 12 03:46:08 ip-172-31-29-215 sshd[3985471]: Disconnected from invalid user tsserver 103.171.85.112025-10-12 04:05:20,334:DEBUG:certbot.main:certbot version: 0.40.0 2025-10-12 04:05:20,335:DEBUG:certbot.main:Arguments: ['-q'] 2025-10-12 04:05:20,335:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2025-10-12 04:05:20,343:DEBUG:certbot.log:Root logging level set at 30 2025-10-12 04:05:20,345:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2025-10-12 04:05:20,351:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2025-10-12 04:05:20,359:INFO:certbot.renewal:Cert not yet due for renewal 2025-10-12 04:05:20,360:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-10-12 04:05:20,360:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-10-12 04:05:20,361:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-10-12 04:05:20,364:INFO:certbot.renewal:Cert not yet due for renewal 2025-10-12 04:05:20,365:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-10-12 04:05:20,365:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-10-12 04:05:20,365:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-10-12 04:05:20,365:DEBUG:certbot.renewal:no renewal failures 2025-10-12 14:44:20,333:DEBUG:certbot.main:certbot version: 0.40.0 2025-10-12 14:44:20,335:DEBUG:certbot.main:Arguments: ['-q'] 2025-10-12 14:44:20,335:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2025-10-12 14:44:20,342:DEBUG:certbot.log:Root logging level set at 30 2025-10-12 14:44:20,343:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2025-10-12 14:44:20,350:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2025-10-12 14:44:20,358:INFO:certbot.renewal:Cert not yet due for renewal 2025-10-12 14:44:20,359:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-10-12 14:44:20,360:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-10-12 14:44:20,360:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-10-12 14:44:20,363:INFO:certbot.renewal:Cert not yet due for renewal 2025-10-12 14:44:20,364:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-10-12 14:44:20,365:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-10-12 14:44:20,365:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-10-12 14:44:20,365:DEBUG:certbot.renewal:no renewal failures 2025-10-13 07:15:15,242:DEBU1]: Finished Ubuntu Advantage Timer for running repeated jobs. Oct 12 04:19:02 ip-172-31-29-215 snapd[3235390]: storehelpers.go:916: cannot refresh: snap has no updates available: "amazon-ssm-agent", "core18", "core20", "core22", "lxd", "snapd" Oct 12 04:20:01 ip-172-31-29-215 CRON[3985599]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 04:39:01 ip-172-31-29-215 CRON[3985635]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 04:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 04:39:02 ip-172-31-29-215 sessionclean[3985648]: Cannot load Xdebug - it was already loaded Oct 12 04:39:02 ip-172-31-29-215 sessionclean[3985648]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 04:39:02 ip-172-31-29-215 sessionclean[3985648]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 04:39:02 ip-172-31-29-215 sessionclean[3985648]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 04:39:02 ip-172-31-29-215 sessionclean[3985648]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 04:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 04:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 04:40:01 ip-172-31-29-215 CRON[3985693]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 04:40:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 04:40:33.5251 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 04:40:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 04:40:33.5848 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 04:40:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: c9bc446e-f34b-47c4-95b8-fea7878d1cda Oct 12 05:00:01 ip-172-31-29-215 CRON[3985730]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 05:09:01 ip-172-31-29-215 CRON[3985756]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 05:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 05:09:02 ip-172-31-29-215 sessionclean[3985769]: Cannot load Xdebug - it was already loaded Oct 12 05:09:02 ip-172-31-29-215 sessionclean[3985769]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 05:09:02 ip-172-31-29-215 sessionclean[3985769]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 05:09:02 ip-172-31-29-215 sessionclean[3985769]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 05:09:02 ip-172-31-29-215 sessionclean[3985769]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line Oct 12 06:04:54 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 06:04:54.7089 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 06:04:54 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: a1acc946-3cd3-4b27-bc5b-9cab5fd4958f Oct 12 06:09:01 ip-172-31-29-215 CRON[3986030]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 06:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 06:09:02 ip-172-31-29-215 sessionclean[3986043]: Cannot load Xdebug - it was already loaded Oct 12 06:09:02 ip-172-31-29-215 sessionclean[3986043]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 06:09:02 ip-172-31-29-215 sessionclean[3986043]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 06:09:02 ip-172-31-29-215 sessionclean[3986043]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 06:09:02 ip-172-31-29-215 sessionclean[3986043]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 06:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 06:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 06:17:01 ip-172-31-29-215 CRON[3986093]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 12 06:20:01 ip-172-31-29-215 CRON[3986098]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 06:25:01 ip-172-31-29-215 CRON[3986122]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Oct 12 06:25:01 ip-172-31-29-215 cracklib: no dictionary update necessary. Oct 12 06:34:52 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 06:34:52.7780 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 06:34:52 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 06:34:52.8145 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 06:34:52 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 3db3a4d1-bf24-4aaf-8ccd-45c8efafdd9b Oct 12 06:39:01 ip-172-31-29-215 CRON[3986219]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 06:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 06:39:02 ip-172-31-29-215 sessionclean[3986232]: Cannot load Xdebug - it was already loaded Oct 12 06:39:02 ip-172-31-29-215 sessionclean[3986232]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 06:39:02 ip-172-31-29-215 sessionclean[3986232]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 06:39:02 ip-172-31-29-215 sessionclean[3986232]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 06:39:02 ip-172-31-29-215 sessionclean[3986232]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 06:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 06:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 06:40:01 ip-172-31-29-215 CRON[3986276]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 06:40:19 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities... Oct 12 06:40:50 ip-172-31-29-215 apt-helper[3986297]: E: Sub-process nm-online returned an error code (1) Oct 12 06:40:53 ip-172-31-29-215 systemd[1]: apt-daily-upgrade.service: Succeeded. Oct 12 06:40:53 ip-172-31-29-215 systemd[1]: Finished Daily apt upgrade and clean activities. Oct 12 06:47:01 ip-172-31-29-215 CRON[3986377]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )) Oct 12 06:50:19 ip-172-31-29-215 systemd[1]: Starting Refresh fwupd metadata and update motd... Oct 12 06:50:19 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.36644' (uid=116 pid=3986390 comm="/usr/bin/fwupdmgr refresh " label="unconfined") Oct 12 06:50:19 ip-172-31-29-215 systemd[1]: Starting Firmware update daemon... Oct 12 06:50:20 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.fwupd' Oct 12 06:50:20 ip-172-31-29-215 systemd[1]: Started Firmware update daemon. Oct 12 06:50:20 ip-172-31-29-215 fwupd[3986395]: 12:50:20:0170 FuPluginLinuxSleep could not open /sys/power/mem_sleep: Error opening file /sys/power/mem_sleep: No such file or directory Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Updating lvfs Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 0% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 34% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 52% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 70% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 88% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Idle…: 100% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Idle…: 100% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 100% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 0% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 1% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 2% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 3% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 4% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 5% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 6% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 7% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 9% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 10% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 11% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 12% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 14% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 19% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 21% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 22% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 27% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 33% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 39% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 44% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 50% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 56% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 67% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 73% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 78% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 84% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 89% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Downloading…: 95% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Idle…: 100% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Idle…: 100% Oct 12 06:50:20 ip-172-31-29-215 fwupdmgr[3986390]: Successfully downloaded new metadata: 0 local devices supported Oct 12 06:50:20 ip-172-31-29-215 systemd[1]: fwupd-refresh.service: Succeeded. Oct 12 06:50:20 ip-172-31-29-215 systemd[1]: Finished Refresh fwupd metadata and update motd. Oct 12 07:00:01 ip-172-31-29-215 CRON[3986456]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 07:01:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 07:01:17.8159 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 