"HEAD /db.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:24 -0600] "HEAD /database.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:25 -0600] "HEAD /conn.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:26 -0600] "HEAD /connect.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:26 -0600] "HEAD /config.inc.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:27 -0600] "HEAD /config.php.bak HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:28 -0600] "HEAD /config.old.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:28 -0600] "HEAD /wp-config.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:29 -0600] "HEAD /wp-config.php.bak HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:29 -0600] "HEAD /wp-config.old HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:30 -0600] "HEAD /app/config.php HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:31 -0600] "HEAD /config.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:31 -0600] "HEAD /settings.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:32 -0600] "HEAD /local_settings.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:33 -0600] "HEAD /production.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:33 -0600] "HEAD /dev.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:34 -0600] "HEAD /config/__init__.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:35 -0600] "HEAD /settings/__init__.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:35 -0600] "HEAD /.env.py HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:36 -0600] "HEAD /config.rb HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:36 -0600] "HEAD /database.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:37 -0600] "HEAD /secrets.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:38 -0600] "HEAD /credentials.yml.enc HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:38 -0600] "HEAD /config/database.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:39 -0600] "HEAD /config/secrets.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:40 -0600] "HEAD /application.properties HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:40 -0600] "HEAD /application.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:41 -0600] "HEAD /config.properties HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:41 -0600] "HEAD /database.properties HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:42 -0600] "HEAD /hibernate.cfg.xml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:43 -0600] "HEAD /persistence.xml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:43 -0600] "HEAD /web.config HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:44 -0600] "HEAD /app.config HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:45 -0600] "HEAD /appsettings.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:45 -0600] "HEAD /appsettings.Development.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:46 -0600] "HEAD /connectionStrings.config HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:47 -0600] "HEAD /package.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:47 -0600] "HEAD /.env HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:48 -0600] "HEAD /.env.local HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:48 -0600] "HEAD /.env.production HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:49 -0600] "HEAD /ecosystem.config.js HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:50 -0600] "HEAD /config.go HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:50 -0600] "HEAD /main.go HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:51 -0600] "HEAD /app.toml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:52 -0600] "HEAD /config.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:53 -0600] "HEAD /config.xml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:53 -0600] "HEAD /config.yaml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:54 -0600] "HEAD /config.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:54 -0600] "HEAD /config.ini HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:55 -0600] "HEAD /settings.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:56 -0600] "HEAD /settings.xml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:56 -0600] "HEAD /.gitconfig HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:57 -0600] "HEAD /.git/config HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:58 -0600] "HEAD /database.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:58 -0600] "HEAD /db.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:59 -0600] "HEAD /mongo.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:32:59 -0600] "HEAD /redis.conf HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:00 -0600] "HEAD /.circleci/config.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:01 -0600] "HEAD /.gitlab-ci.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:01 -0600] "HEAD /.travis.yml HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:02 -0600] "HEAD /Jenkinsfile HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:03 -0600] "HEAD /.aws/credentials HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:03 -0600] "HEAD /.aws/config HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:04 -0600] "HEAD /gcloud.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
170.64.184.166 - - [18/Jan/2026:01:33:04 -0600] "HEAD /azure.json HTTP/1.1" 404 3932 "-" "python-httpx/0.28.1"
62.143.186.109 - - [18/Jan/2026:01:44:48 -0600] "\x16\x03\x01\x01X\x01" 400 488 "-" "-"
62.143.186.109 - - [18/Jan/2026:01:44:48 -0600] "GET /cgi-bin/authLogin.cgi?user=admin&plain_pwd=daniel HTTP/1.1" 404 491 "-" "got (https://github.com/sindresorhus/got)"
136.143.177.62 - - [18/Jan/2026:01:50:08 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37206519 "-" "Zoho_Analytics"
124.156.187.113 - - [18/Jan/2026:01:56:42 -0600] "HEAD /Core/Skin/Login.aspx HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
216.180.246.193 - - [18/Jan/2026:02:10:09 -0600] "GET / HTTP/1.0" 200 11192 "-" "'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)'"
216.180.246.193 - - [18/Jan/2026:02:10:35 -0600] "\x16\x03\x01" 400 488agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 453308ef-f26e-45b4-bb77-9dee031cad14
Jan 18 03:00:01 ip-172-31-29-215 CRON[916333]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 18 03:09:01 ip-172-31-29-215 CRON[916358]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 18 03:09:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jan 18 03:09:19 ip-172-31-29-215 sessionclean[916371]: Cannot load Xdebug - it was already loaded
Jan 18 03:09:19 ip-172-31-29-215 sessionclean[916371]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 18 03:09:19 ip-172-31-29-215 sessionclean[916371]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jan 18 03:09:19 ip-172-31-29-215 sessionclean[916371]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jan 18 03:09:19 ip-172-31-29-215 sessionclean[916371]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jan 18 03:09:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jan 18 03:09:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jan 18 03:10:01 ip-172-31-29-215 CRON[916413]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)
Jan 18 03:10:33 ip-172-31-29-215 systemd[1]: Starting Online ext4 Metadata Check for All Filesystems...
