Sun Jul 20 00:33:24 2025 [pid 2905240] CONNECT: Client "::ffff:205.210.31.109" Sun Jul 20 00:36:33 2025 [pid 2905244] CONNECT: Client "::ffff:77.221.151.232" Sun Jul 20 00:36:35 2025 [pid 2905243] [anonymous] FAIL LOGIN: Client "::ffff:77.221.151.232" Sun Jul 20 04:02:20 2025 [pid 2906178] CONNECT: Client "::ffff:20.65.193.206" Sun Jul 20 04:02:21 2025 [pid 2906180] CONNECT: Client "::ffff:20.65.193.206" Sun Jul 20 04:31:38 2025 [pid 2906304] CONNECT: Client "::ffff:167.94.138.51" Sun Jul 20 07:11:07 2025 [pid 2907396] CONNECT: Client "::ffff:103.203.59.5" Sun Jul 20 07:29:34 2025 [pid 2907432] CONNECT: Client "::ffff:18.219.11.104" Sun Jul 20 09:11:31 2025 [pid 2907929] CONNECT: Client "::ffff:65.49.20.66" Sun Jul 20 10:02:20 2025 [pid 2908108] CONNECT: Client "::ffff:198.235.24.225" Sun Jul 20 12:28:50 2025 [pid 2908799] CONNECT: Client "::ffff:52.188.227.37" Sun Jul 20 12:28:50 2025 [pid 2908801] CONNECT: Client "::ffff:52.188.227.37" Sun Jul 20 14:31:08 2025 [pid 2910110] CONNECT: Client "::ffff:91.196.152.187" Sun Jul 20 14:31:08 2025 [pid 2910113] CONNECT: Client "::ffff:91.196.152.184" Sun Jul 20 15:29:16 2025 [pid 2910384] CONNECT: Client "::ffff:198.235.24.14" Sun Jul 20 15:34:56 2025 [pid 2910388] CONNECT: Client "::ffff:8.211.51.118" Sun Jul 20 18:01:58 2025 [pid 2911069] CONNECT: Client "::ffff:66.240.236.109" Sun Jul 20 19:20:48 2025 [pid 2911468] CONNECT: Client "::ffff:20.168.122.36" Sun Jul 20 22:14:32 2025 [pid 2912234] CONNECT: Client "::ffff:34.66.88.210" Sun Jul 20 22:14:33 2025 [pid 2912236] CONNECT: Client "::ffff:34.66.88.210" Mon Jul 21 05:32:57 2025 [pid 2915110] CONNECT: Client "::ffff:167.94.138.172" Mon Jul 21 05:38:39 2025 [pid 2915117] CONNECT: Client "::ffff:18.190.152.179" Mon Jul 21 06:56:30 2025 [pid 2915675] CONNECT: Client "::ffff:35.216.142.214" Mon Jul 21 06:56:31 2025 [pid 2915678] CONNECT: Client "::ffff:35.216.142.214" Mon Jul 21 06:56:38 2025 [pid 2915681] CONNECT: Client "::ffff:35.216.142.214" Mon Jul 21 06:56:38 2025 [pid 2915683] CONNECT: Client "::ffff:35.216.142.214" Mon Jul 21 06:56:40 2025 [pid 2915682] [anonymous] FAIL LOGIN: Client "::ffff:35.216.142.214" Mon Jul 21 08:26:13 2025 [pid 2916167] CONNECT: Client "::ffff:34.79.200.193" Mon Jul 21 08:26:13 2025 [pid 2916170] CONNECT: Client "::ffff:34.79.200.193" Mon Jul 21 08:26:16 2025 [pid 2916169] [anonymous] FAIL LOGIN: Client "::ffff:34.79.200.193" Mon Jul 21 12:59:04 2025 [pid 2920347] CONNECT: Client "::ffff:103.203.59.5" Mon Jul 21 15:06:12 2025 [pid 2922228] CONNECT: Client "::ffff:20.163.60.170" Mon Jul 21 15:06:12 2025 [pid 2922230] CONNECT: Client "::ffff:20.163.60.170" Mon Jul 21 16:22:30 2025 [pid 2922743] CONNECT: Client "::ffff:205.210.31.154" Mon Jul 21 16:34:21 2025 [pid 2922762] CONNECT: Client "::ffff:201.149.27.131" Mon Jul 21 16:34:27 2025 [pid 2922761] [usuarioftp] OK LOGIN: Client "::ffff:201.149.27.131" Mon Jul 21 16:34:48 2025 [pid 2922766] CONNECT: Client "::ffff:201.149.27.131" Mon Jul 21 16:34:48 2025 [pid 2922765] [usuarioftp] OK LOGIN: Client "::ffff:201.149.27.131" Mon Jul 21 16:48:43 2025 [pid 2922893] CONNECT: Client "::ffff:187.189.150.223" Mon Jul 21 16:48:44 2025 [pid 2922892] [usuarioftp] OK LOGIN: Client "::ffff:187.189.150.223" Mon Jul 21 16:50:08 2025 [pid 2922902] CONNECT: Client "::ffff:187.189.150.223" Mon Jul 21 16:50:14 2025 [pid 2922901] [usuarioftp] OK LOGIN: Client "::ffff:187.189.150.223" Mon Jul 21 16:54:41 2025 [pid 2922922] CONNECT: Client "::ffff:201.149.27.131" Mon Jul 21 16:54:44 2025 [pid 2922921] [usuarioftp] OK LOGIN: Client "::ffff:201.149.27.131" Mon Jul 21 16:54:56 2025 [pid 2922926] CONNECT: Client "::ffff:201.149.27.131" Mon Jul 21 16:54:56 2025 [pid 2922925] [usuarioftp] OK LOGIN: Client "::ffff:201.149.27.131" Mon Jul 21 16:55:17 2025 [pid 2922931] CONNECT: Client "::ffff:201.149.27.131" Mon Jul 21 16:55:17 2025 [pid 2922930] [usuarioftp] OK LOGIN: Client "::ffff:201.149.27.131" Mon Jul 21 16:58:10 2025 [pid 2922938] CONNECT: Client "::ffff:187.189.150.223" Mon Jul 21 16:58:10 2025 [pid 2922937] [usuarioftp] OK LOGIN: Client "::ffff:187.189.150.223" Mon Jul 2lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 20 02:09:20 ip-172-31-29-215 sessionclean[2905672]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 20 02:09:20 ip-172-31-29-215 sessionclean[2905672]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 20 02:09:20 ip-172-31-29-215 sessionclean[2905672]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 20 02:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 20 02:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 20 02:13:52 ip-172-31-29-215 snapd[2768240]: storehelpers.go:916: cannot refresh: snap has no updates available: "amazon-ssm-agent", "core18", "core20", "core22", "lxd", "snapd" Jul 20 02:17:02 ip-172-31-29-215 CRON[2905740]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 20 02:20:02 ip-172-31-29-215 CRON[2905746]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 02:29:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 02:29:44.6292 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 02:29:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 02:29:44.6708 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 20 02:29:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: db0c12b4-96b4-4100-8d1b-e73c3646b832 Jul 20 02:39:01 ip-172-31-29-215 