9-215 sessionclean[3657825]: Cannot load Xdebug - it was already loaded
Sep  8 01:39:02 ip-172-31-29-215 sessionclean[3657825]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep  8 01:39:02 ip-172-31-29-215 sessionclean[3657825]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep  8 01:39:02 ip-172-31-29-215 sessionclean[3657825]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep  8 01:39:02 ip-172-31-29-215 sessionclean[3657825]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep  8 01:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep  8 01:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep  8 01:39:02 ip-172-31-29-215 snapd[3235390]: storehelpers.go:916: cannot refresh: snap has no updates available: "amazon-ssm-agent", "core18", "core20", "core22", "lxd", "snapd"
Sep  8 01:40:01 ip-172-31-29-215 CRON[3657865]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 01:49:43 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 01:49:43.9820 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep  8 01:49:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 01:49:44.0230 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep  8 01:49:44 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 4defb4ef-c04c-4c07-b727-9bd5cc627418
Sep  8 02:00:01 ip-172-31-29-215 CRON[3657896]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 02:09:01 ip-172-31-29-215 CRON[3657924]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep  8 02:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep  8 02:09:02 ip-172-31-29-215 sessionclean[3657937]: Cannot load Xdebug - it was already loaded
Sep  8 02:09:02 ip-172-31-29-215 sessionclean[3657937]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep  8 02:09:02 ip-172-31-29-215 sessionclean[3657937]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep  8 02:09:02 ip-172-31-29-215 sessionclean[3657937]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep  8 02:09:02 ip-172-31-29-215 sessionclean[3657937]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep  8 02:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep  8 02:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep  8 02:16:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 02:16:07.0254 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep  8 02:16:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]:35.69.6 - - [08/Sep/2025:01:44:33 -0600] "GET /ko/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
5.35.69.6 - - [08/Sep/2025:01:44:33 -0600] "GET /tr/mod/mod_userdir.html HTTP/1.1" 404 4185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
5.35.69.6 - - [08/Sep/2025:01:44:33 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
5.35.69.6 - - [08/Sep/2025:01:44:35 -0600] "GET / HTTP/1.1" 200 7212 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
136.143.177.62 - - [08/Sep/2025:01:47:23 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
52.186.182.60 - - [08/Sep/2025:01:57:06 -0600] "GET / HTTP/1.0" 400 624 "-" "-"
147.45.211.191 - - [08/Sep/2025:02:07:40 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:41 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:42 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:42 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:43 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:43 -0600] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:43 -0600] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:44 -0600] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:44 -0600] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:45 -0600] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:46 -0600] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:46 -0600] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:47 -0600] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:48 -0600] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:48 -0600] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:49 -0600] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:49 -0600] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:49 -0600] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:50 -0600] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:50 -0600] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
147.45.211.191 - - [08/Sep/2025:02:07:51 -0600] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http" 2025-09-08 02:16:07.0635 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep  8 02:16:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 8e68225c-1ff0-4757-b7a0-be2e4020b586
