PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
[Sun Dec 14 00:00:01.700081 2025] [mpm_prefork:notice] [pid 1759300] AH00163: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f configured -- resuming normal operations
[Sun Dec 14 00:00:01.700090 2025] [core:notice] [pid 1759300] AH00094: Command line: '/usr/sbin/apache2'
[Sun Dec 14 00:50:52.326497 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/num.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 00:50:52.511182 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/www.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Dec 14 00:50:52.695802 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/includes.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 00:50:52.880896 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/browse.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 00:50:57.331934 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/wp-good.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sun Dec 14 00:51:03.666431 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/wp-login.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 00:51:03.851205 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/wp-signin.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 14 00:51:04.036354 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/wp-user.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 14 00:51:04.225417 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/wp.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sun Dec 14 00:51:04.410188 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/xmlrpc.php' not found or unable to stat, referer: https://www.google.fr/
[Sun Dec 14 00:51:04.595237 2025] [php7:error] [pid 462831] [client 20.196.91.230:4066] script '/var/www/html/xmrlpc.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 14 01:33:10.019910 2025] [authz_core:error] [pid 462835] [client 209.97.180.8:58042] AH01630: client denied by server configuration: /var/www/html/server-status
[Sun Dec 14 01:33:12.844951 2025] [authz_core:error] [pid 462834] [client 128.199.182.55:52584] AH01630: client denied by server configuration: /var/www/html/server-status
[Sun Dec 14 01:33:20.086166 2025] [php7:error] [pid 462831] [client 209.97.180.8:52570] script '/var/www/html/info.php' not found or unable to stat
[Sun Dec 14 01:33:22.818754 2025] [php7:error] [pid 462832] [client 128.199.182.55:37666] script '/var/www/html/info.php' not found or unable to stat
[Sun Dec 14 05:57:27.515710 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP Notice:  Undefined property: stdClass::$data in /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php on line 338
[Sun Dec 14 05:57:27.515749 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP Stack trace:
[Sun Dec 14 05:57:27.515756 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP   1. {main}() /var/www/html/aptusCFDIRF/wsPreBillZB_Moderno_Arochi.php:0
[Sun Dec 14 05:57:28.979287 2025] [php7:notice] [pid 462833] [client 136.143.177.44:59454] PHP Warning:  count(): ParameteDec 14 00:00:01 ip-172-31-29-215 systemd[1]: man-db.service: Succeeded.
Dec 14 00:00:01 ip-172-31-29-215 systemd[1]: Finished Daily man-db regeneration.
Dec 14 00:00:01 ip-172-31-29-215 systemd[1]: logrotate.service: Succeeded.
Dec 14 00:00:01 ip-172-31-29-215 systemd[1]: Finished Rotate log files.
Dec 14 00:09:01 ip-172-31-29-215 CRON[462859]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 00:09:11 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 00:09:11 ip-172-31-29-215 sessionclean[462872]: Cannot load Xdebug - it was already loaded
Dec 14 00:09:11 ip-172-31-29-215 sessionclean[462872]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 00:09:11 ip-172-31-29-215 sessionclean[462872]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 00:09:11 ip-172-31-29-215 sessionclean[462872]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 00:09:11 ip-172-31-29-215 sessionclean[462872]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 00:09:11 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 00:09:11 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 00:15:12 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 00:15:12.5387 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 00:15:12 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 00:15:12.5740 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 00:15:12 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: b1923f25-bec9-43d3-a478-c107d4b0ea4d
Dec 14 00:17:01 ip-172-31-29-215 CRON[462913]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Dec 14 00:20:01 ip-172-31-29-215 CRON[462918]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 00:39:01 ip-172-31-29-215 CRON[462945]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 00:39:07 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 00:39:07 ip-172-31-29-215 sessionclean[462958]: Cannot load Xdebug - it was already loaded
Dec 14 00:39:07 ip-172-31-29-215 sessionclean[462958]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 00:39:07 ip-172-31-29-215 sessionclean[462958]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 00:39:07 ip-172-31-29-215 sessionclean[462958]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 00:39:07 ip-172-31-29-215 sessionclean[462958]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 00:39:07 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 00:39:07 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 00:40:01 ip-172-31-29-215 CRON[462998]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 00:45:09 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 00:45:09.5755 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 00:45:09 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 00:45:09.6212 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 00:45:09 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: dfe3b1c1-0b00-4ca9-9db9-5a069af0a0bd
Dec 14 01:00:01 ip-172-31-29-215 CRON[463034]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 01:09:01 ip-172-31-29-215 CRON[463059]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Dec 14 01:09:12 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Dec 14 01:09:12 ip-172-31-29-215 sessionclean[463072]: Cannot load Xdebug - it was already loaded
Dec 14 01:09:12 ip-172-31-29-215 sessionclean[463072]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Dec 14 01:09:12 ip-172-31-29-215 sessionclean[463072]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Dec 14 01:09:12 ip-172-31-29-215 sessionclean[463072]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Dec 14 01:09:12 ip-172-31-29-215 sessionclean[463072]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Dec 14 01:09:12 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Dec 14 01:09:12 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Dec 14 01:11:20 ip-172-31-29-215 systemd[1]: fwupd.service: Succeeded.
