ntials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 13 03:03:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 3e870651-9246-43a8-a90e-850d3c7ea368 Jul 13 03:09:01 ip-172-31-29-215 CRON[2820812]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 13 03:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 13 03:09:19 ip-172-31-29-215 sessionclean[2820825]: Cannot load Xdebug - it was already loaded Jul 13 03:09:19 ip-172-31-29-215 sessionclean[2820825]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 13 03:09:19 ip-172-31-29-215 sessionclean[2820825]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 13 03:09:19 ip-172-31-29-215 sessionclean[2820825]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 13 03:09:19 ip-172-31-29-215 sessionclean[2820825]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 13 03:09:19 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 13 03:09:19 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 13 03:10:01 ip-172-31-29-215 CRON[2820871]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r) Jul 13 03:10:33 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems... Jul 13 03:10:33 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded. Jul 13 03:10:33 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems. Jul 13 03:11:05 ip-172-31-29-215 systemd[1]: Starting Refresh fwupd metadata and update motd... Jul 13 03:11:05 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.fwupd' unit='fwupd.service' requested by ':1.27652' (uid=116 pid=2820874 comm="/usr/bin/fwupdmgr refresh " label="unconfined") Jul 13 03:11:05 ip-172-31-29-215 systemd[1]: Starting Firmware update daemon... Jul 13 03:11:05 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.fwupd' Jul 13 03:11:05 ip-172-31-29-215 systemd[1]: Started Firmware update daemon. Jul 13 03:11:05 ip-172-31-29-215 fwupd[2820879]: 09:11:05:0766 FuPluginLinuxSleep could not open /sys/power/mem_sleep: Error opening file /sys/power/mem_sleep: No such file or directory Jul 13 03:11:05 ip-172-31-29-215 systemd[1]: fwupd-refresh.service: Succeeded. Jul 13 03:11:05 ip-172-31-29-215 systemd[1]: Finished Refresh fwupd metadata and update motd. Jul 13 03:17:01 ip-172-31-29-215 CRON[2820889]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 13 03:20:01 ip-172-31-29-215 CRON[2820900]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 13 03:30:01 ip-172-31-29-215 CRON[2820928]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron) Jul 13 03:32:22 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 03:32:22.2861 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 13 03:32:22 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 03:32:22.3215 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 13 03:32:22 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: bd899d75-f2af-4dcd-9c9d-aae897b9b95a Jul 13 03:39:01 ip-172-31-29-215 CRON[2820933]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 13 03:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 13 03:39:19 ip-172-31-29-215 sessionclean[2820946]: Cannot load Xdebug - it was already loaded Jul 13 03:39:19 ip-172-31-29-215 sessionclean[2820946]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 13 03:39:19 ip-172-31-29-215 sessionclean[2820946]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 13 03:39:19 ip-172-31-29-215 sessionclean[2820946]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 13 03:39:19 ip-172-31-29-215 sessionclean[2820946]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 13 03:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 13 03:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 13 03:40:01 ip-172-31-29-215 CRON[2820990]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 13 04:00:01 ip-172-31-29-215 CRON[2821029]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 13 04:01:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 04:01:41.3961 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 13 04:01:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 