Jan 18 03:10:33 ip-172-31-29-215 systemd[1]: e2scrub_all.service: Succeeded.
Jan 18 03:10:33 ip-172-31-29-215 systemd[1]: Finished Online ext4 Metadata Check for All Filesystems.
Jan 18 03:17:01 ip-172-31-29-215 CRON[916418]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jan 18 03:20:01 ip-172-31-29-215 CRON[916423]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 18 03:20:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-18 03:20:37.3552 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jan 18 03:20:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-18 03:20:37.3908 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jan 18 03:20:37 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 14b98d7f-6147-4f81-8ecf-c1404253251d
Jan 18 03:30:01 ip-172-31-29-215 CRON[916450]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron)
Jan 18 03:39:01 ip-172-31-29-215 CRON[916457]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 18 03:39:14 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jan 18 03:39:14 ip-172-31-29-215 sessionclean[916470]: Cannot load Xdebug - it was already loaded
Jan 18 03:39:14 ip-172-31-29-215 sessionclean[916470]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 18 03:39:14 ip-172-31-29-215 sessionclean[91647: session closed for user root
Jan 18 03:40:01 ip-172-31-29-215 CRON[916511]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Jan 18 03:40:01 ip-172-31-29-215 CRON[916511]: pam_unix(cron:session): session closed for user smmsp
Jan 18 03:40:10 ip-172-31-29-215 sshd[916533]: Received disconnect from 35.240.75.51 port 45416:11: Bye Bye [preauth]
Jan 18 03:40:10 ip-172-31-29-215 sshd[916533]: Disconnected from authenticating user root 35.240.75.51 port 45416 [preauth]
Jan 18 03:40:52 ip-172-31-29-215 sshd[916535]: Received disconnect from 115.190.37.201 port 50182:11: Bye Bye [preauth]
Jan 18 03:40:52 ip-172-31-29-215 sshd[916535]: Disconnected from authenticating user root 115.190.37.201 port 50182 [preauth]
Jan 18 03:41:26 ip-172-31-29-215 sshd[916537]: Received disconnect from 45.78.222.4 port 48530:11: Bye Bye [preauth]
Jan 18 03:41:26 ip-172-31-29-215 sshd[916537]: Disconnected from authenticating user root 45.78.222.4 port 48530 [preauth]
Jan 18 03:41:53 ip-172-31-29-215 sshd[916539]: Invalid user infinity from 115.190.37.201 port 45498
Jan 18 03:41:53 ip-172-31-29-215 sshd[916539]: Received disconnect from 115.190.37.201 port 45498:11: Bye Bye [preauth]
Jan 18 03:41:53 ip-172-31-29-215 sshd[916539]: Disconnected from invalid user infinity 115.190.37.201 port 45498 [preauth]
Jan 18 03:42:23 ip-172-31-29-215 sshd[916541]: Received disconnect from 35.240.75.51 port 50930:11: Bye Bye [preauth]
Jan 18 03:42:23 ip-172-31-29-215 sshd[916541]: Disconnected from authenticating user root 35.240.75.51 port 50930 [preauth]
Jan 18 03:42:34 ip-172-31-29-215 sshd[916543]: Received disconnect from 115.190.37.201 port 56738:11: Bye Bye [preauth]
Jan 18 03:42:34 ip-172-31-29-215 sshd[916543]: Disconnected from authenticating user root 115.190.37.201 port 56738 [preauth]
Jan 18 03:42:50 ip-172-31-29-215 sshd[916545]: Invalid user andi from 45.78.222.4 port 33130
Jan 18 03:42:50 ip-172-31-29-215 sshd[916545]: Received disconnect from 45.78.222.4 port 33130:11: Bye Bye [preauth]