CRON[2905777]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 20 02:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 20 02:39:19 ip-172-31-29-215 sessionclean[2905790]: Cannot load Xdebug - it was already loaded Jul 20 02:39:19 ip-172-31-29-215 sessionclean[2905790]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 20 02:39:20 ip-172-31-29-215 sessionclean[2905790]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 20 02:39:20 ip-172-31-29-215 sessionclean[2905790]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 20 02:39:20 ip-172-31-29-215 sessionclean[2905790]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 20 02:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 20 02:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 20 02:40:01 ip-172-31-29-215 CRON[2905857]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 02:52:21 ip-172-31-29-215 systemd[1]: fwupd.service: Succeeded. Jul 20 02:57:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 02:57:00.7239 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 02:57:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 02:57:00.7577 ERROR EC2RoleProvider Failed to connect to Systot Jul 20 02:20:02 ip-172-31-29-215 CRON[2905745]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 02:20:02 ip-172-31-29-215 CRON[2905745]: pam_unix(cron:session): session closed for user smmsp Jul 20 02:39:01 ip-172-31-29-215 CRON[2905776]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 02:39:01 ip-172-31-29-215 CRON[2905776]: pam_unix(cron:session): session closed for user root Jul 20 02:40:01 ip-172-31-29-215 CRON[2905856]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 02:40:01 ip-172-31-29-215 CRON[2905856]: pam_unix(cron:session): session closed for user smmsp Jul 20 03:00:01 ip-172-31-29-215 CRON[2905890]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 03:00:01 ip-172-31-29-215 CRON[2905890]: pam_unix(cron:session): session closed for user smmsp Jul 20 03:09:01 ip-172-31-29-215 CRON[2905917]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 03:09:01 ip-172-31-29-215 CRON[2905917]: pam_unix(cron:session): session closed for user root Jul 20 03:10:01 ip-172-31-29-215 CRON[2905996]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 03:10:01 ip-172-31-29-215 CRON[2905996]: pam_unix(cron:session): session closed for user root Jul 20 03:17:01 ip-172-31-29-215 CRON[2906002]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 03:17:01 ip-172-31-29-215 CRON[2906002]: pam_unix(cron:session): session closed for user root Jul 20 03:20:01 ip-172-31-29-215 CRON[2906008]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 03:20:01 ip-172-31-29-215 CRON[2906008]: pam_unix(cron:session): session closed for user smmsp Jul 20 03:30:01 ip-172-31-29-215 CRON[2906036]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 03:30:01 ip-172-31-29-215 CRON[2906036]: pam_unix(cron:session): session closed for user root Jul 20 03:32:08 ip-172-31-29-215 sshd[2906038]: Connection closed by 199.45.154.133 port 35908 [preauth] Jul 20 03:39:01 ip-172-31-29-215 CRON[2906044]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 03:39:01 ip-172-31-29-215 CRON[2906044]: pam_unix(cron:session): session closed for user root Jul 20 03:40:01 ip-172-31-29-215 CRON[2906124]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 03:40:01 ip-172-31-29-215 CRON[2906124]: pam_unix(cron:session): session closed for user smmsp Jul 20 04:00:01 ip-172-31-29-215 CRON[2906155]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 04:00:01 ip-172-31-29-215 CRON[2906155]: pam_unix(cron:session): session closed for user smmsp Jul 20 04:03:11 ip-172-31-29-215 sshd[2906183]: Connection closed by authenticating user root 45.148.10.196 port 48590 [preauth] Jul 20 04:09:01 ip-172-31-29-215 CRON[2906188]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 04:09:01 ip-172-31-29-215 CRON[2906188]: pam_unix(cron:session): session closed for user root Jul 20 04:17:01 ip-172-31-29-215 CRON[2906270]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 04:17:01 ip-172-31-29-215 CRON[2906270]: pam_unix(cron:session): session closed for user root Jul 20 04:20:01 ip-172-31-29-215 CRON[2906275]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 04:20:01 ip-172-31-29-215 CRON[2906275]: pam_unix(cron:session): session closed for user smmsp Jul 20 04:32:18 ip-172-31-29-215 sshd[2906306]: Connection reset by 147.185.132.15 port 65126 [preauth] Jul 20 04:39:01 ip-172-31-29-215 CRON[2906311]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 20 04:39:01 ip-172-31-29-215 CRON[2906311]: pam_unix(cron:session): session closed for user root Jul 20 04:40:01 ip-172-31-29-215 CRON[2906391]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Jul 20 04:40:01 ip-172-31-29-215 CRON[2906391]: pam_unix(cron:session): session closed for user smmsp Jul 20 04:44:12 ip-172-31-29-215 sshd[2906415]: error: kex_exchange_identification: client sent invalid protocol ident 95.142.120.38:1033] script '/var/www/html/license.php' not found or unable to stat [Sun Jul 20 02:25:18.393983 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/install.php' not found or unable to stat [Sun Jul 20 02:25:18.866506 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wp-header.php' not found or unable to stat [Sun Jul 20 02:25:19.345912 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/login.php' not found or unable to stat [Sun