Jun 8 02:40:56 localhost polkitd[1043]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:40:56 localhost polkitd[1043]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:40:56 localhost polkitd[1043]: Finished loading, compiling and executing 4 rules Jun 8 02:40:56 localhost polkitd[1043]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:40:58 localhost useradd[1122]: new group: name=cloud-user, GID=1001 Jun 8 02:40:58 localhost useradd[1122]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:40:58 localhost useradd[1122]: add 'cloud-user' to group 'adm' Jun 8 02:40:58 localhost useradd[1122]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:40:58 localhost useradd[1122]: add 'cloud-user' to shadow group 'adm' Jun 8 02:40:58 localhost useradd[1122]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:40:59 localhost sshd[1136]: Server listening on 0.0.0.0 port 22. Jun 8 02:40:59 localhost sshd[1136]: Server listening on :: port 22. Jun 8 02:41:00 localhost sshd[1136]: Received signal 15; terminating. Jun 8 02:41:00 localhost sshd[1284]: Server listening on 0.0.0.0 port 22. Jun 8 02:41:00 localhost sshd[1284]: Server listening on :: port 22. Jun 8 02:41:00 localhost sshd[1411]: Unable to negotiate with 3.222.39.124 port 52286: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:41:00 localhost sshd[1352]: Connection closed by 3.222.39.124 port 23550 [preauth] Jun 8 02:41:00 localhost sshd[1448]: Unable to negotiate with 3.222.39.124 port 20140: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 8 02:41:00 localhost sshd[1430]: Connection closed by 3.222.39.124 port 46770 [preauth] Jun 8 02:41:00 localhost sshd[1485]: Unable to negotiate with 3.222.39.124 port 46692: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:41:00 localhost sshd[1504]: Connection reset by 3.222.39.124 port 16173 [preauth] Jun 8 02:41:00 localhost sshd[1584]: Connection closed by 3.222.39.124 port 9219 [preauth] Jun 8 02:41:00 localhost sshd[1651]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:41:01 localhost sshd[1701]: Unable to negotiate with 3.222.39.124 port 49161: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:42:53 localhost sshd[4183]: Accepted publickey for zuul from 38.102.83.32 port 37472 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:42:53 localhost systemd[4187]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:42:53 localhost sshd[4183]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:34 localhost sudo[4786]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-prdlzozkispmmusrbiycealzaomsqypr ; /usr/bin/python3 Jun 8 02:43:34 localhost sudo[4786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:34 localhost sudo[4786]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:36 localhost sudo[4835]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-delbxkqysqplfaayyzkbrdzinjbuuuon ; /usr/bin/python3 Jun 8 02:43:36 localhost sudo[4835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:36 localhost sudo[4835]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:36 localhost sudo[4878]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xsnlvohmldqrujaosnxfggiaxgyjeyve ; /usr/bin/python3 Jun 8 02:43:36 localhost sudo[4878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:36 localhost sudo[4878]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:51 localhost sudo[5272]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-whafhxxdgfzcfenmqndmxcyjkionsfwt ; /usr/bin/python3 Jun 8 02:43:51 localhost sudo[5272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:52 localhost sudo[5272]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:53 localhost sudo[5293]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wyjmshfxsqlylgjfdjtjwsthhoywfiut ; /usr/bin/python3 Jun 8 02:43:53 localhost sudo[5293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:53 localhost sudo[5293]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:58 localhost sudo[5543]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nbncqbstcgnmcmsvlofxblevbfgtodjb ; /usr/bin/python3 Jun 8 02:43:58 localhost sudo[5543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:58 localhost sudo[5543]: pam_unix(sudo:session): session closed for user root Jun 8 02:43:58 localhost sudo[5586]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imydatgmhncahgxfeznywxdjuxdhplba ; /usr/bin/python3 Jun 8 02:43:58 localhost sudo[5586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:43:58 localhost sudo[5586]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:01 localhost sudo[5680]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pvafbvytifphaiifoqxxdcgezezofjml ; /usr/bin/python3 Jun 8 02:44:01 localhost sudo[5680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:01 localhost sudo[5680]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:01 localhost sudo[5723]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-flwbjnsmksxuihlkdoqeasdprsfltigq ; /usr/bin/python3 Jun 8 02:44:01 localhost sudo[5723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:01 localhost sudo[5723]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:02 localhost sudo[5754]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgdfcpclatklvdivauouozgtkabghtud ; /usr/bin/python3 Jun 8 02:44:02 localhost sudo[5754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:02 localhost sudo[5754]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:25 localhost sudo[5809]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdcvmldieoezinlxyheikyqocmxhiqql ; /usr/bin/python3 Jun 8 02:44:25 localhost sudo[5809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:25 localhost sudo[5809]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:25 localhost sshd[4196]: Received disconnect from 38.102.83.32 port 37472:11: disconnected by user Jun 8 02:45:25 localhost sshd[4196]: Disconnected from user zuul 38.102.83.32 port 37472 Jun 8 02:45:25 localhost sshd[4183]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:49:19 localhost sshd[5823]: Accepted publickey for zuul from 38.102.83.32 port 47106 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 02:49:19 localhost sshd[5823]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:49:32 localhost sudo[5888]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afukcojrjfojucpgnzjmkdmpxkpgutev ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:32 localhost sudo[5888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:32 localhost sudo[5888]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:33 localhost sudo[5931]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ydrisryjfotbqjebhcbghkrefwfctxfy ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:33 localhost sudo[5931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:33 localhost sudo[5931]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:33 localhost sudo[5961]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzmjeqypqlyqvpopyrrcgnerucvgzchd ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:33 localhost sudo[5961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:33 localhost sudo[5961]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:12 localhost sshd[5818]: fatal: Timeout before authentication for 120.87.99.202 port 33144 Jun 8 02:50:21 localhost sshd[6053]: Invalid user admin from 185.156.73.233 port 62926 Jun 8 02:50:21 localhost sshd[6053]: Connection closed by invalid user admin 185.156.73.233 port 62926 [preauth] Jun 