Sep  8 02:17:01 ip-172-31-29-215 CRON[3657980]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Sep  8 02:20:01 ip-172-31-29-215 CRON[3657985]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 02:39:01 ip-172-31-29-215 CRON[3658041]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep  8 02:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep  8 02:39:02 ip-172-31-29-215 sessionclean[3658054]: Cannot load Xdebug - it was already loaded
Sep  8 02:39:02 ip-172-31-29-215 sessionclean[3658054]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep  8 02:39:02 ip-172-31-29-215 sessionclean[3658054]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep  8 02:39:02 ip-172-31-29-215 sessionclean[3658054]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep  8 02:39:02 ip-172-31-29-215 sessionclean[3658054]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep  8 02:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep  8 02:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep  8 02:40:01 ip-172-31-29-215 CRON[3658093]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 02:43:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 02:43:37.1041 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep  8 02:43:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 02:43:37.1362 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep  8 02:43:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 501197b0-19df-499a-999d-b5dbf6b55440
Sep  8 03:00:01 ip-172-31-29-215 CRON[3658122]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 03:09:01 ip-172-31-29-215 CRON[3658147]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep  8 03:09:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep  8 03:09:02 ip-172-31-29-215 sessionclean[3658160]: Cannot load Xdebug - it was already loaded
Sep  8 03:09:02 ip-172-31-29-215 sessionclean[3658160]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep  8 03:09:02 ip-172-31-29-215 sessionclean[3658160]: PHP Warning:  Module 'gettext'- - [08/Sep/2025:03:37:44 -0600] "GET /favicon.ico HTTP/1.1" 404 454 "-" "fasthttp"
198.235.24.146 - - [08/Sep/2025:03:38:18 -0600] "\x16\x03\x01" 400 488 "-" "-"
198.235.24.146 - - [08/Sep/2025:03:38:18 -0600] "\x16\x03\x01" 400 488 "-" "-"
47.237.107.28 - - [08/Sep/2025:03:44:09 -0600] "GET / HTTP/1.0" 200 14906 "-" "-"
47.237.107.28 - - [08/Sep/2025:03:44:10 -0600] "GET / HTTP/1.1" 200 7176 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
47.237.107.28 - - [08/Sep/2025:03:44:11 -0600] "GET /favicon.ico HTTP/1.1" 404 4147 "-" "fasthttp"
136.143.177.62 - - [08/Sep/2025:03:47:36 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
34.27.146.177 - - [08/Sep/2025:03:54:17 -0600] "\x16\x03\x01" 400 488 "-" "-"
34.27.146.177 - - [08/Sep/2025:03:54:19 -0600] "OPTIONS / HTTP/1.0" 200 181 "-" "-"
136.143.176.60 - - [08/Sep/2025:03:56:02 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
178.128.84.187 - - [08/Sep/2025:03:56:31 -0600] "GET /aaa9 HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x"
178.128.84.187 - - [08/Sep/2025:03:56:45 -0600] "GET /aab8 HTTP/1.1" 404 435 "-" "Mozilla/5.0 zgrab/0.x"
178.128.84.187 - - [08/Sep/2025:03:57:07 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 zgrab/0.x"
3.137.73.221 - - [08/Sep/2025:04:07:18 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
124.156.187.113 - - [08/Sep/2025:04:07:21 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
3.137.73.221 - - [08/Sep/2025:04:08:25 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
3.137.73.221 - - [08/Sep/2025:04:10:55 -0600] "\x16\x03\x01" 400 488 "-" "-"
82.26.242.125 - - [08/Sep/2025:04:11:18 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
82.26.242.125 - - [08/Sep/2025:04:11:18 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
3.137.73.221 - - [08/Sep/2025:04:12:40 -0600] "SSH-2.0-Go" 400 488 "-" "-"
3.137.73.221 - - [08/Sep/2025:04:12:57 -0600] "\x16\x03\x01" 400 488 "-" "-"
3.137.73.221 - - [08/Sep/2025:04:13:47 -0600] "\n" 400 488 "-" "-"
185.213.154.166 - - [08/Sep/2025:04:25:38 -0600] "GET /.env HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
205.210.31.146 - - [08/Sep/2025:04:39:41 -0600] "GET / HTTP/1.1" 200 3421 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
43.166.247.82 - - [08/Sep/2025:04:39:55 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
136.143.176.60 - - [08/Sep/2025:04:47:41 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36737933 "-" "Zoho_Analytics"
119.28.177.175 - - [08/Sep/2025:04:57:48 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
146.75.232.81 - - [08/Sep/2025:05:05:53 -0600] "GET / HTTP/1.1" 200 7296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
66.249.77.167 - - [08/Sep/2025:05:08:44 -0600] "GET /robots.txt HTTP/1.1" 404 4222 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.77.168 - - [08/Sep/2025:05:08:44 -0600] "GET / HTTP/1.1" 200 7249 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.unix(cron:session): session closed for user root