Jul 20 02:25:20.609846 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/db.php' not found or unable to stat [Sun Jul 20 02:25:21.095358 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/click.php' not found or unable to stat [Sun Jul 20 02:25:21.330303 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/xx.php' not found or unable to stat [Sun Jul 20 02:25:21.566057 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wp-editor.php' not found or unable to stat [Sun Jul 20 02:25:22.185200 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/as.php' not found or unable to stat [Sun Jul 20 02:25:22.419424 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/goat.php' not found or unable to stat [Sun Jul 20 02:25:22.923446 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/ova-tools.php' not found or unable to stat [Sun Jul 20 02:25:23.157875 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/mariju.php' not found or unable to stat [Sun Jul 20 02:25:23.859393 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/plugins.php' not found or unable to stat [Sun Jul 20 02:25:24.092278 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/css.php' not found or unable to stat [Sun Jul 20 02:25:25.046065 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/xml.php' not found or unable to stat [Sun Jul 20 02:25:25.532962 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/moon.php' not found or unable to stat [Sun Jul 20 02:25:26.449369 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wp-admin.php' not found or unable to stat [Sun Jul 20 02:25:26.689646 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wp-links-opml.php' not found or unable to stat [Sun Jul 20 02:25:27.426800 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/defaults.php' not found or unable to stat [Sun Jul 20 02:25:28.150054 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wp-trackback.php' not found or unable to stat [Sun Jul 20 02:25:28.384583 2025] [php7:error] [pid 2905113] [client 95.142.120.38:1033] script '/var/www/html/wso.php' not found or unable to stat [Sun Jul 20 02:25:29.648788 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/ty.php' not found or unable to stat [Sun Jul 20 02:25:30.139748 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/inputs.php' not found or unable to stat [Sun Jul 20 02:25:30.623337 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/cjfuns.php' not found or unable to stat [Sun Jul 20 02:25:30.862842 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/s.php' not found or unable to stat [Sun Jul 20 02:25:31.112876 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/w.php' not found or unable to stat [Sun Jul 20 02:25:31.616557 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/bs1.php' not found or unable to stat [Sun Jul 20 02:25:31.857377 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/link.php' not found or unable to stat [Sun Jul 20 02:25:32.105289 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/12.php' not found or unable to stat [Sun Jul 20 02:25:32.415460 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/lv.php' not found or unable to stat [Sun Jul 20 02:25:33.914072 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/lock.php' not found or unable to stat [Sun Jul 20 02:25:35.238250 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/xmlrpc.php' not found or unable to stat [Sun Jul 20 02:25:35.478946 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/wp-add.php' not found or unable to stat [Sun Jul 20 02:25:36.932710 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/wp-l0gin.php' not found or unable to stat [Sun Jul 20 02:25:38.464622 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/config.php' not found or unable to stat [Sun Jul 20 02:25:39.693481 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/cc.php' not found or unable to stat [Sun Jul 20 02:25:40.203060 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/wp-info.php' not found or unable to stat [Sun Jul 20 02:25:40.684304 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/byp.php' not found or unable to stat [Sun Jul 20 02:25:41.712081 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/go.php' not found or unable to stat [Sun Jul 20 02:25:41.953782 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/plugin.php' not found or unable to stat [Sun Jul 20 02:25:42.453828 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/size.php' not found or unable to stat [Sun Jul 20 02:25:42.947210 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/htaccess.php' not found or unable to stat [Sun Jul 20 02:25:43.973931 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/wp-cron.php' not found or unable to stat [Sun Jul 20 02:25:44.512246 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/bypass.php' not found or unable to stat [Sun Jul 20 02:25:45.029480 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/wp-conflg.php' not found or unable to stat [Sun Jul 20 02:25:45.578823 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/profile.php' not found or unable to stat [Sun Jul 20 02:25:45.848389 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/atomlib.php' not found or unable to stat [Sun Jul 20 02:25:46.096475 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/m.php' not found or unable to stat [Sun Jul 20 02:25:48.343586 