nt.amazon-ssm-agent[3122439]: 2025-12-14 02:04:25.7926 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 02:04:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 02:04:25.8328 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 02:04:25 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 0286de6a-a6eb-4ae6-b4cb-9c181be6e524
Dec 14 02:09:01 ip-172-31-29-215 CRON[464346]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 02:09:04 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 02:09:04 ip-172-31-29-215 sessionclean[464359]: Cannot load Xdebug - it was already loaded
Dec 14 02:09:04 ip-172-31-29-215 sessionclean[464359]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 02:09:04 ip-172-31-29-215 sessionclean[464359]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 02:09:04 ip-172-31-29-215 sessionclean[464359]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 02:09:04 ip-172-31-29-215 sessionclean[464359]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 02:09:04 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 02:09:04 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 02:17:01 ip-172-31-29-215 CRON[464403]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Dec 14 02:20:01 ip-172-31-29-215 CRON[464410]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 02:29:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 02:29:44.9211 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 02:29:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 02:29:44.9616 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 02:29:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 5d950d12-84bf-4d8f-84d4-c8aae894e082
Dec 14 02:39:01 ip-172-31-29-215 CRON[464461]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 02:39:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 02:39:12 ip-172-31-29-215 sessionclean[464474]: Cannot load Xdebug - it was already loaded
Dec 14 02:39:12 ip-172-31-29-215 sessionclean[464474]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 02:39:12 ip-172-31-29-215 sessionclean[464474]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 02:39:12 ip-172-31-29-215 sessionclean[464474]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 02:39:12 ip-172-31-29-215 sessionclean[464474]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 02:39:12 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 02:39:12 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 02:40:01 ip-172-31-29-215 CRON[464517]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 02:59:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 02:59:00.9639 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 02:59:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 02:59:00.9994 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 02:59:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 4d2b6f1d-1022-4aa0-8ab9-fb66e41388cb
Dec 14 03:00:01 ip-172-31-29-215 CRON[464547]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 03:09:01 ip-172-31-29-215 CRON[464571]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 03:09:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 03:09:12 ip-172-31-29-215 sessionclean[464584]: Cannot load Xdebug - it was already loaded
Dec 14 03:09:12 ip-172-31-29-215 sessionclean[464584]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 03:09:12 ip-172-31-29-215 sessionclean[464584]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 03:09:12 ip-172-31-29-215 sessionclean[464584]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 03:09:12 ip-172-31-29-215 sessionclean[464584]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 03:09:12 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 03:09:12 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 03:10:01 ip-172-31-29-215 CRON[464627]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)
Dec 14 03:10:33 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems...
Dec 14 03:10:33 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded.
Dec 14 03:10:33 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems.
Dec 14 03:17:01 ip-172-31-29-215 CRON[464631]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Dec 14 03:20:01 ip-172-31-29-215 CRON[464637]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 03:27:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 03:27:00.0828 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 03:27:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 03:27:00.1273 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestMr must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1437
[Sun Dec 14 05:57:28.979331 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP Stack trace:
[Sun Dec 14 05:57:28.979338 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 05:58:25.634345 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP Notice:  Undefined property: stdClass::$data in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 338
[Sun Dec 14 05:58:25.634747 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP Stack trace:
[Sun Dec 14 05:58:25.634758 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 05:58:27.468408 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1437
[Sun Dec 14 05:58:27.468439 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP Stack trace:
[Sun Dec 14 05:58:27.468445 2025] [php7:notice] [pid 462834] [client 136.143.177.44:50024] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 05:59:49.281758 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP Notice:  Undefined property: stdClass::$data in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 338
[Sun Dec 14 05:59:49.281812 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP Stack trace:
[Sun Dec 14 05:59:49.281819 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 05:59:49.912275 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1437
[Sun Dec 14 05:59:49.912302 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP Stack trace:
[Sun Dec 14 05:59:49.912308 2025] [php7:notice] [pid 463143] [client 136.143.177.44:57060] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 06:00:59.273932 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP Notice:  Undefined property: stdClass::$data in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 338
[Sun Dec 14 06:00:59.273977 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP Stack trace:
[Sun Dec 14 06:00:59.273983 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 06:01:00.822471 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1437
[Sun Dec 14 06:01:00.822500 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP Stack trace:
[Sun Dec 14 06:01:00.822506 2025] [php7:notice] [pid 463142] [client 136.143.177.44:60838] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 06:02:00.716680 2025] [php7:notice] [pid 462911] [client 136.143.177.44:46084] PHP Notice:  Undefined property: stdClass::$data in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 338
[Sun Dec 14 06:02:00.716728 2025] [php7:notice] [pid 462911] [client 136.143.177.44:46084] PHP Stack trace:
[Sun Dec 14 06:02:00.716735 2025] [php7:notice] [pid 462911] [client 136.143.177.44:46084] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 06:02:01.661128 2025] [php7:notice] [pid 462911] [client 136.143.177.44:46084] PHP Warning:  count(): Parameter must be an array or an objavicon.ico HTTP/1.1" 404 4219 "https://aptuslegal.app/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
66.132.153.113 - - [14/Dec/2025:07:58:46 -0600] "GET /login HTTP/1.1" 404 4125 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
108.165.197.56 - - [14/Dec/2025:08:00:04 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
108.165.197.56 - - [14/Dec/2025:08:00:04 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
170.106.180.153 - - [14/Dec/2025:08:02:32 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
194.156.79.121 - - [14/Dec/2025:08:06:05 -0600] "GET /.env HTTP/1.1" 404 493 "-" "python-requests/2.32.5"
66.249.68.37 - - [14/Dec/2025:08:10:04 -0600] "GET /robots.txt HTTP/1.1" 404 493 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
162.216.150.61 - - [14/Dec/2025:08:12:35 -0600] "GET /.well-known/security.txt HTTP/1.1" 404 435 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
141.98.11.140 - - [14/Dec/2025:08:13:32 -0600] "GET / HTTP/1.1" 200 11173 "-" "-"
104.28.126.101 - - [14/Dec/2025:08:18:55 -0600] "GET /.well-known/passkey-endpoints HTTP/1.1" 404 4266 "-" "com.apple.AuthenticationServicesCore.AuthenticationServicesAgent/8623.1.14.10.9 CFNetwork/3860.300.31 Darwin/25.2.0"
91.199.82.162 - - [14/Dec/2025:08:18:56 -0600] "GET http://ip-api.com/json/ HTTP/1.1" 404 433 "-" "Go-http-client/1.1"
45.135.194.23 - - [14/Dec/2025:08:19:24 -0600] "GET / HTTP/1.1" 200 11173 "-" "-"
204.76.203.18 - - [14/Dec/2025:08:32:11 -0600] "GET /bins/ HTTP/1.1" 404 435 "-" "-"
136.143.176.64 - - [14/Dec/2025:08:36:45 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37168000 "-" "Zoho_Analytics"
74.7.228.9 - - [14/Dec/2025:08:38:59 -0600] "GET /robots.txt HTTP/1.1" 404 4200 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
193.142.147.209 - - [14/Dec/2025:08:40:42 -0600] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 454 "-" "-"
217.198.177.236 - - [14/Dec/2025:08:51:15 -0600] "GET /.env HTTP/1.1" 404 4228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
217.198.177.236 - - [14/Dec/2025:08:51:16 -0600] "POST / HTTP/1.1" 200 7257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
136.143.177.62 - - [14/Dec/2025:08:56:39 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37168000 "-" "Zoho_Analytics"
94.26.88.18 - - [14/Dec/2025:09:00:59 -0600] "GET /.git/config HTTP/1.1" 404 4144 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
192.238.247.144 - - [14/Dec/2025:09:04:04 -0600] "GET / HTTP/1.1" 200 11229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36"
192.238.247.144 - - [14/Dec/2025:09:04:05 -0600] "GET / HTTP/1.1" 200 11228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36"