04:01:41.4344 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 13 04:01:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 78b6a669-bc37-4d31-aada-41ea383852bd Jul 13 04:09:01 ip-172-31-29-215 CRON[2821059]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 13 04:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 13 04:09:19 ip-172-31-29-215 sessionclean[2821072]: Cannot load Xdebug - it was already loaded Jul 13 04:09:19 ip-172-31-29-215 sessionclean[2821072]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 13 04:09:19 ip-172-31-29-215 sessionclean[2821072]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 13 04:09:19 ip-172-31-29-215 sessionclean[2821072]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 13 04:09:19 ip-172-31-29-215 sessionclean[2821072]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 13 04:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 13 04:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 13 04:17:01 ip-172-31-29-215 CRON[2821125]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 13 04:2025-07-13 04:56:04,255:DEBUG:certbot.main:certbot version: 0.40.0 2025-07-13 04:56:04,255:DEBUG:certbot.main:Arguments: ['-q'] 2025-07-13 04:56:04,255:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2025-07-13 04:56:04,262:DEBUG:certbot.log:Root logging level set at 30 2025-07-13 04:56:04,264:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2025-07-13 04:56:04,270:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2025-07-13 04:56:04,278:INFO:certbot.renewal:Cert not yet due for renewal 2025-07-13 04:56:04,279:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-07-13 04:56:04,279:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-07-13 04:56:04,279:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-07-13 04:56:04,284:INFO:certbot.renewal:Cert not yet due for renewal 2025-07-13 04:56:04,285:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-07-13 04:56:04,285:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-07-13 04:56:04,285:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-07-13 04:56:04,285:DEBUG:certbot.renewal:no renewal failures 2025-07-13 20:42:50,908:DEBUG:certbot.main:certbot version: 0.40.0 2025-07-13 20:42:50,909:DEBUG:certbot.main:Arguments: ['-q'] 2025-07-13 20:42:50,909:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2025-07-13 20:42:50,917:DEBUG:certbot.log:Root logging level set at 30 2025-07-13 20:42:50,918:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2025-07-13 20:42:50,924:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2025-07-13 20:42:50,931:INFO:certbot.renewal:Cert not yet due for renewal 2025-07-13 20:42:50,932:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-07-13 20:42:50,932:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-07-13 20:42:50,933:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-07-13 20:42:50,936:INFO:certbot.renewal:Cert not yet due for renewal 2025-07-13 20:42:50,936:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2025-07-13 20:42:50,936:DEBUG:certbot.plugins.selection:Selecting plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: 2025-07-13 20:42:50,937:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded 2025-07-13 20:42:50,937:DEBUG:certbot.renewal:no renewal failures 2025-07-14 07:38:52,480:DEBUnclean[2821543]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 13 05:09:13 ip-172-31-29-215 sessionclean[2821543]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 13 05:09:13 ip-172-31-29-215 sessionclean[2821543]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 13 05:09:13 ip-172-31-29-215 sessionclean[2821543]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 13 05:09:13 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 13 05:09:13 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 13 05:11:06 ip-172-31-29-215 systemd[1]: fwupd.service: Succeeded. Jul 13 05:17:01 ip-172-31-29-215 CRON[2821598]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Jul 13 05:20:01 ip-172-31-29-215 