8 02:50:29 localhost sudo[6113]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tcjgobmowftwicftdpkaoclqfbmffzea ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:29 localhost sudo[6113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:29 localhost sudo[6113]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:29 localhost sudo[6156]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-clqgrsxmceupaqpprcecerkrfoscrseb ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:29 localhost sudo[6156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:29 localhost sudo[6156]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:30 localhost sshd[5823]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:59:45 localhost sshd[6181]: Accepted publickey for zuul from 38.102.83.32 port 53448 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 02:59:45 localhost sshd[6181]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:45 localhost sudo[6198]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hwscvtscystwopnwwnxmfnrltacxytpm ; /usr/bin/python3 Jun 8 02:59:45 localhost sudo[6198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:45 localhost sudo[6198]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:46 localhost sudo[6217]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wisyqynclohaoemrvpkcnjxgwyifiwsy ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6217]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6217]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:46 localhost sudo[6233]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vrapxaticyibpjxikhowxltksqblwaln ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6233]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6249]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qpcnxhwwsdppwckypzgdwyerarezlkqk ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6249]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6265]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-skcyghfpwpnqdwpzuexefbewlovrzylw ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6265]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6281]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ryeidtpnpxgwqwwsmnheqpcusyunwtpa ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6281]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6329]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bnxjvquasaczpmlvfxkckilpotpwloac ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6329]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6372]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-czvlgupflelqelxcvmqzcopqkgxiidpc ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:50 localhost sudo[6372]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6402]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mwfjwpwvriyddzmbsmaspnubuuaxxfdp ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6402]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:52 localhost sudo[6450]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fyakwfisuxyljxgzsvvbpkbqlvdbqlgn ; /usr/bin/python3 Jun 8 02:59:52 localhost sudo[6450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:53 localhost sudo[6450]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6466]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hodzwgstianvnihgnuryscodwnwwyfcx ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6466]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6484]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gagtmdfcsguovtcxfpulsfvtwdsbpkjo ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6484]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6502]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kbqstebojozgyuqldhzajylsesfmqlmg ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6502]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6520]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-woedfminzokvtxslrkdzuzqyqebkngot ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6520]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:59 localhost sshd[6181]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:20 localhost sshd[6564]: error: kex_exchange_identification: Connection closed by remote host Jun 8 03:00:20 localhost sshd[6564]: Connection closed by 107.155.48.84 port 59874 Jun 8 03:03:09 localhost sshd[6582]: Accepted publickey for zuul from 38.102.83.32 port 48462 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:03:09 localhost sshd[6582]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:03:09 localhost sudo[6599]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smeujzalqrcgbkdgembydgrqfagbmrjg ; /usr/bin/python3 Jun 8 03:03:09 localhost sudo[6599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:03:32 localhost sudo[6599]: pam_unix(sudo:session): session closed for user root Jun 8 03:04:31 localhost sudo[6714]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lnvcekhiqxglrblrfjacambkyukcqsyr ; /usr/bin/python3 Jun 8 03:04:31 localhost sudo[6714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:24 localhost sudo[6714]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:26 localhost sudo[12150]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jawdwquxiskcexjlpjvqacbwgrxkpmwp ; /usr/bin/python3 Jun 8 03:05:26 localhost sudo[12150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:27 localhost sudo[12150]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:28 localhost sshd[6582]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:05:49 localhost sshd[18448]: Invalid user guest from 80.94.95.115 port 42836 Jun 8 03:05:49 localhost sshd[18448]: Connection closed by invalid user guest 80.94.95.115 port 42836 [preauth] Jun 8 03:06:00 localhost sshd[18452]: Connection closed by 38.102.83.12 port 36128 [preauth] Jun 8 03:06:00 localhost sshd[18453]: Connection closed by 38.102.83.12 port 36136 [preauth] Jun 8 03:06:00 localhost sshd[18454]: Unable to negotiate with 38.102.83.12 port 36152: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:00 localhost sshd[18450]: Unable to negotiate with 38.102.83.12 port 36158: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:00 localhost sshd[18451]: Unable to negotiate with 38.102.83.12 port 36166: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:05 localhost sshd[18460]: Accepted publickey for zuul from 38.102.83.32 port 38560 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:06:05 localhost sshd[18460]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:05 localhost sudo[18491]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wtnlpqkhotbwlqvntaksopbhrqesizdg ; /usr/bin/python3 Jun 8 03:06:05 localhost sudo[18491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:06 localhost sudo[18491]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:07 localhost sshd[18460]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:07:33 localhost sshd[18496]: Accepted publickey for zuul from 38.102.83.32 port 42260 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:07:33 localhost sshd[18496]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:33 localhost sudo[18513]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gpphxlhwcpzssnhrntpctzpkueltbhbe ; /usr/bin/python3 Jun 8 03:07:33 localhost sudo[18513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:33 localhost sudo[18513]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:34 localhost