azon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 00:44:37.0189 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jul 13 00:44:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 00:44:37.0626 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jul 13 00:44:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 27071f03-bf2d-4ea8-a3ac-12430a50ac6a
Jul 13 01:00:01 ip-172-31-29-215 CRON[2820016]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jul 13 01:09:01 ip-172-31-29-215 CRON[2820052]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 13 01:09:03 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jul 13 01:09:03 ip-172-31-29-215 sessionclean[2820065]: Cannot load Xdebug - it was already loaded
Jul 13 01:09:03 ip-172-31-29-215 sessionclean[2820065]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jul 13 01:09:03 ip-172-31-29-215 sessionclean[2820065]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jul 13 01:09:03 ip-172-31-29-215 sessionclean[2820065]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jul 13 01:09:03 ip-172-31-29-215 sessionclean[2820065]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jul 13 01:09:04 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jul 13 01:09:04 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jul 13 01:13:52 ip-172-31-29-215 snapd[2768240]: storehelpers.go:916: cannot refresh: snap has no updates available: "amazon-ssm-agent", "core18", "core20", "core22", "lxd", "snapd"
Jul 13 01:14:02 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 01:14:02.0661 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jul 13 01:14:02 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 01:14:02.1036 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jul 13 01:14:02 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: 4a4c7b57-5b6f-4fab-88ac-19ee9a1cca59
Jul 13 01:17:01 ip-172-31-29-215 CRON[2820123]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jul 13 01:20:01 ip-172-31-29-215 CRON[2820133]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jul 13 01:39:01 ip-172-31-29-215 CRON[2820187]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 13 01:39:06 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jul 13 01:39:06 ip-172-31-29-215 sessionclean[2820200]: Cannot load Xdebug - it was already loaded
Jul 13 01:39:06 ip-172-31-29-215 sessionclean[2820200]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jul 13 01:39:06 ip-172-31-29-215 sessionclean[2820200]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jul 13 01:39:06 ip-172-31-29-215 sessionclean[2820200]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jul 13 01:39:06 ip-172-31-29-215 sessionclean[2820200]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jul 13 01:39:06 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jul 13 01:39:06 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jul 13 01:40:01 ip-172-31-29-215 CRON[2820246]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jul 13 01:41:46 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 01:41:46.1057 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jul 13 01:41:46 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 01:41:46.1539 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jul 13 01:41:46 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: efe0c758-8ec2-4b78-beb9-a27935273ae6
Jul 13 02:00:01 ip-172-31-29-215 CRON[2820504]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jul 13 02:08:50 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 02:08:50.1559 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jul 13 02:08:50 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: 2025-07-13 02:08:50.1948 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jul 13 02:08:50 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[1875640]: #011status code: 400, request id: f07c7353-084c-47bd-b075-7baea3218e96
Jul 13 02:09:01 ip-172-31-29-215 CRON[2820536]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 13 02:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jul 13 02:09:19 ip-172-31-29-215 sessionclean[2820549]: Cannot load Xdebug - it was already loaded
Jul 13 02:09:19 ip-172-31-29-215 sessionclean[2820549]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jul 13 02:09:19 ip-172-31-29-215 sessionclean[2820549]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jul 13 02:09:19 ip-172-31-29-215 sessionclean[2820549]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jul 13 02:09:19 ip-172-31-29-215 sessionclean[2820549]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jul 13 02:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jul 13 02:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jul 13 02:17:01 ip-19 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
45.135.194.11 - - [13/Jul/2025:02:21:43 -0600] "POST /apply.cgi HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
110.249.202.47 - - [13/Jul/2025:02:31:34 -0600] "GET / HTTP/1.1" 200 7295 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
110.249.202.47 - - [13/Jul/2025:02:31:35 -0600] "GET /icons/ubuntu-logo.png HTTP/1.1" 206 852 "https://aptuslegal.app/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
91.212.74.214 - - [13/Jul/2025:02:38:26 -0600] "GET /.env HTTP/1.1" 404 4230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
91.212.74.214 - - [13/Jul/2025:02:38:27 -0600] "POST / HTTP/1.1" 200 7259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
79.124.58.198 - - [13/Jul/2025:02:41:35 -0600] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 7175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
54.202.41.137 - - [13/Jul/2025:02:55:23 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