Jan 18 03:42:50 ip-172-31-29-215 sshd[916545]: Disconnected from invalid user andi 45.78.222.4 port 33130 [preauth]
Jan 18 03:42:55 ip-172-31-29-215 sshd[916547]: Invalid user peter from 35.240.75.51 port 43044
Jan 18 03:42:55 ip-172-31-29-215 sshd[916547]: Received disconnect from 35.240.75.51 port 43044:11: Bye Bye [preauth]
Jan 18 03:42:55 ip-172-31-29-215 sshd[916547]: Disconnected from invalid user peter 35.240.75.51 port 43044 [preauth]
Jan 18 03:43:29 ip-172-31-29-215 sshd[916549]: Received disconnect from 35.240.75.51 port 33416:11: Bye Bye [preauth]
Jan 18 03:43:29 ip-172-31-29-215 sshd[916549]: Disconnected from authenticating user root 35.240.75.51 port 33416 [preauth]
Jan 18 03:43:32 ip-172-31-29-215 sshd[916551]: Invalid user test from 115.190.37.201 port 60056
Jan 18 03:43:32 ip-172-31-29-215 sshd[916551]: Received disconnect from 115.190.37.201 port 60056:11: Bye Bye [preauth]
Jan 18 03:43:32 ip-172-31-29-215 sshd[916551]: Disconnected from invalid user test 115.190.37.201 port 60056 [preauth]
Jan 18 03:44:00 ip-172-31-29-215 sshd[916553]: Received disconnect from 35.240.75.51 port 48554:11: Bye Bye [preauth]
Jan 18 03:44:00 ip-172-31-29-215 sshd[916553]: Disconnected from authenticating user root 35.240.75.51 port 48554 [preauth]
Jan 18 03:44:04 ip-172-31-29-215 sshd[916555]: Received disconnect from 45.78.222.4 port 57798:11: Bye Bye [preauth]
Jan 18 03:44:04 ip-172-31-29-215 sshd[916555]: Disconnected from authenticating user root 45.78.222.4 port 57798 [preauth]
Jan 18 03:44:11 ip-172-31-29-215 sshd[916558]: Invalid user user from 115.190.37.201 port 33344
Jan 18 03:44:12 ip-172-31-29-215 sshd[916558]: Received disconnect from 115.190.37.201 port 33344:11: Bye Bye [preauth]
Jan 18 03:44:12 ip-172-31-29-215 sshd[916558]: Disconnected from invalid user user 115.190.37.201 port 33344 [preauth]
Jan 18 03:44:35 ip-172-31-29-215 sshd[916560]: Received disconnect from 35.240.75.51 port 49804:11: Bye Bye [preauth]
Jan 18 03:44:35 ip-172-31-29-215 sshd[916560]: Disconnected from authenticating user root 35.240.75.51 port 49804 [preauth]
Jan 18 03:44:53 ip-172-31-29-215 sshd[916562]: Received disconnect from 115.190.37.201 port 58392:11: Bye Bye [preauth]
Jan 18 03:44:53 ip-172-31-29-215 sshd[916562]: Disconnected from authenticating user root 115.190.37.201 port 58392 [preauth]
Jan 18 03:45:11 ip-172-31-29-215 sshd[916564]: Received disconnect from 35.240.75.51 port 43572:11: Bye Bye [preauth]
Jan 18 03:45:11 ip-172-31-29-215 sshd[916564]: Disconnected from authenticating user root 35.240.75.51 port 43572 [preauth]
Jan 18 03:45:17 ip-172-31-29-215 sshd[916566]: Invalid user test from 45.78.222.4 port 40330
Jan 18 03:45:17 ip-172-31-29-215 sshd[916566]: Received disconnect from 45.78.222.4 port 40330:11: Bye Bye [preauth]
Jan 18 03:45:17 ip-172-31-29-215 sshd[916566]: Disconnected from invalid user test 45.78.222.4 port 40330 [preauth]
Jan 18 03:45:31 ip-172-31-29-215 sshd[916568]: Received disconnect from 115.190.37.201 port 53144:11: Bye Bye [preauth]
Jan 18 03:45:31 ip-172-31-29-215 sshd[916568]: Disconnected from authenticating user root 115.190.37.201 port 53144 [preauth]
Jan 18 03:45:44 ip-172-31-29-215 sshd[916570]: Invalid user debian from 35.240.75.51 port 44698