192.238.247.144 - - [14/Dec/2025:09:04:05 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36"
192.238.247.144 - - [14/Dec/2025:09:04:05 -0600] "GET /xmlrpc.php?rsd HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36"
192.238.247.144 - - [14/Dec/2025:09:04:06 -0600] "GET / HTTP/1.1" 200 142:11: Bye Bye [preauth]
Dec 14 07:58:30 ip-172-31-29-215 sshd[466647]: Disconnected from authenticating user ubuntu 177.10.201.7 port 39442 [preauth]
Dec 14 07:58:39 ip-172-31-29-215 sshd[466649]: error: maximum authentication attempts exceeded for root from 171.241.38.246 port 39803 ssh2 [preauth]
Dec 14 07:58:39 ip-172-31-29-215 sshd[466649]: Disconnecting authenticating user root 171.241.38.246 port 39803: Too many authentication failures [preauth]
Dec 14 07:58:40 ip-172-31-29-215 sshd[466651]: Invalid user developer from 45.78.218.148 port 57806
Dec 14 07:58:40 ip-172-31-29-215 sshd[466651]: Received disconnect from 45.78.218.148 port 57806:11: Bye Bye [preauth]
Dec 14 07:58:40 ip-172-31-29-215 sshd[466651]: Disconnected from invalid user developer 45.78.218.148 port 57806 [preauth]
Dec 14 07:58:47 ip-172-31-29-215 sshd[466653]: error: maximum authentication attempts exceeded for root from 171.241.38.246 port 39931 ssh2 [preauth]
Dec 14 07:58:47 ip-172-31-29-215 sshd[466653]: Disconnecting authenticating user root 171.241.38.246 port 39931: Too many authentication failures [preauth]
Dec 14 07:58:55 ip-172-31-29-215 sshd[466656]: Received disconnect from 171.241.38.246 port 40053:11: disconnected by user [preauth]
Dec 14 07:58:55 ip-172-31-29-215 sshd[466656]: Disconnected from authenticating user root 171.241.38.246 port 40053 [preauth]
Dec 14 07:58:56 ip-172-31-29-215 sshd[466658]: Received disconnect from 68.183.224.170 port 42726:11: Bye Bye [preauth]
Dec 14 07:58:56 ip-172-31-29-215 sshd[466658]: Disconnected from authenticating user ubuntu 68.183.224.170 port 42726 [preauth]
Dec 14 07:59:02 ip-172-31-29-215 sshd[466660]: Invalid user admin from 171.241.38.246 port 40176
Dec 14 07:59:04 ip-172-31-29-215 sshd[466660]: error: maximum authentication attempts exceeded for invalid user admin from 171.241.38.246 port 40176 ssh2 [preauth]
Dec 14 07:59:04 ip-172-31-29-215 sshd[466660]: Disconnecting invalid user admin 171.241.38.246 port 40176: Too many authentication failures [preauth]
Dec 14 07:59:12 ip-172-31-29-215 sshd[466664]: Invalid user admin from 171.241.38.246 port 40318
Dec 14 07:59:13 ip-172-31-29-215 sshd[466664]: error: maximum authentication attempts exceeded for invalid user admin from 171.241.38.246 port 40318 ssh2 [preauth]
Dec 14 07:59:13 ip-172-31-29-215 sshd[466664]: Disconnecting invalid user admin 171.241.38.246 port 40318: Too many authentication failures [preauth]
Dec 14 07:59:15 ip-172-31-29-215 sshd[466670]: Invalid user oracle from 177.10.201.7 port 44970
Dec 14 07:59:15 ip-172-31-29-215 sshd[466670]: Received disconnect from 177.10.201.7 port 44970:11: Bye Bye [preauth]
Dec 14 07:59:15 ip-172-31-29-215 sshd[466670]: Disconnected from invalid user oracle 177.10.201.7 port 44970 [preauth]
Dec 14 07:59:15 ip-172-31-29-215 sshd[466666]: Received disconnect from 165.232.178.116 port 34830:11: Bye Bye [preauth]
Dec 14 07:59:15 ip-172-31-29-215 sshd[466666]: Disconnected from authenticating user root 165.232.178.116 port 34830 [preauth]
Dec 14 07:59:20 ip-172-31-29-215 sshd[466662]: Received disconnect from 45.78.194.58 port 47578:11: Bye Bye [preauth]
Dec 14 07:59:20 ip-172-31-29-215 sshd[466662]: Disconnected from 45.78.194.58 port 47578 [preauth]
Dec 14 07:59:21 ip-172-31-29-215 sshd[466668]: Invalid user admin from 171.241.38.246 port 40448
Dec 14 07:59:23 ip-172-31-29-215 sshd[466668]: Received disconnect from 171.241.38.246 port 40448:11: disconnected by user [preauth]
Dec 14 07:59:23 ip-172-31-29-215 sshd[466668]: Disconnected from invalid user admin 171.241.38.246 port 40448 [preauth]
Dec 14 07:59:30 ip-172-31-29-215 sshd[466673]: Invalid user oracle from 171.241.38.246 port 40594
Dec 14 07:59:31 ip-172-31-29-215 sshd[466673]: error: maximum authentication attempts exceeded for invalid user oracle from 171.241.38.246 port 40594 ssh2 [preauth]
Dec 14 07:59:31 ip-172-31-29-215 sshd[466673]: Disconnecting invalid user oracle 171.241.38.246 port 40594: Too many authentication failures [preauth]
Dec 14 07:59:39 ip-172-31-29-215 sshd[466675]: Invalid user oracle from 171.241.38.246 port 40733
De6:09 ip-172-31-29-215 sshd[466890]: Disconnected from authenticating user root 103.153.190.105 port 36697 [preauth]
Dec 14 08:38:16 ip-172-31-29-215 sshd[466895]: Invalid user roots from 103.153.190.105 port 35339
Dec 14 08:38:16 ip-172-31-29-215 sshd[466895]: Received disconnect from 103.153.190.105 port 35339:11: Bye Bye [preauth]
Dec 14 08:38:16 ip-172-31-29-215 sshd[466895]: Disconnected from invalid user roots 103.153.190.105 port 35339 [preauth]
Dec 14 08:39:01 ip-172-31-29-215 CRON[466897]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 14 08:39:01 ip-172-31-29-215 CRON[466897]: pam_unix(cron:session): session closed for user root
