on line 0 Oct 17 02:09:02 ip-172-31-29-215 sessionclean[4034238]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 17 02:09:02 ip-172-31-29-215 sessionclean[4034238]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 17 02:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 17 02:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 17 02:17:01 ip-172-31-29-215 CRON[4034305]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 17 02:20:01 ip-172-31-29-215 CRON[4034315]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 02:20:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 02:20:15.1089 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 02:20:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 02:20:15.1463 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 02:20:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 38ce9422-7854-4741-9900-39dafd841e29 Oct 17 02:39:01 ip-172-31-29-215 CRON[4034376]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 17 02:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 17 02:39:02 ip-172-31-29-215 sessionclean[4034389]: Cannot load Xdebug - it was already loaded Oct 17 02:39:02 ip-172-31-29-215 sessionclean[4034389]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 17 02:39:02 ip-172-31-29-215 sessionclean[4034389]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 17 02:39:02 ip-172-31-29-215 sessionclean[4034389]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 17 02:39:02 ip-172-31-29-215 sessionclean[4034389]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 17 02:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 17 02:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 17 02:40:01 ip-172-31-29-215 CRON[4034431]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 02:49:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 02:49:15.1486 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 02:49:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 02:49:15.1869 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 02:49:15 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: d7bec160-e9aa-4c7b-8745-2633562b9848 Oct 17 03:00:01 ip-172-31-29-215 CRON[4034481]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 03:09:00 ip-172-31-29-215 systemd[1]: StartinARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 03:41:30 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 03:41:30.3835 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 03:41:30 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 1da1f4ff-a0f8-41cd-8621-e95aca249843 Oct 17 04:00:01 ip-172-31-29-215 CRON[4034756]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 04:09:01 ip-172-31-29-215 CRON[4034780]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Oct 17 04:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Oct 17 04:09:02 ip-172-31-29-215 sessionclean[4034793]: Cannot load Xdebug - it was already loaded Oct 17 04:09:02 ip-172-31-29-215 sessionclean[4034793]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Oct 17 04:09:02 ip-172-31-29-215 sessionclean[4034793]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Oct 17 04:09:02 ip-172-31-29-215 sessionclean[4034793]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Oct 17 04:09:02 ip-172-31-29-215 sessionclean[4034793]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Oct 17 04:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Oct 17 04:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Oct 17 04:11:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 04:11:27.4991 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 04:11:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 04:11:27.5410 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 04:11:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 1a7d7b2e-026c-4157-bad1-f4f85908d866 Oct 17 04:17:01 ip-172-31-29-215 CRON[4034845]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Oct 17 04:20:01 ip-172-31-29-215 CRON[4034858]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Oct 17 04:37:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 04:37:14.5425 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Oct 17 04:37:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-10-17 04:37:14.5868 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Oct 17 04:37:14 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 01192abc-e19d-409t/2025:03:53:31 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.32.131.245 - - [17/Oct/2025:03:53:53 -0600] "GET / HTTP/1.1" 200 14885 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.131.245 - - [17/Oct/2025:03:53:58 -0600] "GET /favicon.ico HTTP/1.1" 404 4126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 152.32.131.245 - - [17/Oct/2025:03:53:59 -0600] "GET /robots.txt HTTP/1.1" 404 4126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 152.32.131.245 - - [17/Oct/2025:03:54:00 -0600] "GET /sitemap.xml HTTP/1.1" 404 4126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 152.32.131.245 - - [17/Oct/2025:03:54:04 -0600] "GET /config.json HTTP/1.1" 404 4126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 103.203.59.1 - - [17/Oct/2025:03:54:55 -0600] "GET / HTTP/1.1" 200 14904 "-" "HTTP Banner Detection (https://security.ipip.net)" 172.207.154.183 - - [17/Oct/2025:03:56:40 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /shoha.