Mar 15 00:09:01 ip-172-31-29-215 CRON[1645207]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 15 00:09:01 ip-172-31-29-215 CRON[1645207]: pam_unix(cron:session): session closed for user root
Mar 15 00:09:30 ip-172-31-29-215 sshd[1645259]: Invalid user emma from 101.126.55.179 port 34018
Mar 15 00:09:31 ip-172-31-29-215 sshd[1645259]: Received disconnect from 101.126.55.179 port 34018:11: Bye Bye [preauth]
Mar 15 00:09:31 ip-172-31-29-215 sshd[1645259]: Disconnected from invalid user emma 101.126.55.179 port 34018 [preauth]
Mar 15 00:11:27 ip-172-31-29-215 sshd[1645263]: Invalid user promo from 101.100.194.199 port 35248
Mar 15 00:11:27 ip-172-31-29-215 sshd[1645263]: Received disconnect from 101.100.194.199 port 35248:11: Bye Bye [preauth]
Mar 15 00:11:27 ip-172-31-29-215 sshd[1645263]: Disconnected from invalid user promo 101.100.194.199 port 35248 [preauth]
Mar 15 00:15:43 ip-172-31-29-215 sshd[1645281]: Connection closed by 101.126.55.179 port 45438 [preauth]
Mar 15 00:16:01 ip-172-31-29-215 sshd[1645283]: Invalid user guest from 101.100.194.199 port 45508
Mar 15 00:16:02 ip-172-31-29-215 sshd[1645283]: Received disconnect from 101.100.194.199 port 45508:11: Bye Bye [preauth]
Mar 15 00:16:02 ip-172-31-29-215 sshd[1645283]: Disconnected from invalid user guest 101.100.194.199 port 45508 [preauth]
Mar 15 00:17:01 ip-172-31-29-215 CRON[1645287]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 15 00:17:01 ip-172-31-29-215 CRON[1645287]: pam_unix(cron:session): session closed for user root
Mar 15 00:17:06 ip-172-31-29-215 sshd[1645290]: Invalid user paolo from 101.100.194.199 port 49248
Mar 15 00:17:06 ip-172-31-29-215 sshd[1645290]: Received disconnect from 101.100.194.199 port 49248:11: Bye Bye [preauth]
Mar 15 00:17:06 ip-172-31-29-215 sshd[1645290]: Disconnected from invalid user paolo 101.100.194.199 port 49248 [preauth]
Mar 15 00:18:03 ip-172-31-29-215 sshd[1645294]: Invalid user cloud from 101.100.194.199 port 60330
Mar 15 00:18:03 ip-172-31-29-215 sshd[1645294]: Received disconnect from 101.100.194.199 port 60330:11: Bye Bye [preauth]
Mar 15 00:18:03 ip-172-31-29-215 sshd[1645294]: Disconnected from invalid user cloud 101.100.194.199 port 60330 [preauth]
Mar 15 00:19:00 ip-172-31-29-215 sshd[1645296]: Invalid user salman from 101.100.194.199 port 50370
Mar 15 00:19:00 ip-172-31-29-215 sshd[1645296]: Received disconnect from 101.100.194.199 port 50370:11: Bye Bye [preauth]
Mar 15 00:19:00 ip-172-31-29-215 sshd[1645296]: Disconnected from invalid user salman 101.100.194.199 port 50370 [preauth]
Mar 15 00:19:53 ip-172-31-29-215 sshd[1645299]: Received disconnect from 101.100.194.199 port 55048:11: Bye Bye [preauth]
Mar 15 00:19:53 ip-172-31-29-215 sshd[1645299]: Disconnected from authenticating user root 101.100.194.199 port 55048 [preauth]
Mar 15 00:20:01 ip-172-31-29-215 CRON[1645301]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 15 00:20:01 ip-172-31-29-215 CRON[1645301]: pam_unix(cron:session): session closed for user smmsp
Mar 15 00:20:47 ip-172-31-29-215 sshd[1645324]: Invalid user user5 from 101.100.194.199 port 35924
Mar 15 00:20:47 ip-172-31-29-215 sshd[1645324]: Received disconnect from 101.100.194.199 port 35924:11: Bye Bye [preauth]
Mar 15 00:20:47 ip-172-31-29-215 sshd[1645324]: Disconnected from invalid user user5 101.100.194.199 port 35924 [preauth]
Mar 15 00:21:40 ip-172-31-29-215 sshd[1645326]: Invalid user jason1 from 101.100.194.199 port 33268
Mar 15 00:21:41 ip-172-31-29-215 sshd[1645326]: Received disconnect from 101.100.194.199 port 33268:11: Bye Bye [preauth]