sudo[18529]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zuwocipunerxdaflwojijslpxxumkwlt ; /usr/bin/python3 Jun 8 03:07:34 localhost sudo[18529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:34 localhost sudo[18529]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:36 localhost sudo[18579]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vporawzwcbqqckujfgihhhopycgvwywc ; /usr/bin/python3 Jun 8 03:07:36 localhost sudo[18579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:36 localhost sudo[18579]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:36 localhost sudo[18622]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yycbdqpokueaffxpduevjqvgkektncxb ; /usr/bin/python3 Jun 8 03:07:36 localhost sudo[18622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:36 localhost sudo[18622]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:37 localhost sudo[18684]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-guiwtvsyxnrnhofhebavmjwvvwnoasuv ; /usr/bin/python3 Jun 8 03:07:37 localhost sudo[18684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:37 localhost sudo[18684]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:38 localhost sudo[18727]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jfhqvatncxccfkpaodiknihfwboyucap ; /usr/bin/python3 Jun 8 03:07:38 localhost sudo[18727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:38 localhost sudo[18727]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:39 localhost sudo[18757]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-umgrsyqzkqghgsemgpmroptuyadgycsd ; /usr/bin/python3 Jun 8 03:07:39 localhost sudo[18757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:39 localhost sudo[18757]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:44 localhost sshd[18496]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:10:50 localhost sshd[18989]: Accepted publickey for zuul from 38.102.83.12 port 41130 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:10:50 localhost sshd[18989]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:15:50 localhost sshd[18992]: Received disconnect from 38.102.83.12 port 41130:11: disconnected by user Jun 8 03:15:50 localhost sshd[18992]: Disconnected from user zuul 38.102.83.12 port 41130 Jun 8 03:15:50 localhost sshd[18989]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:17:08 localhost sshd[19040]: Invalid user 12345 from 80.94.95.115 port 45910 Jun 8 03:17:08 localhost sshd[19040]: Connection closed by invalid user 12345 80.94.95.115 port 45910 [preauth] Jun 8 03:17:50 localhost sshd[19043]: Received disconnect from 107.155.48.84 port 56792:11: [preauth] Jun 8 03:17:50 localhost sshd[19043]: Disconnected from authenticating user root 107.155.48.84 port 56792 [preauth] Jun 8 03:22:04 localhost sshd[19047]: Accepted publickey for zuul from 38.102.83.32 port 59436 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:22:04 localhost sshd[19047]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:22:10 localhost sudo[19082]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cicupkzazirsjhbmetczbjuxqcfkqapb ; /usr/bin/python3 Jun 8 03:22:10 localhost sudo[19082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:22:12 localhost sudo[19082]: pam_unix(sudo:session): session closed for user root Jun 8 03:22:40 localhost sudo[19102]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tvbbczbkcimewoisomffykebdkzjyefp ; /usr/bin/python3 Jun 8 03:22:40 localhost sudo[19102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:23:08 localhost sudo[19102]: pam_unix(sudo:session): session closed for user root Jun 8 03:23:14 localhost sudo[19261]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rnibwcjwblxqkrtajbhshehymeoiactp ; /usr/bin/python3 Jun 8 03:23:14 localhost sudo[19261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:23:20 localhost sudo[19261]: pam_unix(sudo:session): session closed for user root Jun 8 03:23:35 localhost sudo[19461]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kisbojnwnkibsbwkjwffbqiheonwzdby ; /usr/bin/python3 Jun 8 03:23:35 localhost sudo[19461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:23:50 localhost sudo[19461]: pam_unix(sudo:session): session closed for user root Jun 8 03:24:06 localhost sudo[19796]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-laefvjlengvvnmfskuuxkaewzittrmnt ; /usr/bin/python3 Jun 8 03:24:06 localhost sudo[19796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:24:20 localhost sudo[19796]: pam_unix(sudo:session): session closed for user root Jun 8 03:24:36 localhost sudo[20193]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ttbfcrhezeojqmmhaagfntcfhcgfzhjx ; /usr/bin/python3 Jun 8 03:24:36 localhost sudo[20193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:24:52 localhost sudo[20193]: pam_unix(sudo:session): session closed for user root Jun 8 03:24:58 localhost sudo[20471]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tolpeyicbbnzerlwogecatsudlljowum ; /usr/bin/python3 Jun 8 03:24:58 localhost sudo[20471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:25:00 localhost sudo[20471]: pam_unix(sudo:session): session closed for user root Jun 8 03:25:26 localhost sudo[20490]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eecwmjfijpjrfaoujxyuyydnfaafkpph ; /usr/bin/python3 Jun 8 03:25:26 localhost sudo[20490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:25:39 localhost groupadd[20587]: group added to /etc/group: name=unbound, GID=987 Jun 8 03:25:39 localhost groupadd[20587]: group added to /etc/gshadow: name=unbound Jun 8 03:25:39 localhost groupadd[20587]: new group: name=unbound, GID=987 Jun 8 03:25:39 localhost useradd[20594]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none Jun 8 03:25:48 localhost groupadd[20619]: group added to /etc/group: name=openvswitch, GID=986 Jun 8 03:25:48 localhost groupadd[20619]: group added to /etc/gshadow: name=openvswitch Jun 8 03:25:48 localhost groupadd[20619]: new group: name=openvswitch, GID=986 Jun 8 03:25:48 localhost useradd[20626]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none Jun 8 03:25:48 localhost groupadd[20634]: group added to /etc/group: name=hugetlbfs, GID=985 Jun 8 03:25:48 localhost groupadd[20634]: group added to /etc/gshadow: name=hugetlbfs Jun 8 03:25:48 localhost groupadd[20634]: new group: name=hugetlbfs, GID=985 Jun 8 03:25:48 localhost usermod[20642]: add 'openvswitch' to group 'hugetlbfs' Jun 8 03:25:48 localhost usermod[20642]: add 'openvswitch' to shadow group 'hugetlbfs' Jun 8 03:25:52 localhost sudo[20490]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:27 localhost sudo[21698]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fcymtfhwwmfltkpgdecicoytmtjkwctl ; /usr/bin/python3 Jun 8 03:26:27 localhost sudo[21698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:46 localhost sudo[21698]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:47 localhost sudo[21718]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vosclgfzlnagjsrhexgasrsxqlpgsbti ; /usr/bin/python3 Jun 8 03:26:47 localhost sudo[21718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:47 localhost sudo[21718]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:49 localhost sudo[21766]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gdvriwensguzeypbnwuvvfknjdasllqi ; /usr/bin/python3 Jun 8 03:26:49 localhost sudo[21766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:49 localhost