CRON[2821603]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 13 05:25:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 05:25:55.6263 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Jul 13 05:25:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 05:25:55.6653 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Jul 13 05:25:55 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: d3e2112f-c068-46fe-8e8c-9fb4f58730c7 Jul 13 05:39:01 ip-172-31-29-215 CRON[2821831]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Jul 13 05:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Jul 13 05:39:19 ip-172-31-29-215 sessionclean[2821845]: Cannot load Xdebug - it was already loaded Jul 13 05:39:19 ip-172-31-29-215 sessionclean[2821845]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Jul 13 05:39:19 ip-172-31-29-215 sessionclean[2821845]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Jul 13 05:39:19 ip-172-31-29-215 sessionclean[2821845]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Jul 13 05:39:19 ip-172-31-29-215 sessionclean[2821845]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Jul 13 05:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Jul 13 05:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Jul 13 05:40:01 ip-172-31-29-215 CRON[2821888]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Jul 13 05:41:19 ip-172-31-29-215 systemd[1]: Starting Daily apt download activities... Jul 13 05:41:50 ip-172-31-29-215 apt-helper[2821911]: E: Sub-process nm-online returned an error code (1) Jul 13 05:41:50 ip-172-31-29-215 systemd[1]: Starting Update APT News... Jul 13 05:41:50 ip-172-31-29-215 systemd[1]: Starting Update the local ESM caches... Jul 13 05:41:50 ip-172-31-29-215 systemd[1]: apt-news.service: Succeeded. Jul 13 05:41:50 ip-172-31-29-215 systemd[1]: Finished Update APT News. J31-29-215 sshd[2821637]: error: kex_exchange_identification: Connection closed by remote host Jul 13 05:25:27 ip-172-31-29-215 sshd[2821638]: Connection closed by authenticating user root 182.43.200.226 port 35566 [preauth] Jul 13 05:25:28 ip-172-31-29-215 sshd[2821640]: Connection closed by authenticating user root 182.43.200.226 port 35582 [preauth] Jul 13 05:25:29 ip-172-31-29-215 sshd[2821642]: Connection closed by authenticating user root 182.43.200.226 port 35584 [preauth] Jul 13 05:25:31 ip-172-31-29-215 sshd[2821644]: Connection closed by authenticating user root 182.43.200.226 port 35586 [preauth] Jul 13 05:25:32 ip-172-31-29-215 sshd[2821646]: Connection closed by authenticating user root 182.43.200.226 port 35588 [preauth] Jul 13 05:25:33 ip-172-31-29-215 sshd[2821648]: Connection closed by authenticating user root 182.43.200.226 port 35602 [preauth] Jul 13 05:25:35 ip-172-31-29-215 sshd[2821650]: Connection closed by authenticating user root 182.43.200.226 port 35604 [preauth] Jul 13 05:25:37 ip-172-31-29-215 sshd[2821652]: Connection closed by authenticating user root 182.43.200.226 port 41996 [preauth] Jul 13 05:25:41 ip-172-31-29-215 sshd[2821654]: Connection closed by authenticating user root 182.43.200.226 port 42000 [preauth] Jul 13 05:25:42 ip-172-31-29-215 sshd[2821656]: Connection closed by authenticating user root 182.43.200.226 port 42010 [preauth] Jul 13 05:25:44 ip-172-31-29-215 sshd[2821658]: Connection closed by authenticating user root 182.43.200.226 port 42018 [preauth] Jul 13 05:25:45 ip-172-31-29-215 sshd[2821660]: Connection closed by authenticating user root 182.43.200.226 port 42026 [preauth] Jul 13 05:25:46 ip-172-31-29-215 sshd[2821662]: Connection closed by authenticating user root 182.43.200.226 port 40330 [preauth] Jul 13 05:25:48 ip-172-31-29-215 sshd[2821664]: Connection closed by authenticating user root 182.43.200.226 port 40332 [preauth] Jul 13 05:26:14 ip-172-31-29-215 sshd[2821666]: Connection closed by authenticating user root 182.43.200.226 port 40334 [preauth] Jul 13 05:26:15 ip-172-31-29-215 sshd[2821668]: Connection closed by authenticating user root 182.43.200.226 port 47822 [preauth] Jul 