2026-02-20T06:32:25.901969Z 436472 [Warning] [MY-010055] [Server] IP address '147.185.132.49' could not be resolved: Name or service not known 2026-02-20T08:05:43.094950Z 436473 [Warning] [MY-010055] [Server] IP address '45.82.78.107' could not be resolved: Name or service not known 2026-02-20T08:20:21.574012Z 436474 [Warning] [MY-010055] [Server] IP address '85.121.149.10' could not be resolved: Name or service not known 2026-02-20T10:32:42.375841Z 436475 [Warning] [MY-010055] [Server] IP address '46.151.182.158' could not be resolved: Name or service not known 2026-02-20T10:32:42.482979Z 436475 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.145930Z 436500 [Warning] [MY-010055] [Server] IP address '123.234.81.180' could not be resolved: Name or service not known 2026-02-20T13:21:04.149006Z 436501 [Warning] [MY-010055] [Server] IP address '123.234.81.180' could not be resolved: Name or service not known 2026-02-20T13:21:04.597905Z 436502 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.597899Z 436500 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.600200Z 436501 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.737641Z 436503 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.738084Z 436504 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.741270Z 436506 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.741314Z 436505 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.745933Z 436507 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.759739Z 436508 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:04.764518Z 436509 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:05.933576Z 436510 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:05.956719Z 436511 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:05.973891Z 436512 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21:06.101560Z 436513 [Warning] [MY-013360] [Server] Plugin sha256_password reported: ''sha256_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2026-02-20T13:21"GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:19 -0600] "GET /phpinfo.php HTTP/1.1" 200 24708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:20 -0600] "GET /test.php HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:20 -0600] "GET /_profiler/phpinfo HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:21 -0600] "GET /.env/.env.bak HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:22 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:22 -0600] "GET /index.php HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.83.112.197 - - [20/Feb/2026:00:45:23 -0600] "GET /.aws/credentials HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 95.215.0.144 - - [20/Feb/2026:00:49:23 -0600] "GET / HTTP/1.1" 200 14893 "-" "fasthttp" 66.249.93.205 - - [20/Feb/2026:00:50:00 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-131492.png HTTP/1.1" 200 161778 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" 170.205.28.73 - - [20/Feb/2026:00:51:08 -0600] "GET /.env HTTP/1.1" 404 4153 "-" "Mozilla/5.0 (X11; Linux x86_64)" 66.132.153.131 - - [20/Feb/2026:00:52:17 -0600] "\x16\x03\x01" 400 488 "-" "-" 66.132.153.131 - - [20/Feb/2026:00:52:18 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.153.131 - - [20/Feb/2026:00:52:18 -0600] "PRI * HTTP/2.0" 400 488 "-" "-" 66.132.153.131 - - [20/Feb/2026:00:52:18 -0600] "GET /favicon.ico HTTP/1.1" 404 454 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.153.131 - - [20/Feb/2026:00:52:23 -0600] "\x16\x03\x01" 400 488 "-" "-" 66.132.153.131 - - [20/Feb/2026:00:52:23 -0600] "GET /login HTTP/1.1" 404 435 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.111.44.121 - - [20/Feb/2026:00:54:32 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 442 "-" "-" 20.111.44.121 - - [20/Feb/2026:00:54:32 -0600] "GET /byp8.php HTTP/1.1" 404 442 "-" "-" 136.143.176.60 - - [20/Feb/2026:00:56:47 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37333280 "-" "Zoho_Analytics" 148.135.191.174 - - [20/Feb/2026:00:59:31 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 148.135.191.174 - - [20/Feb/2026:00:59:32 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 104.239.41.197 - - [20/Feb/2026:01:09:07 -0600] "GET /.env HTTP/1.1" 404 4237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 104.239.41.197 - - [20/Feb/2026:01:09:08 -0600] "POST / HTTP/1.1" 200 7266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" 43.153.85.46 - - [20/Feb/2026:01:19:45 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 17.246.15.133 - - [20/Feb/2026:01:atus code: 400, request id: 859f5b43-bbfd-40ce-9868-a69c683f3ba7 Feb 20 02:17:01 ip-172-31-29-215 CRON[1358400]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Feb 20 02:20:01 ip-172-31-29-215 CRON[1358405]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 20 02:39:01 ip-172-31-29-215 CRON[1358444]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 20 02:39:10 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 20 02:39:10 ip-172-31-29-215 sessionclean[1358457]: Cannot load Xdebug - it was already loaded Feb 20 02:39:10 ip-172-31-29-215 sessionclean[1358457]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 20 02:39:10 