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/product.php' not found or unable to stat [Sun Jul 20 02:25:48.597648 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/content.php' not found or unable to stat [Sun Jul 20 02:25:49.686569 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/randkeyword.php' not found or unable to stat [Sun Jul 20 02:25:51.650178 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/av.php' not found or unable to stat [Sun Jul 20 02:25:51.889837 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/bless.php' not found or unable to stat [Sun Jul 20 02:25:53.906821 2025] [php7:error] [pid 2905106] [client 95.142.120.38:1197] script '/var/www/html/c.php' not found or unable to stat [Sun Jul 20 02:25:54.957472 2025] [php7:error] [pid 2905107] [client 95.142.120.38:1069] script '/var/www/html/wp-config-sample.php' not found rdPressCore/include.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:13 -0600] "GET /a.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:13 -0600] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:14 -0600] "GET /doc.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:14 -0600] "GET /edit.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:14 -0600] "GET /options.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:15 -0600] "GET /shell20211028.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:15 -0600] "GET /wp-admin/css/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:15 -0600] "GET /ynz.PhP7 HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:15 -0600] "GET /baxa1.phP8 HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:16 -0600] "GET /23.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 95.142.120.38 - - [20/Jul/2025:02:25:16 -0600] "GET /license.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:16 -0600] "GET /wp-admin/network/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:16 -0600] "GET /wp-content/plugins/dummyyummy/wp- HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:17 -0600] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:17 -0600] "GET /wp-content/classwithtostring.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:17 -0600] "GET /wp-content/themes/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:17 -0600] "GET /wp-includes/admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:18 -0600] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:18 -0600] "GET /install.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:18 -0600] "GET /wp-admin/css/OK.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:18 -0600] "GET /wp-header.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:19 -0600] "GET /wp-admin/product.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:19 -0600] "GET /login.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 95.142.120.38 - - [20/Jul/2025:02:25:19 -0600] "GET /wp-includes/rest-api/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:20 -0600] "GET /wp-includes/css/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 95.142.120.38 - - [20/Jul/2025:02:25:20 -0600] "GET /wp-content/themes/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:20 -0600] "GET /db.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:20 -0600] "GET /wp-admin/user/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:21 -0600] "GET /click.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:21 -0600] "GET /xx.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:21 -0600] "GET /wp-editor.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:21 -0600] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:22 -0600] "GET /as.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 95.142.120.38 - - [20/Jul/2025:02:25:22 -0600] "GET /goat.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:22 -0600] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:22 -0600] "GET /ova-tools.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:23 -0600] "GET /mariju.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 95.142.120.38 - - [20/Jul/2025:02:25:23 -0600] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:23 -0600] "GET /wp-content/mah.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:23 -0600] "GET /plugins.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:24 -0600] "GET /css.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:24 -0600] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:24 -0600] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:24 -0600] "GET /wp-content/options.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:25 -0600] "GET /xml.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:25 -0600] "GET /wp-admin/css/go.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:25 -0600] "GET /moon.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:25 -0600] "GET /upload/upload.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:26 -0600] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:26 -0600] "GET /wp-admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:26 -0600] "GET /wp-links-opml.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:26 -0600] "GET /wp-includes/block-supports/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:27 -0600] "GET /wp- HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:27 -0600] "GET /defaults.