07:01:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 07:01:17.8697 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 07:01:17 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: d6add7c7-5833-4f23-92b0-f702595b874f Oct 12 07:09:01 ip-172-31-29-215 CRON[3986483]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 12 07:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 12 07:09:02 ip-172-31-29-215 sessionclean[3986496]: Cannot load Xdebug - it was already loaded Oct 12 07:09:02 ip-172-31-29-215 sessionclean[3986496]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 12 07:09:02 ip-172-31-29-215 sessionclean[3986496]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 12 07:09:02 ip-172-31-29-215 sessionclean[3986496]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 12 07:09:02 ip-172-31-29-215 sessionclean[3986496]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 12 07:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 12 07:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 12 07:17:01 ip-172-31-29-215 CRON[3986540]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 12 07:20:01 ip-172-31-29-215 CRON[3986546]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 12 07:29:54 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 07:29:54.9716 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 12 07:29:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-12 07:29:55.0117 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 12 07:29:55 ip-172-31] "GET /.well-known/security.txt HTTP/1.1" 404 435 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 185.244.104.2 - - [12/Oct/2025:07:18:26 -0600] "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 136.143.177.62 - - [12/Oct/2025:07:25:59 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 136.143.176.60 - - [12/Oct/2025:07:32:38 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 20.221.68.115 - - [12/Oct/2025:07:32:42 -0600] "GET /developmentserver/metadatauploader HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x" 87.120.191.84 - - [12/Oct/2025:07:34:04 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 195.96.138.145 - - [12/Oct/2025:07:36:06 -0600] "GET / HTTP/1.0" 400 624 "-" "-" 195.96.138.145 - - [12/Oct/2025:07:36:07 -0600] "GET /admin/config.php HTTP/1.1" 404 4229 "-" "python-requests/2.26.0" 54.173.20.144 - - [12/Oct/2025:07:37:13 -0600] "GET /invoice/.git/config HTTP/1.1" 404 4145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Safari/537.36" 134.122.101.68 - - [12/Oct/2025:07:47:19 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 134.122.101.68 - - [12/Oct/2025:07:47:19 -0600] "GET /favicon.ico HTTP/1.1" 404 491 "http://3.22.251.217/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 185.244.104.2 - - [12/Oct/2025:07:52:49 -0600] "PROPFIND / HTTP/1.1" 405 4213 "http://3.22.251.217:443/" "-" 176.65.141.86 - - [12/Oct/2025:08:00:04 -0600] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 454 "-" "-" 135.222.40.118 - - [12/Oct/2025:08:08:30 -0600] "GET /actuator/health HTTP/1.1" 404 3540 "-" "Mozilla/5.0 zgrab/0.x" 135.237.127.54 - - [12/Oct/2025:08:09:11 -0600] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 3540 "-" "Mozilla/5.0 zgrab/0.x" 91.227.62.213 - - [12/Oct/2025:08:11:54 -0600] "GET / HTTP/1.1" 200 11173 "-" "Mozilla/5.0" 213.209.157.162 - - [12/Oct/2025:08:15:14 -0600] "GET /.git/config HTTP/1.1" 404 4145 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 16.170.219.143 - - [12/Oct/2025:08:16:06 -0600] "\x16\x03\x01\x02" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:08 -0600] "\x16\x03\x03\x01\xa5\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:08 -0600] "\x16\x03\x03\x01\xa5\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:08 -0600] "\x16\x03\x03\x01V\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:08 -0600] "\x16\x03\x03\x01H\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:09 -0600] "\x16\x03\x03\x01\x99\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:09 -0600] "\x16\x03\x02\x01\x9a\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:09 -0600] "\x16\x03\x01\x01\xa7\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:09 -0600] "\x16\x03\x01\x01\xa7\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:10 -0600] "\x16\x03\x01\x01\x9d\x01" 400 488 "-" "-" 16.170.219.143 - - [12/Oct/2025:08:16:10 -0600] "\x16\x03\x01\x01\xb4\x01" 400 488 "-" "-" 87.121.84.17 - - [12/Oct/2025:08:21:13 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 136.143.176.64 - - [12/Oct/2025:08:26:04 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 192.178.6.33 - - [12/Oct/2025:08:41:44 -0600] "GET /7712035060 HTTP/1.1" 404 4213 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.207 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 93.158.90.72 - - [12/Oct/2025:0ived disconnect from 179.32.212.123 port 38208:11: Bye Bye [preauth] Oct 12 09:23:55 ip-172-31-29-215 sshd[3986997]: Disconnected from authenticating user root 179.32.212.123 port 38208 [preauth] Oct 12 09:25:33 ip-172-31-29-215 sshd[3987000]: Invalid user original from 179.32.212.123 port 46690 Oct 12 09:25:33 ip-172-31-29-215 sshd[3987000]: Received disconnect from 179.32.212.123 port 46690:11: Bye Bye [preauth] Oct 12 09:25:33 ip-172-31-29-215 sshd[3987000]: Disconnected from invalid user original 179.32.212.123 port 46690 [preauth] Oct 12 09:39:01 ip-172-31-29-215 CRON[3987011]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 09:39:01 ip-172-31-29-215 CRON[3987011]: pam_unix(cron:session): session closed for user root