Dec 14 01:13:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 01:13:45.6234 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Dec 14 01:13:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: 2025-12-14 01:13:45.6623 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Dec 14 01:13:45 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[3122439]: #011status code: 400, request id: ae1090b7-fe45-49c0-bd04-92940df93c86
Dec 14 01:17:01 ip-172-31-29-215 CRON[463115]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Dec 14 01:20:01 ip-172-31-29-215 CRON[463121]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Dec 14 01:24:33 ip-172-31-29-215 systemd[1]: Starting Daily apt download activities...
Dec 14 01:25:03 ip-172-31-29-215 apt-helper[463153]: E: Sub-process nm-online returned an error code (1)
Dec 14 01:25:04 ip-172-31-29-215 systemd[1]: Starting Update APT News...
Dec 14 01:25:04 ip-172-31-29-215 systemd[1]: Starting Update the local ESM caches...
Dec 14 01:25:04 ip-172-31-29-215 systemd[1]: apt-news.service: Succeeded.
Dec 14 01:25:04 ip-172-31-29-215 systemd[1]: Finished Update APT News.
Dec 14 01:25:05 iSun Dec 14 00:50:07 2025 [pid 463024] CONNECT: Client "135.119.96.214"
Sun Dec 14 00:50:07 2025 [pid 463026] CONNECT: Client "135.119.96.214"
Sun Dec 14 01:34:19 2025 [pid 463957] CONNECT: Client "40.124.174.61"
Sun Dec 14 01:34:29 2025 [pid 463960] CONNECT: Client "40.124.174.61"
Sun Dec 14 01:54:16 2025 [pid 464306] CONNECT: Client "34.76.34.183"
Sun Dec 14 01:54:16 2025 [pid 464310] CONNECT: Client "34.76.34.183"
Sun Dec 14 01:54:16 2025 [pid 464309] [ftp] OK LOGIN: Client "34.76.34.183", anon password "anonymous@"
Sun Dec 14 01:54:17 2025 [pid 464315] CONNECT: Client "34.140.188.44"
Sun Dec 14 01:54:18 2025 [pid 464314] [ftp] OK LOGIN: Client "34.140.188.44", anon password "anonymous@"
Sun Dec 14 06:08:35 2025 [pid 465740] CONNECT: Client "18.207.153.168"
Sun Dec 14 07:47:39 2025 [pid 466598] CONNECT: Client "91.231.89.3"
Sun Dec 14 07:47:40 2025 [pid 466601] CONNECT: Client "91.231.89.108"
Sun Dec 14 09:38:39 2025 [pid 467174] CONNECT: Client "172.202.113.251"
Sun Dec 14 09:38:39 2025 [pid 467177] CONNECT: Client "172.202.113.251"
Sun Dec 14 11:32:54 2025 [pid 467991] CONNECT: Client "216.218.206.66"
Sun Dec 14 12:30:48 2025 [pid 468457] CONNECT: Client "162.142.125.44"
Sun Dec 14 12:30:56 2025 [pid 468460] CONNECT: Client "162.142.125.43"
Sun Dec 14 18:05:36 2025 [pid 470995] CONNECT: Client "66.240.223.202"
Sun Dec 14 18:12:20 2025 [pid 471062] CONNECT: Client "65.49.1.222"
Sun Dec 14 21:18:05 2025 [pid 472287] CONNECT: Client "3.143.33.63"
Sun Dec 14 22:13:50 2025 [pid 472818] CONNECT: Client "198.235.24.161"
Mon Dec 15 03:59:10 2025 [pid 475714] CONNECT: Client "20.15.162.180"
Mon Dec 15 03:59:10 2025 [pid 475717] CONNECT: Client "20.15.162.180"
Mon Dec 15 04:34:41 2025 [pid 475975] CONNECT: Client "45.79.211.97"
Mon Dec 15 06:09:38 2025 [pid 476665] CONNECT: Client "54.226.115.111"
Mon Dec 15 09:17:36 2025 [pid 477902] CONNECT: Client "198.235.24.228"
Mon Dec 15 13:06:15 2025 [pid 481217] CONNECT: Client "71.6.232.29"