Jan 18 03:45:44 ip-172-31-29-215 sshd[916570]: Received disconnect from 35.240.75.51 port 44698:11: Bye Bye [preauth]
Jan 18 03:45:44 ip-172-31-29-215 sshd[916570]: Disconnected from invalid user debian 35.240.75.51 port 44698 [preauth]
Jan 18 03:46:13 ip-172-31-29-215 sshd[916572]: Invalid user ruben from 115.190.37.201 port 37370
Jan 18 03:46:13 ip-172-31-29-215 sshd[916572]: Received disconnect from 115.190.37.201 port 37370:11: Bye Bye [preauth]
Jan 18 03:46:13 ip-172-31-29-215 sshd[916572]: Disconnected from invalid user ruben 115.190.37.201 port 37370 [preauth]
Jan 18 03:46:18 ip-172-31-29-215 sshd[916574]: Invalid user rocketmq from 35.240.75.51 port 55982
Jan 18 03:46:18 ip-172-31-29-215 sshd[916574]: Received disconnect from 35.240.75.51 port 55982:11: Bye Bye [preauth]
Jan 18 03:46:18 ip-172-31-29-215 sshd[916574]: Disconnected from invalid user rocketmq 35.240.75.51 port 55982 [preauth]
Jan 18 03:46:29 ip-172-31-29-215 sshd[916576]: Invalid user admin1 from 45.78.222.4 port 38552
Jan 18 03:46:29 ip-172-31-29-215 sshd[916576]: Received disconnect from 45.78.222.4 port 38552:11: Bye Bye [preauth]
Jan 18 03:46:29 ip-172-31-29-215 sshd[916576]: Disconnected from invalid user admin1 45.78.222.4 port 38552 [preauth]
Jan 18 03:46:49 ip-172-31-29-215 sshd[916578]: Invalid user ftpuser from 35.240.75.51 port 36424
Jan 18 03:46:49 ip-172-31-29-215 sshd[916578]: Received disconnect from 35.240.75.51 port 36424:11: Bye Bye [preauth]
Jan 18 03:46:49 ip-172-31-29-215 sshd[916578]: Disconnected from invalid user ftpuser 35.240.75.51 port 36424 [preauth]
Jan 18 03:46:56 ip-172-31-29-215 sshd[916580]: Invalid user admin from 115.190.37.201 port 52666
Jan 18 03:46:57 ip-172-31-29-215 sshd[916580]: Received disconnect from 115.190.37.201 port 52666:11: Bye Bye [preauth]
Jan 18 03:46:57 ip-172-31-29-215 sshd[916580]: Disconnected from invalid user admin 115.190.37.201 port 52666 [preauth]
Jan 18 03:47:20 ip-172-31-29-215 sshd[916582]: Invalid user user15 from 35.240.75.51 port 49966
Jan 18 03:47:20 ip-172-31-29-215 sshd[916582]: Received disconnect from 35.240.75.51 port 49966:11: Bye Bye [preauth]
Jan 18 03:47:20 ip-172-31-29-215 sshd[916582]: Disconnected from invalid user user15 35.240.75.51 port 49966 [preauth]
Jan 18 03:47:38 ip-172-31-29-215 sshd[916586]: Invalid user webmin from 45.78.222.4 port 39026
Jan 18 03:47:38 ip-172-31-29-215 sshd[916586]: Received disconnect from 45.78.222.4 port 39026:11: Bye Bye [preauth]
Jan 18 03:47:38 ip-172-31-29-215 sshd[916586]: Disconnected from invalid user webmin 45.78.222.4 port 39026 [preauth]
Jan 18 03:47:51 ip-172-31-29-215 sshd[916589]: Invalid user user123 from 35.240.75.51 port 56104
Jan 18 03:47:51 ip-172-31-29-215 sshd[916589]: Received disconnect from 35.240.75.51 port 56104:11: Bye Bye [preauth]
Jan 18 03:47:51 ip-172-31-29-215 sshd[916589]: Disconnected from invalid user user123 35.240.75.51 port 56104 [preauth]
Jan 18 04:00:01 ip-172-31-29-loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
dy loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
dy loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
dy loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
dy loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot load Xdebug - it was already loaded