13 05:26:16 ip-172-31-29-215 sshd[2821670]: Connection closed by authenticating user root 182.43.200.226 port 39270 [preauth] Jul 13 05:26:18 ip-172-31-29-215 sshd[2821672]: Connection closed by authenticating user root 182.43.200.226 port 39274 [preauth] Jul 13 05:26:20 ip-172-31-29-215 sshd[2821674]: Connection closed by authenticating user root 182.43.200.226 port 39276 [preauth] Jul 13 05:26:21 ip-172-31-29-215 sshd[2821676]: Connection closed by authenticating user root 182.43.200.226 port 39280 [preauth] Jul 13 05:26:23 ip-172-31-29-215 sshd[2821678]: Connection closed by authenticating user root 182.43.200.226 port 39290 [preauth] Jul 13 05:26:24 ip-172-31-29-215 sshd[2821680]: Connection closed by authenticating user root 182.43.200.226 port 39304 [preauth] Jul 13 05:26:25 ip-172-31-29-215 sshd[2821682]: Connection closed by authenticating user root 182.43.200.226 port 39312 [preauth] Jul 13 05:26:25 ip-172-31-29-215 sshd[2821684]: Invalid user aptuslegal from 103.252.90.190 port 49870 Jul 13 05:26:25 ip-172-31-29-215 sshd[2821684]: Connection closed by invalid user aptuslegal 103.252.90.190 port 49870 [preauth] Jul 13 05:26:27 ip-172-31-29-215 sshd[2821686]: Connection closed by authenticating user root 182.43.200.226 port 44624 [preauth] Jul 13 05:26:29 ip-172-31-29-215 sshd[2821688]: Connection closed by authenticating user root 182.43.200.226 port 44630 [preauth] Jul 13 05:26:31 ip-172-31-29-215 sshd[2821690]: Connection closed by authenticating user root 182.43.200.226 port 44634 [preauth] Jul 13 05:26:33 ip-172-31-29-215 sshd[2821692]: Connection closed by authenticating user root 182.43.200.226 port 44638 [preauth] Jul 13 05:26:34 ip-172-31-29-215 sshd[2821694]: Connection closed by authenticating user root 182.43.200.226 port 44646 [preauth] Jul 13 05:26:36 ip-172-31-29-215 sshd[2821696]: Connection closed by authenticating user root 182.43.200.226 port 44660 [preauth] Jul 13 05:26:38 ip-172-31-29-215 sshd[2821698]: Connection closed by authenticating user root 182.43.200.226 port 56020 [preauth] Jul 13 05:26:41 ip-172-31-29-215 sshd[2821700]: Connection closed by authenticating user root 182.43.200.226 port 56024 [preauth] Jul 13 05:26:42 ip-172-31-29-215 sshd[2821702]: Connection closed by authenticating user root 182.43.200.226 port 56032 [preauth] Jul 13 05:26:44 ip-172-31-29-215 sshd[2821704]: Connection closed by authenticating user root 182.43.200.226 port 56048 [preauth] Jul 13 05:26:45 ip-172-31-29-215 sshd[2821706]: Connection closed by authenticating user root 182.43.200.226 port 56054 [preauth] Jul 13 05:26:47 ip-172-31-29-215 sshd[2821708]: Connection closed by authenticating user root 182.43.200.226 port 59214 [preauth] Jul 13 05:26:48 ip-172-31-29-215 sshd[2821711]: Connection closed by authenticating user root 182.43.200.226 port 59222 [preauth] Jul 13 05:26:50 ip-172-31-29-215 sshd[2821713]: Connection closed by authenticating user root 182.43.200.226 port 59238 [preauth] Jul 13 05:26:51 ip-172-31-29-215 sshd[2821715]: Connection closed by authenticating user root 182.43.200.226 port 59244 [preauth] Jul 13 05:26:52 ip-172-31-29-215 sshd[2821717]: Connection closed by authenticating user root 182.43.200.226 port 59256 [preauth] Jul 13 05:26:54 ip-172-31-29-215 sshd[2821719]: Connection closed by authenticating user root 182.43.200.226 port 59258 [preauth] Jul 13 05:26:55 ip-172-31-29-215 sshd[2821721]: Connection closed by authenticating user root 182.43.200.226 port 59268 [preauth] Jul 13 05:26:57 ip-172-31-29-215 sshd[2821723]: Connection closed by authenticating user root 182.43.200.226 port 45508 [preauth] Jul 13 05:26:58 ip-172-31-29-215 sshd[2821725]: Connection closed by authenticating user root 182.43.200.226 port 45524 [preauth] Jul 13 05:26:59 ip-172-31-29-215 sshd[2821727]: Connection closed by authenticating user root 182.43.200.226 port 45540 [preauth] Jul 13 05:27:01 ip-172-31-29-215 sshd[2821729]: Connection closed by authenticating user root 182.43.200.226 port 45546 [preauth] Jul 13 05:27:02 ip-172-31-29-215 