ip-172-31-29-215 sessionclean[1358457]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 20 02:39:10 ip-172-31-29-215 sessionclean[1358457]: PHP Warning: Module 'mbstring' already loaded in Unknown on line 0 Feb 20 02:39:10 ip-172-31-29-215 sessionclean[1358457]: PHP Warning: Module 'sqlsrv' already loaded in Unknown on line 0 Feb 20 02:39:10 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded. Feb 20 02:39:10 ip-172-31-29-215 systemd[1]: Finished Clean php session files. Feb 20 02:40:01 ip-172-31-29-215 CRON[1358501]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 20 02:41:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-20 02:41:04.5483 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found Feb 20 02:41:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-02-20 02:41:04.5759 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084 Feb 20 02:41:04 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 59e42252-5a09-4a37-82cf-610c351c7bc5 Feb 20 02:44:05 ip-172-31-29-215 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs... Feb 20 02:44:06 ip-172-31-29-215 systemd[1]: ua-timer.service: Succeeded. Feb 20 02:44:06 ip-172-31-29-215 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs. Feb 20 03:00:01 ip-172-31-29-215 CRON[1358557]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp) Feb 20 03:09:01 ip-172-31-29-215 CRON[1358606]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) Feb 20 03:09:07 ip-172-31-29-215 systemd[1]: Starting Clean php session files... Feb 20 03:09:07 ip-172-31-29-215 sessionclean[1358619]: Cannot load Xdebug - it was already loaded Feb 20 03:09:07 ip-172-31-29-215 sessionclean[1358619]: PHP Warning: PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 Feb 20 03:09:07 ip-172-31-29-215 sessionclean[1358619]: PHP Warning: Module 'gettext' already loaded in Unknown on line 0 Feb 20 03:09:07 ip-172-31-29-215 s-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Origin: microsoft-ubuntu-focal-prod focal Label: microsoft-ubuntu-focal-prod focal Suite: focal Codename: focal Date: Fri, 20 Feb 2026 08:48:29 +0000 Architectures: amd64 arm64 armhf all Components: main Description: Generated by aptly Acquire-By-Hash: yes SHA256: 38042cdf264b86c835a1d49f831f7fb1030d83587446de2d194ccd172d5ebc45 2803573 main/binary-amd64/Packages 2caacdb4f98476b92e22c3e34a058382b126c6d1da8bca52ff2110c987187bfa 431214 main/binary-amd64/Packages.gz 452a6fa4459153dff067a60e44a1e303f5277080a809bbf409da96ca17782ce5 984387 main/binary-arm64/Packages 89f45d5431bff6cc8cb69a088f08983034f3a2c246e01e7fb5a30eff1b6ad6e9 138473 main/binary-arm64/Packages.gz 89e92b5ce56186befb80b9edcd193637866781e2d76586a26197145d22f906d0 327978 main/binary-armhf/Packages bbbbe41f296df1ad69b05836aa1bf628a827bfe3b1a6d283529ccb1fe995a86c 28749 main/binary-armhf/Packages.gz ec9c265e364c68c9f969938c2165f8210ecd6139f602eb7e8ee7fe67e97f0395 18001 main/binary-all/Packages 6da64d2b98e35cfae52d0563089e825fea7d6876cc2e242684adfeed819cc4b9 2938 main/binary-all/Packages.gz e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 0 main/source/Sources 7fa1687b77d68370b7f171cbb9d73a80009f4d36148a4691145baece7d3a5d17 28 main/source/Sources.gz SHA512: 6316345dc33e2346ce473c955d692b9443f890683ccf13f0299d395f4b68d48d6e6d1e5b8b92a95a5ebe729e295b8eac540d94b260821e497f6da108575bafa0 2803573 main/binary-amd64/Packages a2faf9b8fbf8843a513a7dd920ef2cafb6e62db46069b65d329f1d090f741491a38fe19c4edf83bf62a99f05b1a7b3ea20725c500ce548a558ad4fe33ceceb0b 431214 main/binary-amd64/Packages.gz c869ce79b22e63e459b35041ce4a5f58eac42ae6f3ec497078b21fec0de331dfd90e533cb4094bcb23eb639cca8fa79fa2ba206b00738ca8c30ca264bfa3f407 984387 main/binary-arm64/Packages 57c181c1e74473b777b3c3be2f6d86b24078d5de8e137c084cbeae8eadedda4bbc102dfa88fce267cddf9a592c44d27b53fa51d50caa9e248ab49de70926b9df 138473 main/binary-arm64/Packages.gz 39eec458bc58cf50947a35633341e86ce134018772c38ef51e5ec813c7bf5a63e08490c8d2d3afebf3615b690efe0c704d2d85838a39a9a3dbe82cedc25add07 327978 main/binary-armhf/Packages 516698f9b74c1759990f480e2a86229f9d0fe3c1605a177cb19ba20873f69843ddd29b92415fc5404c4bfa9846c394c0bdaf1e0260fd2c09a17103efc5d9190e 28749 main/binary-armhf/Packages.gz 57c67a43deefc5fd3de137a02628beee50f1f033c29a2df72d0aa9d7c52574170da6145b7f29e2fb426b54bc4130939785575987086ff750c0c5376ea87090b9 18001 main/binary-all/Packages ded4fa8d075280989beb8e098a2af1dd3d65dcc36f121999083765ec7d07c478c17f5efe627f6870610674e49a31a2b5a99ed47c65bf535194bb7c806c25004c 2938 main/binary-all/Packages.gz cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e 0 main/source/Sources 5b01e9fe276828841d84da0432309ac6f59775e47a4ad9c5958490b09dd4800158e4c5b632147324de9cb421b695dffb857b04afbcbac3a7532a31ad504fd6ae 28 main/source/Sources.gz -----BEGIN PGP SIGNATURE----- Version: BSN Pgp v1.0.0.0 iQEcBAEBCAAGBQJpmCGuAAoJEOs+lK2+EinPDxkH/004LsqVyFVGwlxAZOgy2fKo Uqo661Bq4zeb1Xe1OmAyJx5Fx1dLJDM34sDTVJFpA11DBbMqoLjpPDBhzKs7XZIZ EqqOcdXLBS1pbGDnhmN2MTneKnZW2VwDlYaqpXXIXbvmV8dgIVPnT70t1/fIq6Ak 7S8j9v6sQmH9WqYaqfTymfqhzjZ5TYSEEMKjEaFHo3FUXttlbnlj+muNKElswFKu qaHByDbS6VOxCmKTi/55198z3w+Orr+3Uxlxi4+wXl93y/t0VdK3uG/lrsm5OLeC eQoRhMNISdq8N8IDrjTd/5rBUIhqfXGjYEcIGkY498+YwByTrNU0hmeq3sTDBDE= -----END PGP SIGNATURE-----