sudo[21766]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:49 localhost sudo[21809]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hihzzzkgksuuoluxuaplvedmpyhxqevk ; /usr/bin/python3 Jun 8 03:26:49 localhost sudo[21809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:49 localhost sudo[21809]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:51 localhost sudo[21839]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jizboliucbjmymdvugaqrsmqdbxbbase ; /usr/bin/python3 Jun 8 03:26:51 localhost sudo[21839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:51 localhost sudo[21839]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:51 localhost sudo[21860]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrmmlbvjxjbvuerxtpcvqxqbmxkmohgq ; /usr/bin/python3 Jun 8 03:26:51 localhost sudo[21860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:51 localhost sudo[21860]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:52 localhost sudo[21880]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgjsgbppkqqbwnkswxclqbdgrjvddvrx ; /usr/bin/python3 Jun 8 03:26:52 localhost sudo[21880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:52 localhost sudo[21880]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:52 localhost sudo[21900]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-daffwixyuvuekevgkcbcgssopklokjnx ; /usr/bin/python3 Jun 8 03:26:52 localhost sudo[21900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:52 localhost sudo[21900]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:52 localhost sudo[21920]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hgfvtcsgfhjfuitaouvekindxsbenazf ; /usr/bin/python3 Jun 8 03:26:52 localhost sudo[21920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:52 localhost sudo[21920]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:55 localhost sudo[21940]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ooxobxcthxefunfxiosffxtvkrbvdcdv ; /usr/bin/python3 Jun 8 03:26:55 localhost sudo[21940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:55 localhost sudo[21940]: pam_unix(sudo:session): session closed for user root Jun 8 03:26:56 localhost sudo[22113]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdetwkzemrkpipkijfbyfklbojvhhkhs ; /usr/bin/python3 Jun 8 03:26:56 localhost sudo[22113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:26:56 localhost sudo[22113]: pam_unix(sudo:session): session closed for user root Jun 8 03:27:56 localhost sshd[19050]: Received disconnect from 38.102.83.32 port 59436:11: disconnected by user Jun 8 03:27:56 localhost sshd[19050]: Disconnected from user zuul 38.102.83.32 port 59436 Jun 8 03:27:56 localhost sshd[19047]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:27:56 localhost sshd[22265]: Accepted publickey for zuul from 38.102.83.32 port 37526 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:27:57 localhost sshd[22265]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:27:57 localhost sudo[22282]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pxomrzcdhdixzgjfitultvjqffxjmazc ; /usr/bin/python3 Jun 8 03:27:57 localhost sudo[22282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:28:42 localhost sshd[23205]: Invalid user squid from 80.94.95.115 port 21232 Jun 8 03:28:42 localhost sshd[23205]: Connection closed by invalid user squid 80.94.95.115 port 21232 [preauth] Jun 8 03:28:49 localhost sudo[22282]: pam_unix(sudo:session): session closed for user root Jun 8 03:28:58 localhost sudo[23766]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srcieofoerxlrbsbhrlqsnecmxmrpmkx ; /usr/bin/python3 Jun 8 03:28:58 localhost sudo[23766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:28:59 localhost sudo[23766]: pam_unix(sudo:session): session closed for user root Jun 8 03:29:05 localhost sshd[22265]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:29:09 localhost sshd[23855]: Accepted publickey for zuul from 38.102.83.32 port 44776 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:29:09 localhost sshd[23855]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:29:10 localhost sshd[23855]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:30:03 localhost sshd[22560]: fatal: Timeout before authentication for 114.218.57.21 port 46896 Jun 8 03:31:19 localhost sshd[23964]: Accepted publickey for zuul from 38.102.83.32 port 34352 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:19 localhost sshd[23964]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:19 localhost sudo[23981]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yschonhwidtkjbqobbdtbtgptabbvhdh ; /usr/bin/python3 Jun 8 03:31:19 localhost sudo[23981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:31:26 localhost groupadd[24046]: group added to /etc/group: name=printadmin, GID=984 Jun 8 03:31:26 localhost groupadd[24046]: group added to /etc/gshadow: name=printadmin Jun 8 03:31:26 localhost groupadd[24046]: new group: name=printadmin, GID=984 Jun 8 03:31:37 localhost sshd[1284]: Received signal 15; terminating. Jun 8 03:31:37 localhost sshd[24121]: Server listening on 0.0.0.0 port 22. Jun 8 03:31:37 localhost sshd[24121]: Server listening on :: port 22. Jun 8 03:31:40 localhost sudo[23981]: pam_unix(sudo:session): session closed for user root Jun 8 03:31:53 localhost sshd[26084]: Accepted publickey for root from 192.168.122.11 port 49056 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:53 localhost systemd[26088]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:31:53 localhost sshd[26084]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:31:53 localhost sshd[26103]: Received disconnect from 192.168.122.11 port 49056:11: disconnected by user Jun 8 03:31:53 localhost sshd[26103]: Disconnected from user root 192.168.122.11 port 49056 Jun 8 03:31:53 localhost sshd[26084]: pam_unix(sshd:session): session closed for user root Jun 8 03:31:54 localhost sshd[26117]: Accepted publickey for root from 192.168.122.11 port 49070 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:54 localhost sshd[26117]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:31:54 localhost sshd[26120]: Received disconnect from 192.168.122.11 port 49070:11: disconnected by user Jun 8 03:31:54 localhost sshd[26120]: Disconnected from user root 192.168.122.11 port 49070 Jun 8 03:31:54 localhost sshd[26117]: pam_unix(sshd:session): session closed for user root Jun 8 03:31:54 localhost sshd[26134]: Accepted publickey for zuul from 192.168.122.11 port 49072 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:54 localhost sshd[26134]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:54 localhost sshd[26137]: Received disconnect from 192.168.122.11 port 49072:11: disconnected by user Jun 8 03:31:54 localhost sshd[26137]: Disconnected from user zuul 192.168.122.11 port 49072 Jun 8 03:31:54 localhost sshd[26134]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:54 localhost sshd[26151]: Accepted publickey for zuul from 192.168.122.11 port 49076 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:54 localhost sshd[26151]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:54 localhost sshd[26154]: Received disconnect from 192.168.122.11 port 49076:11: disconnected by user Jun 8 03:31:54 localhost sshd[26154]: Disconnected from user zuul 192.168.122.11 port 49076 Jun 8 03:31:54 localhost sshd[26151]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:54 localhost sshd[26168]: Accepted publickey for root from 192.168.122.11 