Mon Dec 15 13:31:30 2025 [pid 481640] CONNECT: Client "167.94.138.42"
Mon Dec 15 13:54:18 2025 [pid 481884] CONNECT: Client "20.221.72.241"
Mon Dec 15 13:54:18 2025 [pid 481886] CONNECT: Client "20.221.72.241"
Mon Dec 15 21:58:00 2025 [pid 487230] CONNECT: Client "45.82.78.105"
Mon Dec 15 22:41:14 2025 [pid 487760] CONNECT: Client "34.76.44.148"
Mon Dec 15 22:41:14 2025 [pid 487763] CONNECT: Client "34.76.44.148"
Mon Dec 15 22:41:14 2025 [pid 487762] [ftp] OK LOGIN: Client "34.76.44.148", anon password "anonymous@"
Tue Dec 16 00:18:03 2025 [pid 488473] CONNECT: Client "3.144.239.16"
Tue Dec 16 01:15:33 2025 [pid 488676] CONNECT: Client "167.94.146.63"
Tue Dec 16 03:43:15 2025 [pid 489545] CONNECT: Client "198.235.24.2"
Tue Dec 16 04:46:25 2025 [pid 490070] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:46:51 2025 [pid 490077] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:04 2025 [pid 490084] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:06 2025 [pid 490091] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:13 2025 [pid 490103] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:33 2025 [pid 490116] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:34 2025 [pid 490118] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:34 2025 [pid 490120] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:34 2025 [pid 490123] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:34 2025 [pid 490125] CONNECT: Client "74.207.237.5"
Tue Dec 16 04:47:34 2025 [pid 490127] CONNECT: Client "74.207.237.5"
Tue Dec 16 06:09:46 2025 [pid 490428] CONNECT: Client "34.230.71.135"
Tue Dec 16 08:30:18 2025 [pid 491583] CONNECT: Client "20.118.201.169"
Tue Dec 16 08:30:18 2025 [pid 491585] CONNECT: Client "20.118.201.169"
Tue Dec 16 09:38:25 2025 [pid 492158] CONNECT: Client "205.210.31.246"
Tue Dec 16 11:12:36 2025 [pid 493169] CONNECT: Client "185.242.226.19"
Tue Dec 16 11:39:25 2025 [pid 493484] CONNECT: Client "3.134.148.59"
Tue Dec 16 14:28:19 2025 [pid 496771] CONNECT: Client "205.210.31.108"
Tue Dec 16 14:40:15 2025 [pid 497061] CONNECT: Client "87.236.176.22"
Tue Dec 16 17:05:18 2025 [pid 499240] CONNECT: Client "20.80.72.204"
Tue Dec 16 17ticating user root 178.217.173.50 port 58278 [preauth]
Dec 14 01:26:22 ip-172-31-29-215 sshd[463912]: Invalid user sol from 178.217.173.50 port 42644
Dec 14 01:26:23 ip-172-31-29-215 sshd[463912]: Received disconnect from 178.217.173.50 port 42644:11: Bye Bye [preauth]
Dec 14 01:26:23 ip-172-31-29-215 sshd[463912]: Disconnected from invalid user sol 178.217.173.50 port 42644 [preauth]
Dec 14 01:27:00 ip-172-31-29-215 sshd[463914]: Invalid user user from 178.217.173.50 port 55248
Dec 14 01:27:01 ip-172-31-29-215 sshd[463914]: Received disconnect from 178.217.173.50 port 55248:11: Bye Bye [preauth]
Dec 14 01:27:01 ip-172-31-29-215 sshd[463914]: Disconnected from invalid user user 178.217.173.50 port 55248 [preauth]
Dec 14 01:27:10 ip-172-31-29-215 sshd[463916]: Received disconnect from 103.136.43.74 port 49340:11: Bye Bye [preauth]