136.143.176.60 - - [13/Jul/2025:03:03:45 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36733924 "-" "Zoho_Analytics"
136.143.177.62 - - [13/Jul/2025:03:05:00 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36733924 "-" "Zoho_Analytics"
54.193.167.21 - - [13/Jul/2025:03:09:42 -0600] "GET / HTTP/1.1" 200 7175 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
31.59.20.204 - - [13/Jul/2025:03:49:07 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
31.59.20.204 - - [13/Jul/2025:03:49:07 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
3.132.23.201 - - [13/Jul/2025:03:53:04 -0600] "GET / HTTP/1.0" 400 624 "-" "-"
3.132.23.201 - - [13/Jul/2025:03:55:12 -0600] "GET / HTTP/1.0" 400 624 "-" "-"
3.132.23.201 - - [13/Jul/2025:03:57:31 -0600] "GET / HTTP/1.1" 200 6584 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
136.143.176.60 - - [13/Jul/2025:04:05:05 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 36733924 "-" "Zoho_Analytics"
170.106.11.6 - - [13/Jul/2025:04:19:30 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
3.238.76.187 - - [13/Jul/2025:04:26:11 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
146.59.70.26 - - [13/Jul/2025:04:30:22 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15"
124.156.187.113 - - [13/Jul/2025:04:39:55 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
154.36.85.213 - - [13/Jul/2025:04:40:19 -0600] "GET /.env HTTP/1.1" 404 4230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
154.36.85.213 - - [13/Jul/2025:04:40:20 -0600] "POST / HTTP/1.1" 200 7259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
136.143.1tuslegal from 150.95.111.118 port 35718
Jul 13 02:36:40 ip-172-31-29-215 sshd[2820635]: Connection closed by invalid user aptuslegal 150.95.111.118 port 35718 [preauth]
Jul 13 02:37:47 ip-172-31-29-215 sshd[2820637]: Connection closed by authenticating user root 210.1.60.243 port 41962 [preauth]
Jul 13 02:39:01 ip-172-31-29-215 CRON[2820641]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 02:39:01 ip-172-31-29-215 CRON[2820641]: pam_unix(cron:session): session closed for user root
Jul 13 02:40:01 ip-172-31-29-215 CRON[2820697]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Jul 13 02:40:01 ip-172-31-29-215 CRON[2820697]: pam_unix(cron:session): session closed for user smmsp
Jul 13 02:46:15 ip-172-31-29-215 sshd[2820720]: Invalid user aptuslegal from 45.61.162.81 port 38392
Jul 13 02:46:15 ip-172-31-29-215 sshd[2820720]: Connection closed by invalid user aptuslegal 45.61.162.81 port 38392 [preauth]
Jul 13 02:56:47 ip-172-31-29-215 sshd[2820759]: Invalid user aptuslegal from 207.231.110.214 port 39924
Jul 13 02:56:47 ip-172-31-29-215 sshd[2820759]: Connection closed by invalid user aptuslegal 207.231.110.214 port 39924 [preauth]
Jul 13 03:00:01 ip-172-31-29-215 CRON[2820765]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Jul 13 03:00:01 ip-172-31-29-215 CRON[2820765]: pam_unix(cron:session): session closed for user smmsp
Jul 13 03:02:41 ip-172-31-29-215 sshd[2820800]: Connection closed by authenticating user root 213.142.143.51 port 38664 [preauth]
Jul 13 03:03:52 ip-172-31-29-215 sshd[2820802]: Connection closed by authenticating user root 187.237.178.130 port 32315 [preauth]
Jul 13 03:06:07 ip-172-31-29-215 sshd[2820805]: Connection closed by authenticating user root 193.32.162.112 port 39818 [preauth]
Jul 13 03:07:31 ip-172-31-29-215 sshd[2820807]: Connection closed by authenticating user root 221.156.137.103 port 57280 [preauth]
Jul 13 03:09:01 ip-172-31-29-215 CRON[2820811]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 03:09:01 ip-172-31-29-215 CRON[2820811]: pam_unix(cron:session): session closed for user root
Jul 13 03:09:37 ip-172-31-29-215 sshd[2820867]: Connection closed by authenticating user root 114.207.112.45 port 33412 [preauth]
Jul 13 03:10:01 ip-172-31-29-215 CRON[2820870]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 03:10:01 ip-172-31-29-215 CRON[2820870]: pam_unix(cron:session): session closed for user root
Jul 13 03:12:43 ip-172-31-29-215 sshd[2820886]: Connection closed by authenticating user root 103.151.221.170 port 46186 [preauth]
Jul 13 03:17:01 ip-172-31-29-215 CRON[2820888]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 03:17:01 ip-172-31-29-215 CRON[2820888]: pam_unix(cron:session): session closed for user root
Jul 13 03:19:42 ip-172-31-29-215 sshd[2820895]: Connection closed by authenticating user root 178.128.102.63 port 48698 [preauth]
Jul 13 03:19:54 ip-172-31-29-215 sshd[2820897]: Connection closed by authenticating user root 43.134.22.66 port 36332 [preauth]
Jul 13 03:20:01 ip-172-31-29-215 CRON[2820899]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Jul 13 03:20:01 ip-172-31-29-215 CRON[2820899]: pam_unix(cron:session): session closed for user smmsp
Jul 13 03:27:36 ip-172-31-29-215 sshd[2820922]: Invalid user aptuslegal from 103.130.219.128 port 46564
Jul 13 03:27:37 ip-172-31-29-215 sshd[2820922]: Connection closed by invalid user aptuslegal 103.130.219.128 port 46564 [preauth]
Jul 13 03:30:01 ip-172-31-29-215 CRON[2820927]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 03:30:01 ip-172-31-29-215 CRON[2820927]: pam_unix(cron:session): session closed for user root
Jul 13 03:39:01 ip-172-31-29-215 CRON[2820932]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 13 03:39:01 ip-172-31-29-215 CRON[2820932]: pam_unix(cron:session): session closed for user root
Jul 13 03:40:01 ip-172-31-29-215 CRON[2820989]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Jul 13 03:40:01 ip-172-31- * Ubuntu Pro delivers the most comprehensive open source security and
   compliance features.

   https://ubuntu.com/aws/pro