port 49086 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:54 localhost sshd[26168]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:31:54 localhost sshd[26171]: Received disconnect from 192.168.122.11 port 49086:11: disconnected by user Jun 8 03:31:54 localhost sshd[26171]: Disconnected from user root 192.168.122.11 port 49086 Jun 8 03:31:54 localhost sshd[26168]: pam_unix(sshd:session): session closed for user root Jun 8 03:31:54 localhost sshd[26185]: Accepted publickey for zuul from 192.168.122.11 port 49102 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:55 localhost sshd[26185]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:55 localhost sshd[26188]: Received disconnect from 192.168.122.11 port 49102:11: disconnected by user Jun 8 03:31:55 localhost sshd[26188]: Disconnected from user zuul 192.168.122.11 port 49102 Jun 8 03:31:55 localhost sshd[26185]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:55 localhost sshd[26202]: Accepted publickey for zuul from 192.168.122.11 port 49106 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:55 localhost sshd[26202]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:55 localhost sshd[26205]: Received disconnect from 192.168.122.11 port 49106:11: disconnected by user Jun 8 03:31:55 localhost sshd[26205]: Disconnected from user zuul 192.168.122.11 port 49106 Jun 8 03:31:55 localhost sshd[26202]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:55 localhost sshd[26219]: Accepted publickey for zuul from 192.168.122.11 port 49114 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:55 localhost sshd[26219]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:55 localhost sshd[26222]: Received disconnect from 192.168.122.11 port 49114:11: disconnected by user Jun 8 03:31:55 localhost sshd[26222]: Disconnected from user zuul 192.168.122.11 port 49114 Jun 8 03:31:55 localhost sshd[26219]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:55 localhost sshd[26236]: Accepted publickey for zuul from 192.168.122.11 port 49120 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:55 localhost sshd[26236]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:55 localhost sshd[26239]: Received disconnect from 192.168.122.11 port 49120:11: disconnected by user Jun 8 03:31:55 localhost sshd[26239]: Disconnected from user zuul 192.168.122.11 port 49120 Jun 8 03:31:55 localhost sshd[26236]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:55 localhost sshd[26253]: Accepted publickey for zuul from 192.168.122.11 port 49122 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:55 localhost sshd[26253]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:56 localhost sshd[26256]: Received disconnect from 192.168.122.11 port 49122:11: disconnected by user Jun 8 03:31:56 localhost sshd[26256]: Disconnected from user zuul 192.168.122.11 port 49122 Jun 8 03:31:56 localhost sshd[26253]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:56 localhost sshd[26270]: Accepted publickey for zuul from 192.168.122.11 port 49130 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:56 localhost sshd[26270]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:56 localhost sshd[26273]: Received disconnect from 192.168.122.11 port 49130:11: disconnected by user Jun 8 03:31:56 localhost sshd[26273]: Disconnected from user zuul 192.168.122.11 port 49130 Jun 8 03:31:56 localhost sshd[26270]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:56 localhost sshd[26287]: Accepted publickey for zuul from 192.168.122.11 port 49140 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:56 localhost sshd[26287]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:56 localhost sshd[26290]: Received disconnect from 192.168.122.11 port 49140:11: disconnected by user Jun 8 03:31:56 localhost sshd[26290]: Disconnected from user zuul 192.168.122.11 port 49140 Jun 8 03:31:56 localhost sshd[26287]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:56 localhost sshd[26304]: Accepted publickey for zuul from 192.168.122.11 port 49152 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:56 localhost sshd[26304]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:56 localhost sshd[26307]: Received disconnect from 192.168.122.11 port 49152:11: disconnected by user Jun 8 03:31:56 localhost sshd[26307]: Disconnected from user zuul 192.168.122.11 port 49152 Jun 8 03:31:56 localhost sshd[26304]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:56 localhost sshd[26321]: Accepted publickey for zuul from 192.168.122.11 port 49154 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:56 localhost sshd[26321]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:56 localhost sshd[26324]: Received disconnect from 192.168.122.11 port 49154:11: disconnected by user Jun 8 03:31:56 localhost sshd[26324]: Disconnected from user zuul 192.168.122.11 port 49154 Jun 8 03:31:56 localhost sshd[26321]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:57 localhost sshd[26338]: Accepted publickey for zuul from 192.168.122.11 port 49164 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:57 localhost sshd[26338]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:57 localhost sshd[26341]: Received disconnect from 192.168.122.11 port 49164:11: disconnected by user Jun 8 03:31:57 localhost sshd[26341]: Disconnected from user zuul 192.168.122.11 port 49164 Jun 8 03:31:57 localhost sshd[26338]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:57 localhost sshd[26355]: Accepted publickey for zuul from 192.168.122.11 port 48800 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:57 localhost sshd[26355]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:57 localhost sshd[26358]: Received disconnect from 192.168.122.11 port 48800:11: disconnected by user Jun 8 03:31:57 localhost sshd[26358]: Disconnected from user zuul 192.168.122.11 port 48800 Jun 8 03:31:57 localhost sshd[26355]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:57 localhost sshd[26372]: Accepted publickey for zuul from 192.168.122.11 port 48802 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:57 localhost sshd[26372]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:57 localhost sshd[26375]: Received disconnect from 192.168.122.11 port 48802:11: disconnected by user Jun 8 03:31:57 localhost sshd[26375]: Disconnected from user zuul 192.168.122.11 port 48802 Jun 8 03:31:57 localhost sshd[26372]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:57 localhost sshd[26389]: Accepted publickey for zuul from 192.168.122.11 port 48804 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:57 localhost sshd[26389]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:31:57 localhost sshd[26392]: Received disconnect from 192.168.122.11 port 48804:11: disconnected by user Jun 8 03:31:57 localhost sshd[26392]: Disconnected from user zuul 192.168.122.11 port 48804 Jun 8 03:31:57 localhost sshd[26389]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:31:57 localhost sshd[26406]: Accepted publickey for root from 192.168.122.11 port 48818 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:31:57 localhost sshd[26406]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:32:03 localhost sshd[23961]: fatal: Timeout before authentication for 114.218.57.21 port 58686 Jun 8 03:32:06 localhost sshd[26409]: Received disconnect from 192.168.122.11 port 48818:11: disconnected by user Jun 8 03:32:06 localhost sshd[26409]: Disconnected