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:27 -0600] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:27 -0600] "GET /wp-content/plugins/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:28 -0600] "GET /wp-trackback.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 95.142.120.38 - - [20/Jul/2025:02:25:28 -0600] "GET /wso.php HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:28 -0600] "GET /wp-includes/customize/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:29 -0600] "GET /includes/admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:29 -0600] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 95.142.120.38 - - [20/Jul/2025:02:25:29 -0600] "GET /ty.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:29 -0600] "GET /wp-includes/images/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:30 -0600] "GET /inputs.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:30 -0600] "GET /wp-admin/maint/yes.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:30 -0600] "GET /cjfuns.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:30 -0600] "GET /s.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:31 -0600] "GET /w.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:31 -0600] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:31 -0600] "GET /bs1.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:31 -0600] "GET /link.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:32 -0600] "GET /12.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:32 -0600] "GET /lv.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:32 -0600] "GET /wp-includes/wp-class.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:32 -0600] "GET /templates/beez/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:33 -0600] "GET /wp-includes/js/wp-signup.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:33 -0600] "GET /wp-includes/fonts/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:33 -0600] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 95.142.120.38 - - [20/Jul/2025:02:25:33 -0600] "GET /lock.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:34 -0600] "GET /wp-includes/customize/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:34 -0600] "GET /wp-admin/maint/go.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 95.142.120.38 - - [20/Jul/2025:02:25:34 -0600] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:34 -0600] "GET /wp-includes/product.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:35 -0600] "GET /xmlrpc.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:35 -0600] "GET /wp-add.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 95.142.120.38 - - [20/Jul/2025:02:25:35 -0600] "GET /css/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:35 -0600] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:36 -0600] "GET /images/pass.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:36 -0600] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:36 -0600] "GET /images/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:36 -0600] "GET /wp-l0gin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:37 -0600] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:37 -0600] "GET /cgi-bin/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:37 -0600] "GET /wp-admin/404.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 95.142.120.38 - - [20/Jul/2025:02:25:37 -0600] "GET /wp-admin/maint/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:38 -0600] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:38 -0600] "GET /config.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:38 -0600] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 95.142.120.38 - - [20/Jul/2025:02:25:38 -0600] "GET /wp-content/themes/chosen.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:39 -0600] "GET /wp-includes/template-wploader.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:39 -0600] "GET /.well-known/acme-challenge/wp.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.142.120.38 - - [20/Jul/2025:02:25:39 -0600] "GET /cc.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:39 -0600] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:40 -0600] "GET /wp-info.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 95.142.120.38 - - [20/Jul/2025:02:25:40 -0600] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:40 -0600] "GET /byp.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 95.142.120.38 - - [20/Jul/2025:02:25:40 -0600] "GET /wp-admin/includes/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 95.142.120.38 - - [20/Jul/2025:02:25:41 -0600] "GET /wp-admin/images/admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 95.142.120.38 - - [20/Jul/2025:02:25:41 -0600] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:41 -0600] "GET /go.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 95.142.120.38 - - [20/Jul/2025:02:25:41 -0600] "GET /plugin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:42 -0600] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:42 -0600] "GET /size.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:42 -0600] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:42 -0600] "GET /htaccess.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:43 -0600] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:43 -0600] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:43 -0600] "GET /wp-admin/about.