Dec 14 01:27:10 ip-172-31-29-215 sshd[463916]: Disconnected from authenticating user root 103.136.43.74 port 49340 [preauth]
Dec 14 01:27:41 ip-172-31-29-215 sshd[463918]: Received disconnect from 178.217.173.50 port 39616:11: Bye Bye [preauth]
Dec 14 01:27:41 ip-172-31-29-215 sshd[463918]: Disconnected from authenticating user root 178.217.173.50 port 39616 [preauth]
Dec 14 01:27:48 ip-172-31-29-215 sshd[463920]: Invalid user andy from 103.136.43.74 port 52322
Dec 14 01:27:48 ip-172-31-29-215 sshd[463920]: Received disconnect from 103.136.43.74 port 52322:11: Bye Bye [preauth]
Dec 14 01:27:48 ip-172-31-29-215 sshd[463920]: Disconnected from invalid user andy 103.136.43.74 port 52322 [preauth]
Dec 14 01:28:19 ip-172-31-29-215 sshd[463924]: Invalid user milad from 178.217.173.50 port 52216
Dec 14 01:28:19 ip-172-31-29-215 sshd[463924]: Received disconnect from 178.217.173.50 port 52216:11: Bye Bye [preauth]
Dec 14 01:28:19 ip-172-31-29-215 sshd[463924]: Disconnected from invalid user milad 178.217.173.50 port 52216 [preauth]
Dec 14 01:28:20 ip-172-31-29-215 sshd[463926]: error: kex_exchange_identification: banner line contains invalid characters
Dec 14 01:28:30 ip-172-31-29-215 sshd[463927]: Received disconnect from 103.136.43.74 port 44198:11: Bye Bye [preauth]
Dec 14 01:28:30 ip-172-31-29-215 sshd[463927]: Disconnected from authenticating user root 103.136.43.74 port 44198 [preauth]
Dec 14 01:28:59 ip-172-31-29-215 sshd[463930]: Received disconnect from 178.217.173.50 port 36588:11: Bye Bye [preauth]
Dec 14 01:28:59 ip-172-31-29-215 sshd[463930]: Disconnected from authenticating user root 178.217.173.50 port 36588 [preauth]
Dec 14 01:29:07 ip-172-31-29-215 sshd[463932]: Received disconnect from 103.136.43.74 port 37068:11: Bye Bye [preauth]
Dec 14 01:29:07 ip-172-31-29-215 sshd[463932]: Disconnected from authenticating user root 103.136.43.74 port 37068 [preauth]
Dec 14 01:29:41 ip-172-31-29-215 sshd[463935]: Invalid user andy from 178.217.173.50 port 49188
Dec 14 01:29:41 ip-172-31-29-215 sshd[463935]: Received disconnect from 178.217.173.50 port 49188:11: Bye Bye [preauth]
Dec 14 01:29:41 ip-172-31-29-215 sshd[463935]: Disconnected from invalid user andy 178.217.173.50 port 49188 [preauth]
Dec 14 01:30:18 ip-172-31-29-215 sshd[463937]: Invalid user alireza from 178.217.173.50 port 33560
Dec 14 01:30:18 ip-172-31-29-215 sshd[463937]: Received disconnect from 178.217.173.50 port 33560:11: Bye Bye [preauth]
Dec 14 01:30:18 ip-172-31-29-215 sshd[463937]: Disconnected from invalid user alireza 178.217.173.50 port 33560 [preauth]
Dec 14 01:30:43 ip-172-31-29-215 sshd[463939]: Connection closed by 3.149.59.26 port 38154 [preauth]
Dec 14 01:30:58 ip-172-31-29-215 sshd[463942]: Received disconnect from 178.217.173.50 port 46164:11: Bye Bye [preauth]
Dec 14 01:30:58 ip-172-31-29-215 sshd[463942]: Disconnected from authenticating user root 178.217.173.50 port 46164 [preauth]
Dec 14 01:31:23 ip-172-31-29-215 sshd[463944]: error: kex_exchange_identification: banner line contains invalid characters