from user root 192.168.122.11 port 48818 Jun 8 03:32:06 localhost sshd[26406]: pam_unix(sshd:session): session closed for user root Jun 8 03:32:06 localhost sshd[26620]: Accepted publickey for zuul from 192.168.122.11 port 48832 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 03:32:06 localhost sshd[26620]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:32:06 localhost sudo[26637]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/dnf install -y podman python3-tripleoclient util-linux lvm2 Jun 8 03:32:06 localhost sudo[26637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:32:31 localhost sshd[23962]: fatal: Timeout before authentication for 220.250.52.111 port 52290 Jun 8 03:32:40 localhost sshd[23967]: Received disconnect from 38.102.83.32 port 34352:11: disconnected by user Jun 8 03:32:40 localhost sshd[23967]: Disconnected from user zuul 38.102.83.32 port 34352 Jun 8 03:32:40 localhost sshd[23964]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:33:41 localhost groupadd[28253]: group added to /etc/group: name=heat, GID=187 Jun 8 03:33:41 localhost groupadd[28253]: group added to /etc/gshadow: name=heat Jun 8 03:33:41 localhost groupadd[28253]: new group: name=heat, GID=187 Jun 8 03:33:41 localhost useradd[28260]: new user: name=heat, UID=187, GID=187, home=/var/lib/heat, shell=/sbin/nologin, from=none Jun 8 03:33:43 localhost groupadd[28278]: group added to /etc/group: name=puppet, GID=52 Jun 8 03:33:43 localhost groupadd[28278]: group added to /etc/gshadow: name=puppet Jun 8 03:33:43 localhost groupadd[28278]: new group: name=puppet, GID=52 Jun 8 03:33:43 localhost useradd[28285]: new user: name=puppet, UID=52, GID=52, home=/var/lib/puppet, shell=/sbin/nologin, from=none Jun 8 03:33:53 localhost sudo[26637]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:53 localhost sudo[30899]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test Jun 8 03:33:53 localhost sudo[30899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:54 localhost sudo[30899]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:54 localhost sudo[30903]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test --transient Jun 8 03:33:54 localhost sudo[30903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:54 localhost sudo[30903]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:55 localhost sudo[30930]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mkdir -p /etc/os-net-config Jun 8 03:33:55 localhost sudo[30930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:55 localhost sudo[30930]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:55 localhost sudo[30934]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/tee /etc/cloud/cloud.cfg.d/99-edpm-disable-network-config.cfg Jun 8 03:33:55 localhost sudo[30934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:55 localhost sudo[30934]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:55 localhost sudo[30937]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/systemctl enable network Jun 8 03:33:55 localhost sudo[30937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:56 localhost sudo[30937]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:56 localhost sudo[30975]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /tmp/net_config.yaml /etc/os-net-config/config.yaml Jun 8 03:33:56 localhost sudo[30975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:56 localhost sudo[30975]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:56 localhost sudo[30978]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/os-net-config -c /etc/os-net-config/config.yaml Jun 8 03:33:56 localhost sudo[30978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:57 localhost sudo[30978]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:58 localhost sudo[31019]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test Jun 8 03:33:58 localhost sudo[31019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:33:58 localhost sudo[31019]: pam_unix(sudo:session): session closed for user root Jun 8 03:33:58 localhost sudo[31023]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/openstack tripleo deploy --standalone --standalone-role Undercloud --stack undercloud --local-domain=ooo.test --local-ip=192.168.122.100/24 --templates=/usr/share/openstack-tripleo-heat-templates --networks-file=/usr/share/openstack-tripleo-heat-templates/network_data_undercloud.yaml --heat-native -e /usr/share/openstack-tripleo-heat-templates/environments/undercloud.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/use-dns-for-vips.yaml -e /home/zuul/containers-prepare-parameters.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/masquerade-networks.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-inspector.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/undercloud-remove-novajoin.yaml -e Jun 8 03:33:58 localhost sudo[31023]: zuul : (command continued) /usr/share/openstack-tripleo-heat-templates/environments/disable-telemetry.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/public-tls-undercloud.yaml --public-virtual-ip 192.168.122.99 --control-virtual-ip 192.168.122.99 -e /usr/share/openstack-tripleo-heat-templates/environments/ssl/tls-endpoints-public-ip.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/undercloud-haproxy.yaml --deployment-user zuul --output-dir=/home/zuul/tripleo-deploy/undercloud -e /home/zuul/tripleo-deploy/undercloud/tripleo-config-generated-env-files/undercloud_parameters.yaml --hieradata-override=/home/zuul/hieradata_overrides_undercloud.yaml -e /home/zuul/undercloud-parameter-defaults.yaml --log-file=install-undercloud.log -e /usr/share/openstack-tripleo-heat-templates/undercloud-stack-vstate-dropin.yaml Jun 8 03:33:58 localhost sudo[31023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:34:03 localhost sudo[31041]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/tripleo-undercloud-passwords.yaml Jun 8 03:34:03 localhost sudo[31041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 03:34:03 localhost sudo[31041]: pam_unix(sudo:session): session closed for user root Jun 8 03:34:05 localhost sshd[26614]: fatal: Timeout before authentication for 114.218.57.21 port 42100 Jun 8 03:34:09 localhost sshd[31048]: Invalid user broker from 135.13.28.35 port 38532 Jun 8 03:34:10 localhost sshd[31048]: Received disconnect from 135.13.28.35 port 38532:11: Bye Bye [preauth] Jun 8 03:34:10 localhost sshd[31048]: Disconnected from invalid user broker 135.13.28.35 port 38532 [preauth] Jun 8 03:35:11 localhost sshd[31052]: Invalid user luke from 103.13.206.100 port 55756 Jun 8 03:35:11 localhost sshd[31052]: Received disconnect from 103.13.206.100 port 55756:11: Bye Bye [preauth] Jun 8 03:35:11 localhost sshd[31052]: Disconnected from invalid user luke 103.13.206.100 port 55756 [preauth] Jun 8 03:36:05 localhost sshd[31047]: fatal: Timeout before authentication for 114.218.57.21 port 53414 Jun 8 03:36:33 localhost sshd[31054]: Received disconnect from 146.70.79.47 port 54474:11: Bye Bye [preauth] Jun 8 03:36:33 localhost sshd[31054]: Disconnected from authenticating user root 146.70.79.47 port 54474 [preauth] Jun 8 03:38:20 localhost groupadd[33209]: group added to /etc/group: name=apache, GID=48 Jun 8 03:38:20 localhost groupadd[33209]: group added to /etc/gshadow: name=apache Jun 8 03:38:20 localhost groupadd[33209]: new group: name=apache, GID=48 Jun 8 03:38:20 localhost useradd[33216]: new user: name=apache, UID=48, GID=48, home=/usr/share/httpd, shell=/sbin/nologin, from=none Jun 8 03:38:42 localhost sshd[34088]: Invalid user ubuntu from 107.155.48.84 port 46036 Jun 8 03:38:42 localhost sshd[34088]: Received disconnect from 107.155.48.84 port 46036:11: [preauth] Jun 8 03:38:42 localhost sshd[34088]: Disconnected from invalid user ubuntu 107.155.48.84 port 46036 [preauth] Jun 8 03:39:06 localhost sshd[34274]: error: kex_exchange_identification: read: Connection timed out Jun 8 03:39:06 localhost sshd[34274]: banner exchange: Connection from 118.145.242.91 port 43084: Connection timed out Jun 8 03:39:27 localhost sshd[24121]: Received signal 15; terminating. Jun 8 03:39:27 localhost sshd[34760]: Server listening on 0.0.0.0 port 22. Jun 8 03:39:27 localhost sshd[34760]: Server listening on :: port 22. Jun 8 03:39:31 localhost sshd[32255]: fatal: Timeout before authentication for 117.34.85.168 port 52342 Jun 8 03:39:38 localhost sshd[34959]: Invalid user wmail from 135.13.28.35 port 48584 Jun 8 03:39:38 localhost sshd[34959]: pam_unix(sshd:auth): check pass; user unknown Jun 8 03:39:38 localhost sshd[34959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 03:39:40 localhost sshd[34959]: Failed password for invalid user wmail from 135.13.28.35 port 48584 ssh2 Jun 8 03:39:40 localhost sshd[34959]: Received disconnect from 135.13.28.35 port 48584:11: Bye Bye [preauth] Jun 8 03:39:40 localhost sshd[34959]: Disconnected from invalid user wmail 135.13.28.35 port 48584 [preauth] Jun 8 03:39:55 localhost unix_chkpwd[35128]: password check failed for user (root) Jun 8 03:39:55 localhost sshd[35006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 user=root Jun 8 03:39:57 localhost sshd[35006]: Failed password for root from 185.156.73.233 port 59008 ssh2 Jun 8 03:39:57 localhost sshd[35006]: Connection closed by authenticating user root 185.156.73.233 port 59008 [preauth] Jun 8 07:41:32 undercloud sshd[37271]: Invalid user spc from 135.13.28.35 port 45966 Jun 8 07:41:32 undercloud sshd[37271]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:41:32 undercloud sshd[37271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:41:34 undercloud sshd[37271]: Failed password for invalid user spc from 135.13.28.35 port 45966 ssh2 Jun 8 07:41:37 undercloud sshd[37271]: Received disconnect from 135.13.28.35 port 45966:11: Bye Bye [preauth] Jun 8 07:41:37 undercloud sshd[37271]: Disconnected from invalid user spc 135.13.28.35 port 45966 [preauth] Jun 8 07:42:01 undercloud sshd[37853]: Invalid user relay1 from 103.13.206.100 port 56998 Jun 8 07:42:01 undercloud sshd[37853]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:42:01 undercloud sshd[37853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:42:03 undercloud sshd[37853]: Failed password for invalid user relay1 from 103.13.206.100 port 56998 ssh2 Jun 8 07:42:05 undercloud sshd[37853]: Received disconnect from 103.13.206.100 port 56998:11: Bye Bye [preauth] Jun 8 07:42:05 undercloud sshd[37853]: Disconnected from invalid user relay1 103.13.206.100 port 56998 [preauth] Jun 8 07:42:30 undercloud runuser[40651]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:42:31 undercloud runuser[40651]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:42:31 undercloud runuser[40798]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:42:31 undercloud runuser[40798]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:42:42 undercloud sudo[41601]: memcached : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:42:42 undercloud sudo[41601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42457) Jun 8 07:42:42 undercloud sudo[41601]: pam_unix(sudo:session): session closed for user root Jun 8 07:42:42 undercloud sudo[41807]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:42:42 undercloud sudo[41807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:42:43 undercloud sudo[41807]: pam_unix(sudo:session): session closed for user root Jun 8 07:42:43 undercloud sudo[41945]: rabbitmq : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:42:43 undercloud sudo[41945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42439) Jun 8 07:42:43 undercloud sudo[41945]: pam_unix(sudo:session): session closed for user root Jun 8 07:43:32 undercloud runuser[45124]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:43:33 undercloud runuser[45124]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:43:33 undercloud runuser[45231]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:43:33 undercloud sshd[45073]: Invalid user mobile1 from 135.13.28.35 port 45822 Jun 8 07:43:33 undercloud sshd[45073]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:43:33 undercloud sshd[45073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:43:34 undercloud runuser[45231]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:43:34 undercloud runuser[45377]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:43:35 undercloud runuser[45377]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:43:35 undercloud runuser[45476]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:43:36 undercloud runuser[45476]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:43:36 undercloud runuser[45528]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:43:36 undercloud sshd[45073]: Failed password for invalid user mobile1 from 135.13.28.35 port 45822 ssh2 Jun 8 07:43:36 undercloud runuser[45528]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:43:38 undercloud sshd[45073]: Received disconnect from 135.13.28.35 port 45822:11: Bye Bye [preauth] Jun 8 07:43:38 undercloud sshd[45073]: Disconnected from invalid user mobile1 135.13.28.35 port 45822 [preauth] Jun 8 07:44:00 undercloud sudo[46576]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:00 undercloud sudo[46576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:00 undercloud sudo[46578]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:00 undercloud sudo[46578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:01 undercloud sudo[46578]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:01 undercloud sudo[46576]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:01 undercloud sudo[46627]: root : PWD=/ ; USER=keystone ; COMMAND=/usr/bin/keystone-manage db_sync Jun 8 07:44:01 undercloud sudo[46627]: pam_unix(sudo:session): session opened for user keystone(uid=42425) by (uid=0) Jun 8 07:44:10 undercloud sudo[46627]: pam_unix(sudo:session): session closed for user keystone Jun 8 07:44:11 undercloud sudo[47019]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:11 undercloud sudo[47019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:11 undercloud sudo[47019]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:11 undercloud su[47058]: pam_unix(su:session): session opened for user ironic(uid=42422) by (uid=0) Jun 8 07:44:11 undercloud su[47058]: pam_lastlog(su:session): file /var/log/lastlog created Jun 8 07:44:11 undercloud su[47058]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Jun 8 07:44:13 undercloud su[47058]: pam_unix(su:session): session closed for user ironic Jun 8 07:44:14 undercloud sudo[47333]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:14 undercloud sudo[47333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:14 undercloud sudo[47342]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:14 undercloud sudo[47342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:14 undercloud sudo[47344]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:44:14 