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 95.142.120.38 - - [20/Jul/2025:02:25:43 -0600] "GET /wp-cron.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:44 -0600] "GET /wp-admin/admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 95.142.120.38 - - [20/Jul/2025:02:25:44 -0600] "GET /bypass.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25:44 -0600] "GET /templates/atomic/templates.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 95.142.120.38 - - [20/Jul/2025:02:25ems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 20 02:57:00 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: b400babe-d551-4d34-a570-20524c09797c Jul 20 03:00:01 ip-172-31-29-215 CRON[2905891]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 03:09:01 ip-172-31-29-215 CRON[2905918]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 20 03:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 20 03:09:19 ip-172-31-29-215 sessionclean[2905931]: Cannot load Xdebug - it was already loaded Jul 20 03:09:19 ip-172-31-29-215 sessionclean[2905931]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 20 03:09:20 ip-172-31-29-215 sessionclean[2905931]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 20 03:09:20 ip-172-31-29-215 sessionclean[2905931]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 20 03:09:20 ip-172-31-29-215 sessionclean[2905931]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 20 03:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 20 03:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 20 03:10:01 ip-172-31-29-215 CRON[2905997]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r) Jul 20 03:10:19 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems... Jul 20 03:10:19 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded. Jul 20 03:10:19 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems. Jul 20 03:17:01 ip-172-31-29-215 CRON[2906003]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 20 03:20:01 ip-172-31-29-215 CRON[2906009]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 03:23:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 03:23:34.8325 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 03:23:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 03:23:34.8696 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 20 03:23:34 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 6204589c-dd44-47cd-a435-ae7d1d1956ba Jul 20 03:30:01 ip-172-31-29-215 CRON[2906037]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron) Jul 20 03:39:01 ip-172-31-29-215 CRON[2906045]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 20 03:39:10 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 20 03:39:10 ip-172-31-29-215 sessionclean[2906058]: Cannot load Xdebug - it was already loaded Jul 20 03:39:10 ip-172-31-29-215 sessionclean[2906058]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: 31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 05:13:05.0676 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 05:13:05 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 05:13:05.1121 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 20 05:13:05 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: c62923b9-c478-4aa8-bc8b-b013e0ae9fc2 Jul 20 05:17:01 ip-172-31-29-215 CRON[2906660]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 20 05:20:01 ip-172-31-29-215 CRON[2906665]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 05:39:01 ip-172-31-29-215 CRON[2906695]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 20 05:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 20 05:39:19 ip-172-31-29-215 sessionclean[2906708]: Cannot load Xdebug - it was already loaded Jul 20 05:39:19 ip-172-31-29-215 sessionclean[2906708]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 20 05:39:20 ip-172-31-29-215 sessionclean[2906708]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 20 05:39:20 ip-172-31-29-215 sessionclean[2906708]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 20 05:39:20 ip-172-31-29-215 sessionclean[2906708]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 20 05:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 20 05:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 20 05:40:01 ip-172-31-29-215 CRON[2906777]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 05:41:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 05:41:39.1139 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 05:41:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 05:41:39.1554 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 20 05:41:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: af98c94e-c86e-4c53-8959-0e812c9deb18 Jul 20 06:00:01 ip-172-31-29-215 CRON[2906807]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 20 06:08:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 06:08:27.1569 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 20 06:08:27 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-20 06:08:27.1894 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credential/usr/share/dict/words /usr/share/dict/words.pre-dictionaries-common dictionaries-common /usr/share/man/man1/sh.1.gz /usr/share/man/man1/sh.distrib.1.gz dash /usr/share/vim/vim81/doc/help.txt /usr/share/vim/vim81/doc/help.txt.vim-tiny vim-runtime /bin/sh /bin/sh.distrib dash /usr/share/vim/vim81/doc/tags /usr/share/vim/vim81/doc/tags.vim-tiny vim-runtime