CRON[1471786]: pam_unix(cron:session): session closed for user smmsp Mar 1 04:26:32 ip-172-31-29-215 sshd[1471810]: Received disconnect from 103.176.79.137 port 48310:11: Bye Bye [preauth] Mar 1 04:26:32 ip-172-31-29-215 sshd[1471810]: Disconnected from authenticating user root 103.176.79.137 port 48310 [preauth] Mar 1 04:29:26 ip-172-31-29-215 sshd[1471816]: Received disconnect from 47.238.164.111 port 59288:11: Bye Bye [preauth] Mar 1 04:29:26 ip-172-31-29-215 sshd[1471816]: Disconnected from authenticating user root 47.238.164.111 port 59288 [preauth] Mar 1 04:30:19 ip-172-31-29-215 sshd[1471820]: Invalid user aptuslegal from 77.90.185.250 port 37410 Mar 1 04:30:19 ip-172-31-29-215 sshd[1471820]: Connection closed by invalid user aptuslegal 77.90.185.250 port 37410 [preauth] Mar 1 04:31:29 ip-172-31-29-215 sshd[1471822]: Received disconnect from 162.223.91.130 port 46158:11: Bye Bye [preauth] Mar 1 04:31:29 ip-172-31-29-215 sshd[1471822]: Disconnected from authenticating user root 162.223.91.130 port 46158 [preauth] Mar 1 04:32:43 ip-172-31-29-215 sshd[1471827]: Received disconnect from 162.223.91.130 port 43918:11: Bye Bye [preauth] Mar 1 04:32:43 ip-172-31-29-215 sshd[1471827]: Disconnected from authenticating user root 162.223.91.130 port 43918 [preauth] Mar 1 04:33:55 ip-172-31-29-215 sshd[1471830]: Received disconnect from 103.176.79.137 port 56408:11: Bye Bye [preauth] Mar 1 04:33:55 ip-172-31-29-215 sshd[1471830]: Disconnected from authenticating user root 103.176.79.137 port 56408 [preauth] Mar 1 04:35:23 ip-172-31-29-215 sshd[1471832]: Received disconnect from 197.199.224.52 port 40648:11: Bye Bye [preauth] Mar 1 04:35:23 ip-172-31-29-215 sshd[1471832]: Disconnected from authenticating user root 197.199.224.52 port 40648 [preauth] Mar 1 04:35:28 ip-172-31-29-215 sshd[1471834]: Received disconnect from 101.47.141.119 port 33228:11: Bye Bye [preauth] Mar 1 04:35:28 ip-172-31-29-215 sshd[1471834]: Disconnected from authenticating user root 101.47.141.119 port 33228 [preauth] Mar 1 04:37:39 ip-172-31-29-215 sshd[1471837]: Received disconnect from 103.176.79.137 port 37674:11: Bye Bye [preauth] Mar 1 04:37:39 ip-172-31-29-215 sshd[1471837]: Disconnected from authenticating user root 103.176.79.137 port 37674 [preauth] Mar 1 04:37:59 ip-172-31-29-215 sshd[1471841]: Received disconnect from 197.199.224.52 port 33060:11: Bye Bye [preauth] Mar 1 04:37:59 ip-172-31-29-215 sshd[1471841]: Disconnected from authenticating user root 197.199.224.52 port 33060 [preauth] Mar 1 04:38:24 ip-172-31-29-215 sshd[1471843]: Received disconnect from 180.76.96.235 port 42874:11: Bye Bye [preauth] Mar 1 04:38:24 ip-172-31-29-215 sshd[1471843]: Disconnected from authenticating user root 180.76.96.235 port 42874 [preauth] Mar 1 04:39:01 ip-172-31-29-215 CRON[1471845]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 1 04:39:01 ip-172-31-29-215 CRON[1471845]: pam_unix(cron:session): session closed for user root Mar 1 04:40:01 ip-172-31-29-215 CRON[1471902]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Mar 1 04:40:01 ip-172-31-29-215 CRON[1471902]: pam_unix(cron:session): session closed for user smmsp Mar 1 04:40:18 ip-172-31-29-215 sshd[1471924]: Received disconnect from 197.199.224.52 port 52118:11: Bye Bye [preauth] Mar 1 04:40:18 ip-172-31-29-215 sshd[1471924]: Disconnected from authenticating user root 197.199.224.52 port 52118 [preauth] Mar 1 04:40:53 ip-172-31-29-215 sshd[1471927]: Received disconnect from 101.47.141.119 port 58506:11: Bye Bye [preauth] Mar 1 04:40:53 ip-172-31-29-215 sshd[1471927]: Disconnected from authenticating