Dec 14 01:31:38 ip-172-31-29-215 sshd[463945]: Received disconnect from 178.217.173.50 port 58768:11: Bye Bye [preauth]
Dec 14 01:31:38 ip-172-31-29-215 sshd[463945]: Disconnected from authenticating user root 1like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
165.232.148.14 - - [14/Dec/2025:01:31:03 -0600] "GET /+CSCOL+/Java.jar HTTP/1.1" 404 3539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
165.232.148.14 - - [14/Dec/2025:01:31:04 -0600] "GET /+CSCOE+/logon_forms.js HTTP/1.1" 404 3539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
165.232.148.14 - - [14/Dec/2025:01:31:05 -0600] "GET /+CSCOL+/a1.jar HTTP/1.1" 404 3539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
165.232.148.14 - - [14/Dec/2025:01:31:05 -0600] "GET /+CSCOE+/transfer.js HTTP/1.1" 404 3539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
193.142.147.209 - - [14/Dec/2025:01:32:06 -0600] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 454 "-" "-"
209.97.180.8 - - [14/Dec/2025:01:32:47 -0600] "\x16\x03\x01\x05\xdd\x01" 400 488 "-" "-"
209.97.180.8 - - [14/Dec/2025:01:32:47 -0600] "GET / HTTP/1.1" 200 11192 "-" "-"
209.97.180.8 - - [14/Dec/2025:01:32:48 -0600] "GET / HTTP/1.1" 200 11192 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:48 -0600] "\x16\x03\x01\x05\xe2\x01" 400 488 "-" "-"
128.199.182.55 - - [14/Dec/2025:01:32:48 -0600] "GET / HTTP/1.1" 200 11192 "-" "-"
209.97.180.8 - - [14/Dec/2025:01:32:49 -0600] "POST /graphql HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:49 -0600] "POST /api HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:49 -0600] "POST /api/graphql HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:49 -0600] "GET / HTTP/1.1" 200 11192 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:49 -0600] "POST /graphql/api HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:49 -0600] "POST /api/gql HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:50 -0600] "POST /graphql HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:50 -0600] "POST /api HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:50 -0600] "GET /swagger-ui.html HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:51 -0600] "POST /api/graphql HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:51 -0600] "POST /graphql/api HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:52 -0600] "GET /swagger/index.html HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:52 -0600] "POST /api/gql HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:53 -0600] "GET /swagger/swagger-ui.html HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2025:01:32:53 -0600] "GET /swagger-ui.html HTTP/1.1" 404 461 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
209.97.180.8 - - [14/Dec/2025:01:32:54 -0600] "GET /webjars/swagger-ui/index.html HTTP/1.1" 404 456 "-" "Mozilla/5.0 (l9scan/2.0.731323e2135323e22323e233; +https://leakix.net)"
128.199.182.55 - - [14/Dec/2
 * Introducing Expanded Security Maintenance for Applications.
   Receive updates to over 25,000 software packages with your
   Ubuntu Pro subscription. Free for personal use.

     https://ubuntu.com/aws/pro