Sep  8 04:17:01 ip-172-31-29-215 CRON[3658450]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 04:17:01 ip-172-31-29-215 CRON[3658450]: pam_unix(cron:session): session closed for user root
Sep  8 04:20:01 ip-172-31-29-215 CRON[3658455]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 04:20:01 ip-172-31-29-215 CRON[3658455]: pam_unix(cron:session): session closed for user smmsp
Sep  8 04:39:01 ip-172-31-29-215 CRON[3658520]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 04:39:01 ip-172-31-29-215 CRON[3658520]: pam_unix(cron:session): session closed for user root
Sep  8 04:40:01 ip-172-31-29-215 CRON[3658574]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 04:40:01 ip-172-31-29-215 CRON[3658574]: pam_unix(cron:session): session closed for user smmsp
Sep  8 05:00:01 ip-172-31-29-215 CRON[3658602]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 05:00:02 ip-172-31-29-215 CRON[3658602]: pam_unix(cron:session): session closed for user smmsp
Sep  8 05:09:01 ip-172-31-29-215 CRON[3658628]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 05:09:01 ip-172-31-29-215 CRON[3658628]: pam_unix(cron:session): session closed for user root
Sep  8 05:17:01 ip-172-31-29-215 CRON[3658684]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 05:17:01 ip-172-31-29-215 CRON[3658684]: pam_unix(cron:session): session closed for user root
Sep  8 05:20:01 ip-172-31-29-215 CRON[3658689]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 05:20:01 ip-172-31-29-215 CRON[3658689]: pam_unix(cron:session): session closed for user smmsp
Sep  8 05:39:01 ip-172-31-29-215 CRON[3658732]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 05:39:01 ip-172-31-29-215 CRON[3658732]: pam_unix(cron:session): session closed for user root
Sep  8 05:40:01 ip-172-31-29-215 CRON[3658787]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 05:40:01 ip-172-31-29-215 CRON[3658787]: pam_unix(cron:session): session closed for user smmsp
Sep  8 06:00:01 ip-172-31-29-215 CRON[3658816]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 06:00:01 ip-172-31-29-215 CRON[3658816]: pam_unix(cron:session): session closed for user smmsp
Sep  8 06:09:01 ip-172-31-29-215 CRON[3658847]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 06:09:01 ip-172-31-29-215 CRON[3658847]: pam_unix(cron:session): session closed for user root
Sep  8 06:17:01 ip-172-31-29-215 CRON[3658908]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 06:17:01 ip-172-31-29-215 CRON[3658908]: pam_unix(cron:session): session closed for user root
Sep  8 06:20:01 ip-172-31-29-215 CRON[3658914]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 06:20:01 ip-172-31-29-215 CRON[3658914]: pam_unix(cron:session): session closed for user smmsp
Sep  8 06:25:01 ip-172-31-29-215 CRON[3658938]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 06:25:01 ip-172-31-29-215 CRON[3658938]: pam_unix(cron:session): session closed for user root
Sep  8 06:39:01 ip-172-31-29-215 CRON[3659042]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep  8 06:39:01 ip-172-31-29-215 CRON[3659042]: pam_unix(cron:session): session closed for user root
Sep  8 06:40:01 ip-172-31-29-215 CRON[3659096]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 06:40:01 ip-172-31-29-215 CRON[3659096]: pam_unix(cron:session): session closed for user smmsp
Sep  8 07:00:01 ip-172-31-29-215 CRON[3659351]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Sep  8 07:00:01 ip-172-31-29-215 CRON[3659351]: pam_unix(cron:session): session closed for user smmsp
Sep  8 07:07:32 ip-172-31-29-215 sshd[3659375]: Connection closed by authenticating user root 175.42.27.135 port 47662 [preauth]
Sep  8 07:07:33 ip-172-31-29-215 sshd[3659377]: Connection closed ean[3658409]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep  8 04:09:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep  8 04:09:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep  8 04:17:01 ip-172-31-29-215 CRON[3658451]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Sep  8 04:20:01 ip-172-31-29-215 CRON[3658456]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 04:21:17 ip-172-31-29-215 systemd[1]: Starting Message of the Day...
Sep  8 04:25:18 ip-172-31-29-215 50-motd-news[3658506]:  * Ubuntu Pro delivers the most comprehensive open source security and
Sep  8 04:25:18 ip-172-31-29-215 50-motd-news[3658506]:    compliance features.
Sep  8 04:25:18 ip-172-31-29-215 50-motd-news[3658506]:    https://ubuntu.com/aws/pro
Sep  8 04:25:18 ip-172-31-29-215 systemd[1]: motd-news.service: Succeeded.
Sep  8 04:25:18 ip-172-31-29-215 systemd[1]: Finished Message of the Day.