Dec 14 08:40:01 ip-172-31-29-215 CRON[466953]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Dec 14 08:40:01 ip-172-31-29-215 CRON[466953]: pam_unix(cron:session): session closed for user smmsp
Dec 14 08:40:20 ip-172-31-29-215 sshd[466975]: Received disconnect from 103.153.190.105 port 58294:11: Bye Bye [preauth]
Dec 14 08:40:20 ip-172-31-29-215 sshd[466975]: Disconnected from authenticating user root 103.153.190.105 port 58294 [preauth]
Dec 14 08:42:27 ip-172-31-29-215 sshd[466977]: Invalid user deploy from 103.153.190.105 port 57389
Dec 14 08:42:27 ip-172-31-29-215 sshd[466977]: Received disconnect from 103.153.190.105 port 57389:11: Bye Bye [preauth]
Dec 14 08:42:27 ip-172-31-29-215 sshd[466977]: Disconnected from invalid user deploy 103.153.190.105 port 57389 [preauth]
Dec 14 08:44:34 ip-172-31-29-215 sshd[466981]: Received disconnect from 103.153.190.105 port 57274:11: Bye Bye [preauth]
Dec 14 08:44:34 ip-172-31-29-215 sshd[466981]: Disconnected from authenticating user root 103.153.190.105 port 57274 [preauth]
Dec 14 08:46:39 ip-172-31-29-215 sshd[466983]: Invalid user oracle from 103.153.190.105 port 55917
Dec 14 08:46:39 ip-172-31-29-215 sshd[466983]: Received disconnect from 103.153.190.105 port 55917:11: Bye Bye [preauth]
Dec 14 08:46:39 ip-172-31-29-215 sshd[466983]: Disconnected from invalid user oracle 103.153.190.105 port 55917 [preauth]
Dec 14 08:48:46 ip-172-31-29-215 sshd[466986]: Received disconnect from 103.153.190.105 port 52332:11: Bye Bye [preauth]
Dec 14 08:48:46 ip-172-31-29-215 sshd[466986]: Disconnected from authenticating user root 103.153.190.105 port 52332 [preauth]
Dec 14 08:50:55 ip-172-31-29-215 sshd[466990]: Received disconnect from 103.153.190.105 port 47483:11: Bye Bye [preauth]
Dec 14 08:50:55 ip-172-31-29-215 sshd[466990]: Disconnected from authenticating user ubuntu 103.153.190.105 port 47483 [preauth]
Dec 14 08:52:56 ip-172-31-29-215 sshd[466992]: Invalid user renato from 103.153.190.105 port 42099
Dec 14 08:52:57 ip-172-31-29-215 sshd[466992]: Received disconnect from 103.153.190.105 port 42099:11: Bye Bye [preauth]
Dec 14 08:52:57 ip-172-31-29-215 sshd[466992]: Disconnected from invalid user renato 103.153.190.105 port 42099 [preauth]
Dec 14 08:54:59 ip-172-31-29-215 sshd[466994]: Invalid user nmr from 103.153.190.105 port 35550
Dec 14 08:54:59 ip-172-31-29-215 sshd[466994]: Received disconnect from 103.153.190.105 port 35550:11: Bye Bye [preauth]
Dec 14 08:54:59 ip-172-31-29-215 sshd[466994]: Disconnected from invalid user nmr 103.153.190.105 port 35550 [preauth]
Dec 14 08:57:07 ip-172-31-29-215 sshd[466997]: Received disconnect from 103.153.190.105 port 55180:11: Bye Bye [preauth]
Dec 14 08:57:07 ip-172-31-29-215 sshd[466997]: Disconnected from authenticating user root 103.153.190.105 port 55180 [preauth]
Dec 14 08:59:15 ip-172-31-29-215 sshd[467002]: Received disconnect from 103.153.190.105 port 55687:11: Bye Bye [preauth]
Dec 14 08:59:15 ip-172-31-29-215 sshd[467002]: Disconnected from authenticating user root 103.153.190.105 port 55687 [preauth]
Dec 14 09:00:00 ip-172-31-29-215 sshd[467005]: Invalid user ylee from 185.193.240.246 port 56272
Dec 14 09:00:00 ip-172-31-29-215 sshd[467005]: Received disconnect from 185.193.240.246 port 56272:11: Bye Bye [preauth]
Dec 14 09:00:00 ip-172-31-29-215 sshd[467005]: Disconnected from invalid user ylee 185.193.240.246 port 56272 [preauth]
Dec 14 09:00:01 ip-172-31-so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 09:39:07 ip-172-31-29-215 sessionclean[467194]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 09:39:07 ip-172-31-29-215 sessionclean[467194]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 09:39:07 ip-172-31-29-215 sessionclean[467194]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 09:39:07 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 09:39:07 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 09:40:01 ip-172-31-29-215 CRON[467237]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 09:48:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 09:48:08.1304 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 09:48:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 09:48:08.1667 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 09:48:08 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: d8fb0740-158d-4ff1-b64e-d35c7dcdce93
Dec 14 10:00:01 ip-172-31-29-215 CRON[467502]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 10:09:01 ip-172-31-29-215 CRON[467580]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 10:09:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 10:09:12 ip-172-31-29-215 sessionclean[467594]: Cannot load Xdebug - it was already loaded