Cannot 8/Jan/2026:04:10:30 -0600] "GET / HTTP/1.1" 200 7257 "-" "python-requests/2.32.5"
87.121.84.46 - - [18/Jan/2026:04:15:34 -0600] "GET / HTTP/1.1" 200 11173 "-" "-"
136.143.176.64 - - [18/Jan/2026:04:26:22 -0600] "GET /PCI-test/fetch_trademark_csv.php HTTP/1.1" 200 4030 "-" "Apache-HttpClient/4.5.13 (Java/17.0.17)"
164.92.230.108 - - [18/Jan/2026:04:28:07 -0600] "PROPFIND / HTTP/1.1" 405 4212 "http://3.22.251.217:443/" "-"
34.22.151.18 - - [18/Jan/2026:04:34:25 -0600] "GET / HTTP/1.1" 200 3477 "-" "python-requests/2.32.5"
93.174.93.12 - - [18/Jan/2026:04:34:38 -0600] "GET / HTTP/1.0" 200 11192 "-" "SonyEricssonW995/R1EA Profile/MIDP-2.1 Configuration/CLDC-1.1 UNTRUSTED/1.0"
44.220.188.62 - - [18/Jan/2026:04:44:07 -0600] "GET / HTTP/1.1" 200 3477 "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3109.87 Safari/537.32"
165.227.170.186 - - [18/Jan/2026:04:44:21 -0600] "PROPFIND / HTTP/1.1" 405 4212 "http://3.22.251.217:443/" "-"
136.143.176.60 - - [18/Jan/2026:04:50:32 -0600] "GET /PCI-test/trademarks.csv HTTP/1.1" 200 37206519 "-" "Zoho_Analytics"
91.92.242.51 - - [18/Jan/2026:04:51:51 -0600] "GET / HTTP/1.1" 200 3440 "-" "Go-http-client/1.1"
62.143.186.109 - - [18/Jan/2026:04:54:25 -0600] "\x16\x03\x01\x01X\x01" 400 488 "-" "-"
62.143.186.109 - - [18/Jan/2026:04:54:25 -0600] "GET /cgi-bin/authLogin.cgi?user=admin&plain_pwd=shadow HTTP/1.1" 404 491 "-" "got (https://github.com/sindresorhus/got)"
184.174.24.135 - - [18/Jan/2026:05:04:34 -0600] "GET /.env HTTP/1.1" 404 4228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
184.174.24.135 - - [18/Jan/2026:05:04:36 -0600] "POST / HTTP/1.1" 200 7257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
206.189.158.53 - - [18/Jan/2026:05:20:16 -0600] "PROPFIND / HTTP/1.1" 405 4212 "http://3.22.251.217:443/" "-"
185.242.226.110 - - [18/Jan/2026:05:23:47 -0600] "GET / HTTP/1.1" 200 3421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36"
43.166.128.187 - - [18/Jan/2026:05:38:08 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
82.24.212.138 - - [18/Jan/2026:05:41:21 -0600] "GET /.env HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
82.24.212.138 - - [18/Jan/2026:05:41:21 -0600] "POST / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
175.6.217.4 - - [18/Jan/2026:05:41:35 -0600] "GET / HTTP/1.1" 200 3440 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
164.92.230.108 - - [18/Jan/2026:05:41:36 -0600] "PROPFIND / HTTP/1.1" 405 4212 "http://3.22.251.217:443/" "-"
100.52.3.146 - - [18/Jan/2026:05:42:58 -0600] "GET / HTTP/1.1" 200 7253 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
147.185.133.137 - - [18/Jan/2026:05:43:29 -0600] "GET /.well-known/security.txt HTTP/1.1" 404 435 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
125.231.199.192 - - [18/Jan/2026:05:48:51 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68957.gif HTTP/1.1" 200 22597 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Zoom 3.6.0; Microsoft Outlook 15.0.4569; ms-office; MSOffice 15)"
125.231.199.192 - - [18/Jan/2026:05:48:51 -0600] "GET /imagenesAptusLegal/arochi/LogosArochi/MAR-68983.gif HTTP/1.1" 200 23095 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident-29-215 systemd[1]: Starting Update APT News...
Jan 18 04:19:04 ip-172-31-29-215 systemd[1]: Starting Update the local ESM caches...