Mar 15 00:21:41 ip-172-31-29-215 sshd[1645326]: Disconnected from invalid user jason1 101.100.194.199 port 33268 [preauth]
Mar 15 00:22:39 ip-172-31-29-215 sshd[1645328]: Invalid user admin1234 from 101.100.194.199 port 44400
Mar 15 00:22:40 ip-172-31-29-215 sshd[1645328]: Received disconnect from 101.100.194.199 port 44400:11: Bye Bye [preauth]
Mar 15 00:22:40 ip-172-31-29-215 sshd[1645328]: Disconnected from invalid user admin1234 101.100.194.199 port 44400 [preauth]
Mar 15 00:23:33 ip-172-31-29-215 sshd[1645330]: Invalid user zhao from 101.100.194.199 port 46498
Mar 15 00:23:33 ip-172-31-29-215 sshd[1645330]: Received disconnect from 101.100.194.199 port 46498:11: Bye Bye [preauth]
Mar 15 00:23:33 ip-172-31-29-215 sshd[1645330]: Disconnected from invalid user zhao 101.100.194.199 port 46498 [preauth]
Mar 15 00:39:01 ip-172-31-29-215 CRON[1645339]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 15 00:39:01 ip-172-31-29-215 CRON[1645339]: pam_unix(cron:session): session closed for user root
Mar 15 00:40:01 ip-172-31-29-215 CRON[1645392]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 15 00:40:01 ip-172-31-29-215 CRON[1645392]: pam_unix(cron:session): session closed for user smmsp
Mar 15 00:54:16 ip-172-31-29-215 sshd[1645418]: Connection closed by authenticating user root 172.210.53.192 port 18432 [preauth]
Mar 15 01:00:01 ip-172-31-29-215 CRON[1645424]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 15 01:00:02 ip-172-31-29-215 CRON[1645424]: pam_unix(cron:session): session closed for user smmsp
Mar 15 01:08:39 ip-172-31-29-215 sshd[1645448]: Connection closed by authenticating user root 172.210.53.192 port 18432 [preauth]
Mar 15 01:09:01 ip-172-31-29-215 CRON[1645450]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 15 01:09:01 ip-172-31-29-215 CRON[1645450]: pam_unix(cron:session): session closed for user root
Mar 15 01:17:01 ip-172-31-29-215 CRON[1645728]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 15 01:17:01 ip-172-31-29-215 CRON[1645728]: pam_unix(cron:session): session closed for user root
Mar 15 01:20:01 ip-172-31-29-215 CRON[1645733]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 15 01:20:01 ip-172-31-29-215 CRON[1645733]: pam_unix(cron:session): session closed for user smmsp
Mar 15 01:23:02 ip-172-31-29-215 sshd[1645757]: Invalid user ark from 101.32.128.193 port 48648
Mar 15 01:23:02 ip-172-31-29-215 sshd[1645757]: Received disconnect from 101.32.128.193 port 48648:11: Bye Bye [preauth]
Mar 15 01:23:02 ip-172-31-29-215 sshd[1645757]: Disconnected from invalid user ark 101.32.128.193 port 48648 [preauth]
Mar 15 01:23:15 ip-172-31-29-215 sshd[1645759]: Connection closed by authenticating user root 172.210.53.192 port 18432 [preauth]
Mar 15 01:28:15 ip-172-31-29-215 sshd[1645763]: Invalid user scanner from 101.32.128.193 port 36436
Mar 15 01:28:15 ip-172-31-29-215 sshd[1645763]: Received disconnect from 101.32.128.193 port 36436:11: Bye Bye [preauth]
Mar 15 01:28:15 ip-172-31-29-215 sshd[1645763]: Disconnected from invalid user scanner 101.32.128.193 port 36436 [preauth]
Mar 15 01:30:25 ip-172-31-29-215 sshd[1645767]: Received disconnect from 101.32.128.193 port 55254:11: Bye Bye [preauth]
Mar 15 01:30:25 ip-172-31-29-215 sshd[1645767]: Disconnected from authenticating user root 101.32.128.193 port 55254 [preauth]
Mar 15 01:32:37 ip-172-31-29-215 sshd[1645770]: Received disconnect from 101.32.128.193 port 52324:11: Bye Bye [preauth]
Mar 15 01:32:37 ip-172-31-29-215 sshd[1645770]: Disconnected from authenticating user root 101.32.128.193 port 52324 [preauth]