Dec 14 10:09:12 ip-172-31-29-215 sessionclean[467594]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 10:09:12 ip-172-31-29-215 sessionclean[467594]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 10:09:12 ip-172-31-29-215 sessionclean[467594]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 10:09:12 ip-172-31-29-215 sessionclean[467594]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 10:09:12 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 10:09:12 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 10:13:53 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 10:13:53.1682 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 10:13:53 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 10:13:53.2023 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 10:13:53 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: ffff61aa-d446-425c-9379-33792e317f91
Dec 14 10:17:01 ip-dminfuns.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:18.234038 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/ahax.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:18.389924 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/akcc.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 11:01:18.545816 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/alfa.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 11:01:19.012169 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/av.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:19.167853 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/bless.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:19.323131 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/bolt.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:19.478631 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/buy.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sun Dec 14 11:01:19.634541 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/atomlib.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Dec 14 11:01:20.104177 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/chosen.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Dec 14 11:01:20.259438 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/classwithtostring.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:20.415188 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/edit.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:20.570909 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/elp.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 11:01:20.726322 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/simple.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:20.881659 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/file.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Dec 14 11:01:21.042570 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/item.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:21.353367 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/gg.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Dec 14 11:01:21.508871 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/goods.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 11:01:21.974682 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:22.130029 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/ioxi-o.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 11:01:22.285909 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/k.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 11:01:22.441204 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/mah.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 11:01:22.752810 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/manager.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 11:01:23.063845 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/new.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 11:01:23.219492 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/dropdown.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 11:01:23.382576 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/cong.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 11:01:23.850151 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/radio.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sun Dec 14 11:01:24.006163 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/themes.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Dec 14 11:01:26.492968 2025] [php7:error] [pid 462911] [client 4.241.241.191:64747] script '/var/www/html/wp-blog.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 14:45:01.155803 2025] [php7:error] [pid 462835] [client 138.68.169.151:40552] script '/var/www/html/upl.php' not found or unable to stat
[Sun Dec 14 14:45:01.906124 2025] [php7:error] [pid 463142] [client 138.68.169.151:48800] script '/var/www/html/1.php' not found or unable to stat
[Sun Dec 14 14:45:02.274547 2025] [php7:error] [pid 462834] [client 138.68.169.151:48824] script '/var/www/html/password.php' not found or unable to stat
t was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebu
 * Introducing Expanded Security Maintenance for Applications.
   Receive updates to over 25,000 software packages with your
   Ubuntu Pro subscription. Free for personal use.

     https://ubuntu.com/aws/pro