Oct 12 09:40:01 ip-172-31-29-215 CRON[3987067]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 09:40:01 ip-172-31-29-215 CRON[3987067]: pam_unix(cron:session): session closed for user smmsp Oct 12 10:00:01 ip-172-31-29-215 CRON[3987098]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 10:00:01 ip-172-31-29-215 CRON[3987098]: pam_unix(cron:session): session closed for user smmsp Oct 12 10:09:01 ip-172-31-29-215 CRON[3987124]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 10:09:01 ip-172-31-29-215 CRON[3987124]: pam_unix(cron:session): session closed for user root Oct 12 10:17:01 ip-172-31-29-215 CRON[3987181]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 10:17:01 ip-172-31-29-215 CRON[3987181]: pam_unix(cron:session): session closed for user root Oct 12 10:20:01 ip-172-31-29-215 CRON[3987188]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 10:20:01 ip-172-31-29-215 CRON[3987188]: pam_unix(cron:session): session closed for user smmsp Oct 12 10:27:48 ip-172-31-29-215 sshd[3987211]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Oct 12 10:39:01 ip-172-31-29-215 CRON[3987221]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 10:39:01 ip-172-31-29-215 CRON[3987221]: pam_unix(cron:session): session closed for user root Oct 12 10:40:01 ip-172-31-29-215 CRON[3987278]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 10:40:01 ip-172-31-29-215 CRON[3987278]: pam_unix(cron:session): session closed for user smmsp Oct 12 11:00:01 ip-172-31-29-215 CRON[3987313]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 11:00:01 ip-172-31-29-215 CRON[3987313]: pam_unix(cron:session): session closed for user smmsp Oct 12 11:09:01 ip-172-31-29-215 CRON[3987350]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 11:09:01 ip-172-31-29-215 CRON[3987350]: pam_unix(cron:session): session closed for user root Oct 12 11:17:01 ip-172-31-29-215 CRON[3987408]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 11:17:01 ip-172-31-29-215 CRON[3987408]: pam_unix(cron:session): session closed for user root Oct 12 11:18:15 ip-172-31-29-215 sshd[3987412]: Connection closed by 44.203.161.184 port 16060 [preauth] Oct 12 11:20:01 ip-172-31-29-215 CRON[3987415]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 11:20:01 ip-172-31-29-215 CRON[3987415]: pam_unix(cron:session): session closed for user smmsp Oct 12 11:39:01 ip-172-31-29-215 CRON[3987449]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 11:39:01 ip-172-31-29-215 CRON[3987449]: pam_unix(cron:session): session closed for user root Oct 12 11:40:01 ip-172-31-29-215 CRON[3987506]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 11:40:01 ip-172-31-29-215 CRON[3987506]: pam_unix(cron:session): session closed for user smmsp Oct 12 12:00:01 ip-172-31-29-215 CRON[3987540]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 12 12:00:01 ip-172-31-29-215 CRON[3987541]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Oct 12 12:00:01 ip-172-31-29-215 CRON[3987540]: pam_unix(cron:session): session closed , like Gecko) Version/4.0 Chrome/89.0.4389.116 UCBrowser/13.4.0.1306 Mobile Safari/537.36" 172.236.240.97 - - [12/Oct/2025:10:12:54 -0600] "HEAD / HTTP/1.1" 200 255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.236.240.97 - - [12/Oct/2025:10:12:54 -0600] "HEAD /content/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" 172.236.240.97 - - [12/Oct/2025:10:12:54 -0600] "HEAD /backup/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6280.88 Safari/537.36" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /website/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /cms/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /v2/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /us/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /de/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /new/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /portal/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edg/125.0.2535.51" 172.236.240.97 - - [12/Oct/2025:10:12:55 -0600] "HEAD /shop/ HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 43.130.16.212 - - [12/Oct/2025:10:15:27 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 57.141.0.13 - - [12/Oct/2025:10:18:20 -0600] "GET / HTTP/1.1" 200 15024 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 57.141.0.39 - - [12/Oct/2025:10:18:27 -0600] "GET /index.html HTTP/1.1" 200 15024 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 57.129.139.60 - - [12/Oct/2025:10:19:57 -0600] "GET / HTTP/1.1" 200 7191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 141.94.78.40 - - [12/Oct/2025:10:19:57 -0600] "GET /icons/ubuntu-logo.png HTTP/1.1" 200 7335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 87.120.191.84 - - [12/Oct/2025:10:22:31 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 136.143.176.60 - - [12/Oct/2025:10:26:17 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 159.223.102.177 - - [12/Oct/2025:10:27:48 -0600] "GET / HTTP/1.1" 200 11192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 152.42.243.98 - - [12/Oct/2025:10:27:49 -0600] "GET / HTTP/1.1" 200 14272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 136.143.176.64 - - [12/Oct/2025:10:32:45 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 91.224.92.17 - - [12/Oct/2025:10:35:07 -0600] "GET / HTTP/1.1" 200 11173 "-" "-" 80.96.70.79 - - [12/Oct/202 * Introducing Expanded Security Maintenance for Applications. Receive updates to over 25,000 software packages with your Ubuntu Pro subscription. Free for personal use. https://ubuntu.com/aws/pro