Jan 18 04:19:04 ip-172-31-29-215 systemd[1]: apt-news.service: Succeeded.
Jan 18 04:19:04 ip-172-31-29-215 systemd[1]: Finished Update APT News.
Jan 18 04:19:05 ip-172-31-29-215 dbus-daemon[475]: [system] Activating via systemd: service name='org.freedesktop.PackageKit' unit='packagekit.service' requested by ':1.45589' (uid=0 pid=917172 comm="/usr/bin/gdbus call --system --dest org.freedeskto" label="unconfined")
Jan 18 04:19:05 ip-172-31-29-215 systemd[1]: Starting PackageKit Daemon...
Jan 18 04:19:05 ip-172-31-29-215 PackageKit: daemon start
Jan 18 04:19:05 ip-172-31-29-215 dbus-daemon[475]: [system] Successfully activated service 'org.freedesktop.PackageKit'
Jan 18 04:19:05 ip-172-31-29-215 systemd[1]: Started PackageKit Daemon.
Jan 18 04:19:05 ip-172-31-29-215 systemd[1]: esm-cache.service: Succeeded.
Jan 18 04:19:05 ip-172-31-29-215 systemd[1]: Finished Update the local ESM caches.
Jan 18 04:19:16 ip-172-31-29-215 systemd[1]: apt-daily.service: Succeeded.
Jan 18 04:19:16 ip-172-31-29-215 systemd[1]: Finished Daily apt download activities.
Jan 18 04:20:01 ip-172-31-29-215 CRON[917483]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 18 04:24:10 ip-172-31-29-215 PackageKit: daemon quit
Jan 18 04:24:10 ip-172-31-29-215 systemd[1]: packagekit.service: Succeeded.
Jan 18 04:39:01 ip-172-31-29-215 CRON[917733]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jan 18 04:39:19 ip-172-31-29-215 systemd[1]: Starting Clean php session files...
Jan 18 04:39:19 ip-172-31-29-215 sessionclean[917746]: Cannot load Xdebug - it was already loaded
Jan 18 04:39:19 ip-172-31-29-215 sessionclean[917746]: PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_sqlsrv.so' (tried: /usr/lib/php/20190902/pdo_sqlsrv.so (/usr/lib/php/20190902/pdo_sqlsrv.so: undefined symbol: php_pdo_unregister_driver), /usr/lib/php/20190902/pdo_sqlsrv.so.so (/usr/lib/php/20190902/pdo_sqlsrv.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0
Jan 18 04:39:19 ip-172-31-29-215 sessionclean[917746]: PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
Jan 18 04:39:19 ip-172-31-29-215 sessionclean[917746]: PHP Warning:  Module 'mbstring' already loaded in Unknown on line 0
Jan 18 04:39:19 ip-172-31-29-215 sessionclean[917746]: PHP Warning:  Module 'sqlsrv' already loaded in Unknown on line 0
Jan 18 04:39:20 ip-172-31-29-215 systemd[1]: phpsessionclean.service: Succeeded.
Jan 18 04:39:20 ip-172-31-29-215 systemd[1]: Finished Clean php session files.
Jan 18 04:40:01 ip-172-31-29-215 CRON[917791]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 18 04:45:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-18 04:45:07.5641 WARN EC2RoleProvider Failed to connect to Systems Manager with instance profile role credentials. Err: retrieved credentials failed to report to ssm. Error: EC2RoleRequestError: no EC2 instance role found
Jan 18 04:45:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: 2026-01-18 04:45:07.5955 ERROR EC2RoleProvider Failed to connect to Systems Manager with SSM role credentials. error calling RequestManagedInstanceRoleToken: AccessDeniedException: Systems Manager's instance management role is not configured for account: 227937466084
Jan 18 04:45:07 ip-172-31-29-215 amazon-ssm-agent.amazon-ssm-agent[480765]: #011status code: 400, request id: 4972252f-fddd-4590-abce-b0f0068821ba
Jan 18 05:00:01 ip-172-31-29-215 CRON[917824]: (smmsp) CMD (test -x /etc/init.d/sendmail && test -x /usr/share/sendmail/sendmail && test -x /usr/lib/sm.bin/sendmail && /usr/share/sendmail/sendmail cron-msp)
Jan 18 05:09:01 ip-172-31-29-215 CRON[917848]: (root) CMD (  [