sshd[2821731]: Connection closed by authenticating user root 182.43.200.226 port 45562 [preauth] Jul 13 05:27:03 ip-172-31-29-215 sshd[2821733]: Connection closed by authenticating user root 182.43.200.226 port 45576 [preauth] Jul 13 05:27:05 ip-172-31-29-215 sshd[2821735]: Connection closed by authenticating user root 182.43.200.226 port 45578 [preauth] Jul 13 05:27:06 ip-172-31-29-215 sshd[2821737]: Connection closed by authenticating user root 182.43.200.226 port 46296 [preauth] Jul 13 05:27:08 ip-172-31-29-215 sshd[2821739]: Connection closed by authenticating user root 182.43.200.226 port 46312 [preauth] Jul 13 05:27:10 ip-172-31-29-215 sshd[2821741]: Connection closed by authenticating user root 182.43.200.226 port 46324 [preauth] Jul 13 05:27:12 ip-172-31-29-215 sshd[2821743]: Connection closed by authenticating user root 182.43.200.226 port 46336 [preauth] Jul 13 05:27:13 ip-172-31-29-215 sshd[2821745]: Connection closed by authenticating user root 182.43.200.226 port 46346 [preauth] Jul 13 05:27:14 ip-172-31-29-215 sshd[2821747]: Connection closed by authenticating user root 182.43.200.226 port 46360 [preauth] Jul 13 05:27:16 ip-172-31-29-215 sshd[2821749]: Connection closed by authenticating user root 182.43.200.226 port 45982 [preauth] Jul 13 05:27:17 ip-172-31-29-215 sshd[2821751]: Connection closed by authenticating user root 182.43.200.226 port 45986 [preauth] Jul 13 05:27:19 ip-172-31-29-215 sshd[2821753]: Connection closed by authenticating user root 182.43.200.226 port 45996 [preauth] Jul 13 05:27:20 ip-172-31-29-215 sshd[2821755]: Connection closed by authenticating user root 182.43.200.226 port 46010 [preauth] Jul 13 05:27:21 ip-172-31-29-215 sshd[2821757]: Connection closed by authenticating user root 182.43.200.226 port 46026 [preauth] Jul 13 05:27:23 ip-172-31-29-215 sshd[2821759]: Connection closed by authenticating user root 182.43.200.226 port 46040 [preauth] Jul 13 05:27:24 ip-172-31-29-215 sshd[2821761]: Connection closed ws NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 104.239.0.93 - - [13/Jul/2025:05:33:11 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 20.169.85.114 - - [13/Jul/2025:05:58:57 -0600] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 3541 "-" "Mozilla/5.0 zgrab/0.x" 136.143.176.60 - - [13/Jul/2025:06:03:51 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36733924 "-" "Zoho_Analytics" 82.24.236.85 - - [13/Jul/2025:06:03:54 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 82.24.236.85 - - [13/Jul/2025:06:03:54 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 136.143.176.60 - - [13/Jul/2025:06:05:18 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36730751 "-" "Zoho_Analytics" 68.183.73.191 - - [13/Jul/2025:06:16:25 -0600] "\x16\x03\x01" 400 488 "-" "-" 68.183.73.191 - - [13/Jul/2025:06:16:25 -0600] "\x16\x03\x01" 400 488 "-" "-" 68.183.73.191 - - [13/Jul/2025:06:16:26 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.183.73.191 - - [13/Jul/2025:06:16:26 -0600] "GET /form.html HTTP/1.1" 404 435 "-" "curl/8.1.2" 68.183.73.191 - - [13/Jul/2025:06:16:26 -0600] "GET /upl.php HTTP/1.1" 404 435 "-" "Mozilla/5.0" 68.183.73.191 - - [13/Jul/2025:06:16:26 -0600] "GET /t4 HTTP/1.1" 404 435 "-" "Mozilla/5.0" 68.183.73.191 - - [13/Jul/2025:06:16:26 -0600] "GET /geoip/ HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.183.73.191 - - [13/Jul/2025:06:16:27 -0600] "GET /favicon.ico HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.183.73.191 - - [13/Jul/2025:06:16:27 -0600] "GET /1.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.183.73.191 - - [13/Jul/2025:06:16:27 -0600] "GET /systembc/password.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 68.183.73.191 - - [13/Jul/2025:06:16:27 -0600] "GET /password.