Mar 15 01:34:41 ip-172-31-29-215 sshd[1645773]: Invalid user opc from 101.32.128.193 port 56826
Mar 15 01:34:41 ip-172-31-29-215 sshd[1645773]: Received disconnect from 101.32.128.193 port 56826:11: Bye Bye [preauth]
Mar 15 01:34:41 ip-172-31-29-215 sshd[1645773]: Disconnected from invalid user opc 101.32.128.193 port 56826 [preauth]
Mar 15 01:36:41 ip-172-31-29-215 sshd[1645775]: Invalid user zz from 101.32.128.193 port 50910
Mar 15 01:36:41 ip-172-31-29-215 sshd[1645775]: Received disconnect from 101.32.128.193 port 50910:11: Bye Bye [preauth]
Mar 15 01:36:41 ip-172-31-29-215 sshd[1645775]: Disconnected from invalid user zz 101.32.128.193 port 50910 [preauth]
Mar 15 01:38:48 ip-172-31-29-215 sshd[1645779]: Invalid user gns3 from 101.32.128.193 port 53992
Mar 15 01:38:48 ip-172-31-29-215 sshd[1645779]: Received disconnect from 101.32.128.193 port 53992:11: Bye Bye [preauth]
Mar 15 01:38:48 ip-172-und
Mar 15 02:58:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-15 02:58:07.8016 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Mar 15 02:58:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: f9da1d44-2840-494b-8eef-1df2182959c4
Mar 15 03:00:01 ip-172-31-29-215 CRON[1646092]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Mar 15 03:09:01 ip-172-31-29-215 CRON[1646131]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Mar 15 03:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Mar 15 03:09:19 ip-172-31-29-215 sessionclean[1646144]: Cannot load Xdebug - it was already loaded
Mar 15 03:09:19 ip-172-31-29-215 sessionclean[1646144]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Mar 15 03:09:19 ip-172-31-29-215 sessionclean[1646144]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Mar 15 03:09:19 ip-172-31-29-215 sessionclean[1646144]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Mar 15 03:09:19 ip-172-31-29-215 sessionclean[1646144]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Mar 15 03:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Mar 15 03:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Mar 15 03:10:01 ip-172-31-29-215 CRON[1646184]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)
Mar 15 03:11:19 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems...
Mar 15 03:11:19 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded.
Mar 15 03:11:19 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems.
Mar 15 03:16:52 ip-172-31-29-215 systemd[1]: Starting Message of the Day...
Mar 15 03:16:52 ip-172-31-29-215 50-motd-news[1646437]:  * Ubuntu Pro delivers the most comprehensive open source security and
Mar 15 03:16:52 ip-172-31-29-215 50-motd-news[1646437]:    compliance features.
Mar 15 03:16:52 ip-172-31-29-215 50-motd-news[1646437]:    https://ubuntu.com/aws/pro
Mar 15 03:16:52 ip-172-31-29-215 systemd[1]: motd-news.service: Succeeded.
Mar 15 03:16:52 ip-172-31-29-215 systemd[1]: Finished Message of the Day.
Mar 15 03:17:01 ip-172-31-29-215 CRON[1646445]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Mar 15 03:20:01 ip-172-31-29-215 CRON[1646450]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Mar 15 03:26:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-15 03:26:39.8391 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Mar 15 03:26:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-15 03:26:39.8710 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Mar 15 03:26:39 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 523ecb1a-e5ad-43f5-8318-35c67ff976f9
Mar 15 03:30:01 ip-172-31-29-215 CRON[1646482]: (root