user root 101.47.141.119 port 58506 [preauth] Mar 1 04:41:20 ip-172-31-29-215 sshd[1471929]: Received disconnect from 103.176.79.137 port 49010:11: Bye Bye [preauth] Mar 1 04:41:20 ip-172-31-29-215 sshd[1471929]: Disconnected from authenticating user root 103.176.79.137 port 49010 [preauth] Mar 1 04:41:23 ip-172-31-29-215 sshd[1471931]: Received disconnect from 180.76.96.235 port 56528:11: Bye Bye [preauth] Mar 1 04:41:23 ip-172-31-29-215 sshd[1471931]: Disconnected from authenticating user root 180.76.96.235 port 56528 [preauth] Mar 1 04:41:33 ip-172-31-29-215 sshd[1471934]: Connection reset by 198.235.24.22 port 64586 [preauth] Mar 1 04:42:43 ip-172-31-29-215 sshd[1471937]: Received disconnect from 197.199.224.52 port 42954:11: Bye Bye [preauth] Mar 1 04:42:43 ip-172-31-29-215 sshd[1471937]: Disconnected from authenticating user root 197.199.224.52 port 42954 [preauth] Mar 1 04:44:10 ip-172-31-29-215 sshd[1471941]: Connection closed by 180.76.96.235 port 51644 [preauth] Mar 1 04:44:11 ip-172-31-29-215 sshd[1471943]: Received disconnect from 180.76.96.235 port 48042:11: Bye Bye [preauth] Mar 1 04:44:11 ip-172-31-29-215 sshd[1471943]: Disconnected from authenticating user root 180.76.96.235 port 48042 [preauth] Mar 1 04:45:07 ip-172-31-29-215 sshd[1471946]: Received disconnect from 197.199.224.52 port 33776:11: Bye Bye [preauth] Mar 1 04:45:07 ip-172-31-29-215 sshd[1471946]: Disconnected from authenticating user root 197.199.224.52 port 33776 [preauth] Mar 1 04:45:17 ip-172-31-29-215 sshd[1471948]: Invalid user aptuslegal from 103.35.213.167 port 29362 Mar 1 04:45:18 ip-172-31-29-215 sshd[1471948]: Connection closed by invalid user aptuslegal 103.35.213.167 port 29362 [preauth] Mar 1 04:45:34 ip-172-31-29-215 sshd[1471950]: Received disconnect from 180.76.96.235 port 58678:11: Bye Bye [preauth] Mar 1 04:45:34 ip-172-31-29-215 sshd[1471950]: Disconnected from authenticating user root 180.76.96.235 port 58678 [preauth] Mar 1 04:45:42 ip-172-31-29-215 sshd[1471952]: Received disconnect from 101.47.141.119 port 58458:11: Bye Bye [preauth] Mar 1 04:45:42 ip-172-31-29-215 sshd[1471952]: Disconnected from authenticating user root 101.47.141.119 port 58458 [preauth] Mar 1 04:47:23 ip-172-31-29-215 sshd[1471955]: Received disconnect from 197.199.224.52 port 52824:11: Bye Bye [preauth] Mar 1 04:47:23 ip-172-31-29-215 sshd[1471955]: Disconnected from authenticating user root 197.199.224.52 port 52824 [preauth] Mar 1 04:49:46 ip-172-31-29-215 sshd[1471960]: Received disconnect from 197.199.224.52 port 43634:11: Bye Bye [preauth] Mar 1 04:49:46 ip-172-31-29-215 sshd[1471960]: Disconnected from authenticating user root 197.199.224.52 port 43634 [preauth] Mar 1 04:50:33 ip-172-31-29-215 sshd[1471962]: Received disconnect from 101.47.141.119 port 51130:11: Bye Bye [preauth] Mar 1 04:50:33 ip-172-31-29-215 sshd[1471962]: Disconnected from authenticating user root 101.47.141.119 port 51130 [preauth] Mar 1 04:52:04 ip-172-31-29-215 sshd[1471964]: Received disconnect from 197.199.224.52 port 34452:11: Bye Bye [preauth] Mar 1 04:52:04 ip-172-31-29-215 sshd[1471964]: Disconnected from authenticating user root 197.199.224.52 port 34452 [preauth] Mar 1 04:54:24 ip-172-31-29-215 sshd[1471967]: Received disconnect from 197.199.224.52 port 53512:11: Bye Bye [preauth] Mar 1 04:54:24 ip-172-31-29-215 sshd[1471967]: Disconnected from authenticating user root 197.199.224.52 port 53512 [preauth] Mar 1 04:56:27 ip-172-31-29-215 sshd[1471970]: Invalid user aptuslegal from 172.94.9.64 port 47854 Mar 1 04:56:27 ip-172-31-29-215 sshd[1471970]: Connection closed