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.163.104.54 - - [13/Jul/2025:06:18:18 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.125.213.11 - - [13/Jul/2025:06:20:34 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_wire_transfer.png HTTP/1.1" 200 9222 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 74.125.213.10 - - [13/Jul/2025:06:20:34 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_check.png HTTP/1.1" 200 7600 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 74.125.213.11 - - [13/Jul/2025:06:20:34 -0600] "GET /imagenesAptusLegal/TitanSteel/payment_methods/payment_ach.png HTTP/1.1" 200 13539 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 184.105.247.254 - - [13/Jul/2025:06:28:11 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 184.105.247.254 - - [13/Jul/2025:06:32:41 -0600] "GET /favicon.ico HTTP/1.1" 404 435 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 184.105.247.254 - - [13/Jul/2025:06:33:32 -0600] "GET /ge-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Origin: microsoft-ubuntu-focal-prod focal Label: microsoft-ubuntu-focal-prod focal Suite: focal Codename: focal Date: Sun, 13 Jul 2025 08:35:38 +0000 Architectures: amd64 arm64 armhf all Components: main Description: Generated by aptly Acquire-By-Hash: yes SHA256: b869258db94a4a908df0ff2f27ec3eea5bcae2e58a1daeb2001ef8752bfa1dbe 2352630 main/binary-amd64/Packages 14d6d90289565443d29ee8ced79028f5d3ed36613bb199b11acc0dfc9f580c25 362871 main/binary-amd64/Packages.gz b8a363e0a02bea7c2a9462cc1a014315deadacda4126053926cd624be36e115e 628404 main/binary-arm64/Packages abebc53f59609f6bcb330abcc62a523e5c71539d9c8b29bdb07e694fbad777f7 86274 main/binary-arm64/Packages.gz 369d71f88c1767e8f2109a338edb57e10d0ac2ef6ee24b7b09beed25f20b879e 307542 main/binary-armhf/Packages d4a8dafaadf8b72ff5ca0fad20358d9d34b8c764425959caddafa8573f8aa905 27147 main/binary-armhf/Packages.gz ec9c265e364c68c9f969938c2165f8210ecd6139f602eb7e8ee7fe67e97f0395 18001 main/binary-all/Packages 88fe634fccbfc17a30ec0838b3fbe56b13d2685429f070542704bf1570f39fcd 2938 main/binary-all/Packages.gz e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 0 main/source/Sources b7d25c89fe64ea42ce498c37cf0387e4c80a68b851b3c4a799426023ecc2c5fc 28 main/source/Sources.gz SHA512: ac1c6737afd17f48ac684ed0bf30756e1f9a7d28a5a6da63516ffb54b08a295679ec989a8f238b92545af32e0c3ee0e504bd5cd8461566eb03466a7ee0906f1d 2352630 main/binary-amd64/Packages 58147bcb5bfd8cc2a3a17d59b2940882714079b6960c4ce18d20021a205f45cc285e83962bd236c7739301f92c5ead72cf231b0399daed1921f6fca7f94116c1 362871 main/binary-amd64/Packages.gz 68980b066fb9588451840e2b6bdd53f3d5d7e9de243296c405344fc2d3f362910eb30d62c9188319f5f11022bacaef97418fca1ecf403d89fc053871406c11fa 628404 main/binary-arm64/Packages 475a95bf6458e84757d60b573c0ac16501c2a67a205707a9069825ca5513052ecf4fc12ad20279c915ea25a5fd95c36d99c9dd2e04bc66df7d487dff5d960ad8 86274 main/binary-arm64/Packages.gz ab916005ab86beccad9d2d552491c7b1250c3cae40854c80896b6cbd338f77205aea20ef1d3628debfcf492120ac8f115eed216b00ccc21c6a35cfab603f44a8 307542 main/binary-armhf/Packages 05abc34b7845cfd8810c77d042cc6f3902f83c2e5479cf1295655019032e34d202067aea59a5d1c32623110e4314de8334c26e15f6be019c051b1265eb5952a3 27147 main/binary-armhf/Packages.gz 57c67a43deefc5fd3de137a02628beee50f1f033c29a2df72d0aa9d7c52574170da6145b7f29e2fb426b54bc4130939785575987086ff750c0c5376ea87090b9 18001 main/binary-all/Packages 458691adb775aec49f61b0b5b1322dd48b8f8305b1d0c85170528a9a221ce1fe057192faf29bc68cad04670bc9d78ac4dc34804a634ae5a00dc75349c15b2d23 2938 main/binary-all/Packages.gz cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e 0 main/source/Sources a8ab5c747e71f676b8ee03ed877c5fad09232e5df919c93ffd50b9c3d3d62e1955f1beebe111633b8f2c3d2f37e54495a215063497e462730a70483cc3505543 28 main/source/Sources.gz -----BEGIN PGP SIGNATURE----- Version: BSN Pgp v1.0.0.0 iQEcBAEBCAAGBQJoc3B1AAoJEOs+lK2+EinP7I8H/ReUo6huJzfufzOiIvElolxG WLoh51JHABQwOL/NftF84sZ16aY19f7k2s+0CX+3sqP2bdBArfHNYZyR8qFD2jlg ZFd3dINP3jnTaMurNjiHcV2LG3+2qW+izdZ3EE3KOe1Bxvzflw37vw5AXE9pE5// eQO0jCh+vMIL3efpMOkuslQ7peBYYiiLnc4hNe+90O7EZGq3YKkufjqUynSqePyJ ytwwZnc0r3qRbsTAjt8ubeaorZSfv/fYBbcbDoySIS3F+GkoerwKgmcHtnr1EJ23 qz3ADeVEOmFEutPdxHYQe/zkMw42nZ/5dZrx5x+AavxJTJbe5SM4EheJBcLmIMg= -----END PGP SIGNATURE-----