Sep  8 04:33:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 04:33:33.3079 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep  8 04:33:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 04:33:33.3491 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Sep  8 04:33:33 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: 4a1ad4db-8845-4517-8666-885ab716c039
Sep  8 04:39:01 ip-172-31-29-215 CRON[3658521]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Sep  8 04:39:02 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Sep  8 04:39:02 ip-172-31-29-215 sessionclean[3658534]: Cannot load Xdebug - it was already loaded
Sep  8 04:39:02 ip-172-31-29-215 sessionclean[3658534]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Sep  8 04:39:02 ip-172-31-29-215 sessionclean[3658534]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Sep  8 04:39:02 ip-172-31-29-215 sessionclean[3658534]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Sep  8 04:39:02 ip-172-31-29-215 sessionclean[3658534]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Sep  8 04:39:02 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Sep  8 04:39:02 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Sep  8 04:40:01 ip-172-31-29-215 CRON[3658575]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 05:00:01 ip-172-31-29-215 CRON[3658603]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Sep  8 05:02:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 05:02:01.3507 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Sep  8 05:02:01 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-09-08 05:02:01.3946 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling ReB_Moderno_Arochi.php:0
[Mon Sep 08 06:28:16.426287 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1433
[Mon Sep 08 06:28:16.426324 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP Stack trace:
[Mon Sep 08 06:28:16.426337 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Mon Sep 08 06:28:16.426343 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 1434
[Mon Sep 08 06:28:16.426346 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP Stack trace:
[Mon Sep 08 06:28:16.426350 2025] [php7:notice] [pid 3657479] [client 136.143.177.63:54200] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Mon Sep 08 06:41:24.681410 2025] [php7:error] [pid 3657490] [client 164.68.114.117:46302] script '/var/www/html/__info.php' not found or unable to stat
[Mon Sep 08 06:41:24.684710 2025] [php7:error] [pid 3657480] [client 164.68.114.117:46304] script '/var/www/html/_info.php' not found or unable to stat
[Mon Sep 08 06:41:24.685657 2025] [php7:error] [pid 3657477] [client 164.68.114.117:46308] script '/var/www/html/_phpinf.php' not found or unable to stat
[Mon Sep 08 06:41:24.797696 2025] [php7:error] [pid 3657476] [client 164.68.114.117:55026] script '/var/www/html/_info.php' not found or unable to stat
[Mon Sep 08 06:41:24.798012 2025] [php7:error] [pid 3657478] [client 164.68.114.117:55042] script '/var/www/html/_phpinfo.php' not found or unable to stat
[Mon Sep 08 06:41:24.810761 2025] [php7:error] [pid 3657575] [client 164.68.114.117:55012] script '/var/www/html/__info.php' not found or unable to stat
[Mon Sep 08 06:41:25.716001 2025] [php7:error] [pid 3659118] [client 164.68.114.117:55056] script '/var/www/html/_poopinfo.php' not found or unable to stat
[Mon Sep 08 06:41:26.666494 2025] [php7:error] [pid 3657477] [client 164.68.114.117:46308] script '/var/www/html/1.php' not found or unable to stat
[Mon Sep 08 06:41:26.680402 2025] [php7:error] [pid 3657479] [client 164.68.114.117:55002] script '/var/www/html/1.php' not found or unable to stat
[Mon Sep 08 06:41:26.723687 2025] [php7:error] [pid 3659119] [client 164.68.114.117:55034] script '/var/www/html/_phpinf.php' not found or unable to stat
[Mon Sep 08 06:41:26.911501 2025] [php7:error] [pid 3657478] [client 164.68.114.117:55042] script '/var/www/html/wp-config.php' not found or unable to stat
[Mon Sep 08 06:41:26.912679 2025] [php7:error] [pid 3657480] [client 164.68.114.117:46304] script '/var/www/html/wp-config.php' not found or unable to stat
[Mon Sep 08 06:41:27.948849 2025] [php7:error] [pid 3658278] [client 164.68.114.117:46286] script '/var/www/html/w.php' not found or unable to stat
[Mon Sep 08 06:41:27.954859 2025] [php7:error] [pid 3657479] [client 164.68.114.117:55002] script '/var/www/html/w.php' not found or unable to stat
[Mon Sep 08 06:41:27.998148 2025] [php7:error] [pid 3657478] [client 164.68.114.117:55042] script '/var/www/html/wp-login.php' not found or unable to stat
[Mon Sep 08 06:41:28.001882 2025] [php7:error] [pid 3659118] [client 164.68.114.117:55056] script '/var/www/html/a.php' not found or unable to stat
[Mon Sep 08 06:41:28.001907 2025] [php7:error] [pid 3659120] [client 164.68.114.117:55060] script '/var/www/html/admin.php' not found or unable to stat
[Mon Sep 08 06:41:28.318777 2025] [php7:error] [pid 3658278] [client 164.68.114.117:46286] script '/var/www/html/infophp.php' not found or unable to stat
[Mon Sep 08 06:41:28.324908 2025] [php7:error] [pid 3657476] [client 164.68.114.117:55026] script '/var/www/html/infophp.php' not found or unable to stat
[Mon Sep 08 06:41:29.515591 2025] [php7:error] [pid 3657480] [client 164.68.114.117:46304] script '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 HTTP/1.1" 200 4093 "-" "Deluge"
154.203.48.234 - - [08/Sep/2025:06:40:06 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
154.203.48.234 - - [08/Sep/2025:06:40:06 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /__info.php HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /_info.php HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /_phpinf.php HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /.env HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /_info.php HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /_phpinfo.php HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /client/.env HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /__info.php HTTP/1.1" 404 4231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /api/.env.production HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:24 -0600] "GET /.env.prod HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:25 -0600] "GET /api/_profiler/phpinfo HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:25 -0600] "GET /api/api/phpinfo.php HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06:41:25 -0600] "GET /api/backend/phpinfo.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
164.68.114.117 - - [08/Sep/2025:06