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /error.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /031.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /ilex.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /flex.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:41 -0600] "GET /mlex.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:42 -0600] "GET /wlex.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:42 -0600] "GET /wp-aaa.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:42 -0600] "GET /vast.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:42 -0600] "GET /tor.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:42 -0600] "GET /klex.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:43 -0600] "GET /sec.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:43 -0600] "GET /about3.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:43 -0600] "GET /222.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /444.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /file9.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /filesss.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /file88.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /gifclass4.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /class-wp.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:44 -0600] "GET /wpls.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:45 -0600] "GET /555.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:45 -0600] "GET /333.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:45 -0600] "GET /gelap.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:45 -0600] "GET /class19.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:55 -0600] "GET /racs3.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:55 -0600] "GET /2clas.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:55 -0600] "GET /bless5.php HTTP/1.1" 404 442 "-" "-" 172.207.154.183 - - [17/Oct/2025:03:56:55 -0600]00] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.149.173.195 - - [17/Oct/2025:04:16:06 -0600] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.149.173.195 - - [17/Oct/2025:04:16:06 -0600] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.121.84.17 - - [17/Oct/2025:04:16:57 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 199.45.155.91 - - [17/Oct/2025:04:22:23 -0600] "GET / HTTP/1.1" 200 7155 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.155.91 - - [17/Oct/2025:04:22:25 -0600] "GET /favicon.ico HTTP/1.1" 404 4145 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.155.91 - - [17/Oct/2025:04:22:43 -0600] "GET /favicon.ico HTTP/1.1" 404 4145 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 199.45.155.91 - - [17/Oct/2025:04:22:45 -0600] "GET /wiki HTTP/1.1" 404 4126 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 198.23.128.233 - - [17/Oct/2025:04:28:52 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 198.23.128.233 - - [17/Oct/2025:04:28:53 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 64.31.27.168 - - [17/Oct/2025:04:34:52 -0600] "GET /.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 64.31.27.168 - - [17/Oct/2025:04:34:52 -0600] "POST / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 140.235.0.125 - - [17/Oct/2025:04:34:58 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 136.143.176.64 - - [17/Oct/2025:04:37:12 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 151.115.88.124 - - [17/Oct/2025:04:48:33 -0600] "GET /robots.txt HTTP/1.0" 404 456 "-" "xfa1" 104.28.94.108 - - [17/Oct/2025:04:50:07 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111146.png HTTP/1.1" 200 336131 "-" "Mozilla/5.0" 104.28.94.108 - - [17/Oct/2025:04:50:07 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111148.png HTTP/1.1" 200 509208 "-" "Mozilla/5.0" 20.65.193.203 - - [17/Oct/2025:04:52:23 -0600] "GET /owa/auth/logon.aspx HTTP/1.1" 404 3540 "-" "Mozilla/5.0 zgrab/0.x" 136.143.176.60 - - [17/Oct/2025:04:59:22 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737931 "-" "Zoho_Analytics" 185.39.19.43 - - [17/Oct/2025:04:59:45 -0600] "GET / HTTP/1.0" 200 11192 "http://aptuslegal.app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 205.169.39.176 - - [17/Oct/2025:05:00:06 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112473.png HTTP/1.1" 200 202180 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 74.125.209.37 - - [17/Oct/2025:05:00:57 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-128574.png HTTP/1.1" 200 174943 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 104.28.50.17 - - [17/Oct/2025:05:02:04 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-111218.png HTTP/1.1" 200 50772 "-" "Mozilla/5.0" 104.28.50.17 - - [17/Oct/2025:05:02:06 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-112025-10-17T10:21:22.477303Z 307287 [Warning] [MY-010055] [Server] IP address '66.132.153.127' could not be resolved: Name or service not known 2025-10-17T11:41:40.586652Z 307320 [Warning] [MY-010055] [Server] IP address '165.22.47.52' could not be resolved: Name or service not known 2025-10-17T11:48:35.207421Z 307325 [Warning] [MY-010056] [Server] Host name 'scan-54.security.ipip.net' could not be resolved: Name or service not known 2025-10-17T16:22:42.389866Z 307496 [Warning] [MY-010056] [Server] Host name 'unused-space.coop.net' could not be resolved: Name or service not known