by invalid user aptuslegal 172.94.9.64 port 47854 [preauth] Mar 1 04:56:51 ip-172-31-29-215 sshd[1471972]: Received disconnect from 197.199.224.52 port 44352:11: Bye Bye [preauth] Mar 1 04:56:51 ip-172-31-29-215 sshd[1471972]: Disconnected from authenticating user root 197.199.224.52 port 44352 [preauth] Mar 1 05:00:01 ip-172-31-29-215 CRON[1471977]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Mar 1 05:00:01 ip-172-31-29-215 CRON[1471977]: pam_unix(cron:session): session closed for user smmsp Mar 1 05:00:12 ip-172-31-29-215 sshd[1471999]: Connection closed by 101.47.141.119 port 37204 [preauth] Mar 1 05:07:55 ip-172-31-29-215 sshd[1472009]: Received disconnect from 221.161.235.168 port 44762:11: Bye Bye [preauth] Mar 1 05:07:55 ip-172-31-29-215 sshd[1472009]: Disconnected from authenticating user root 221.161.235.168 port 44762 [preauth] Mar 1 05:09:01 ip-172-31-29-215 CRON[iles. Mar 1 06:17:01 ip-172-31-29-215 CRON[1472581]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Mar 1 06:20:01 ip-172-31-29-215 CRON[1472589]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Mar 1 06:25:01 ip-172-31-29-215 CRON[1472614]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Mar 1 06:25:01 ip-172-31-29-215 cracklib: no dictionary update necessary. Mar 1 06:25:18 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-01 06:25:18.5197 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Mar 1 06:25:18 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-01 06:25:18.5529 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Mar 1 06:25:18 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 17f171d7-8db6-47d6-8a63-fa13853a55ec Mar 1 06:39:01 ip-172-31-29-215 CRON[1472711]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Mar 1 06:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Mar 1 06:39:19 ip-172-31-29-215 sessionclean[1472724]: Cannot load Xdebug - it was already loaded Mar 1 06:39:19 ip-172-31-29-215 sessionclean[1472724]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Mar 1 06:39:19 ip-172-31-29-215 sessionclean[1472724]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Mar 1 06:39:19 ip-172-31-29-215 sessionclean[1472724]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Mar 1 06:39:19 ip-172-31-29-215 sessionclean[1472724]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Mar 1 06:39:19 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Mar 1 06:39:19 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Mar 1 06:40:01 ip-172-31-29-215 CRON[1472768]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Mar 1 06:47:01 ip-172-31-29-215 CRON[1472794]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )) Mar 1 06:50:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-01 06:50:41.6159 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Mar 1 06:50:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-03-01 06:50:41.6476 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Mar 1 06:50:41 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 151c983f-ed65-4141-987e-c3c89903260a Mar 1 06:52:01 ip-172-31-29-215 CRON[1472808]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )) Mar 1 06:54:22 ip-172-31-29-215 systemd[1]: Starting Daily apt upgrade and clean activities... Mar 1 06:54:52 ip-172-31-29-215 apt-helper[1472810]: E: Sub-process nm-online returned an eart-and-design books-and-reference development devices-and-iot education entertainment featured finance games health-and-fitness music-and-audio news-and-weather personalisation photo-and-video productivity science security server-and-cloud social utilities