undercloud sudo[47333]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:14 undercloud sudo[47342]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:14 undercloud systemd[47378]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:14 undercloud su[47446]: pam_unix(su:session): session opened for user ironic-inspector(uid=42461) by (uid=0) Jun 8 07:44:14 undercloud su[47446]: pam_lastlog(su:session): file /var/log/lastlog created Jun 8 07:44:14 undercloud su[47446]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Jun 8 07:44:14 undercloud sudo[47344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:44:14 undercloud sudo[47344]: pam_unix(sudo:session): session closed for user root Jun 8 07:44:15 undercloud su[47446]: pam_unix(su:session): session closed for user ironic-inspector Jun 8 07:44:58 undercloud sshd[48437]: Invalid user blast from 103.13.206.100 port 40002 Jun 8 07:44:58 undercloud sshd[48437]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:44:58 undercloud sshd[48437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:45:00 undercloud sshd[48437]: Failed password for invalid user blast from 103.13.206.100 port 40002 ssh2 Jun 8 07:45:02 undercloud sshd[48437]: Received disconnect from 103.13.206.100 port 40002:11: Bye Bye [preauth] Jun 8 07:45:02 undercloud sshd[48437]: Disconnected from invalid user blast 103.13.206.100 port 40002 [preauth] Jun 8 07:45:10 undercloud sshd[48572]: Invalid user patrick from 146.70.79.47 port 49742 Jun 8 07:45:10 undercloud sshd[48572]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:45:10 undercloud sshd[48572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:45:12 undercloud sshd[48572]: Failed password for invalid user patrick from 146.70.79.47 port 49742 ssh2 Jun 8 07:45:13 undercloud sshd[48572]: Received disconnect from 146.70.79.47 port 49742:11: Bye Bye [preauth] Jun 8 07:45:13 undercloud sshd[48572]: Disconnected from invalid user patrick 146.70.79.47 port 49742 [preauth] Jun 8 07:45:42 undercloud sshd[49010]: Invalid user barcode from 135.13.28.35 port 39476 Jun 8 07:45:42 undercloud sshd[49010]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:45:42 undercloud sshd[49010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:45:44 undercloud sshd[49010]: Failed password for invalid user barcode from 135.13.28.35 port 39476 ssh2 Jun 8 07:45:45 undercloud sshd[49010]: Received disconnect from 135.13.28.35 port 39476:11: Bye Bye [preauth] Jun 8 07:45:45 undercloud sshd[49010]: Disconnected from invalid user barcode 135.13.28.35 port 39476 [preauth] Jun 8 07:46:32 undercloud sudo[50651]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:32 undercloud sudo[50651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:32 undercloud sudo[50656]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:32 undercloud sudo[50656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:32 undercloud sudo[50656]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:32 undercloud sudo[50651]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:33 undercloud sudo[50992]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:33 undercloud sudo[50992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:33 undercloud sudo[51007]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:33 undercloud sudo[51007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:33 undercloud sudo[50992]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:33 undercloud sudo[51029]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:33 undercloud sudo[51029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:33 undercloud sudo[51045]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:33 undercloud sudo[51045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:33 undercloud sudo[51007]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:33 undercloud sudo[51029]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:33 undercloud sudo[51045]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:34 undercloud sudo[51364]: ironic : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:34 undercloud systemd[51377]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:34 undercloud sudo[51364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42422) Jun 8 07:46:34 undercloud sudo[51364]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:34 undercloud sudo[51437]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:34 undercloud sudo[51437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:34 undercloud sudo[51437]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:35 undercloud sudo[51518]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/neutron-openvswitch-agent --privsep_context neutron.privileged.ovs_vsctl_cmd --privsep_sock_path /tmp/tmpp0mlr6gn/privsep.sock Jun 8 07:46:35 undercloud sudo[51518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:35 undercloud sudo[51544]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:35 undercloud sudo[51544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:35 undercloud sudo[51544]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:35 undercloud sudo[51518]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:35 undercloud sudo[51648]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:35 undercloud sudo[51648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:35 undercloud sudo[51648]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:36 undercloud sudo[51808]: ironic-inspector : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:36 undercloud sudo[51808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42461) Jun 8 07:46:36 undercloud sudo[51808]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:37 undercloud sudo[51906]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Jun 8 07:46:37 undercloud sudo[51906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:46:37 undercloud sudo[51906]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:37 undercloud sudo[51953]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/l3_agent.ini --config-dir /etc/neutron/conf.d/neutron-l3-agent --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmptishjwc2/privsep.sock Jun 8 07:46:37 undercloud sudo[51953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:38 undercloud sudo[51953]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:40 undercloud sudo[52004]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/common --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmpsmh23ymy/privsep.sock Jun 8 07:46:40 undercloud sudo[52004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:40 undercloud sudo[52004]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:41 undercloud sudo[52037]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/common --privsep_context neutron.privileged.ovs_vsctl_cmd --privsep_sock_path /tmp/tmpjcui7euf/privsep.sock Jun 8 07:46:41 undercloud sudo[52037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:46:42 undercloud sudo[52037]: pam_unix(sudo:session): session closed for user root Jun 8 07:46:52 undercloud sshd[50448]: Connection closed by 220.250.52.111 port 45796 [preauth] Jun 8 07:47:08 undercloud sshd[53522]: Invalid user ubadmin from 146.70.79.47 port 58692 Jun 8 07:47:08 undercloud sshd[53522]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:47:08 undercloud sshd[53522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:47:10 undercloud sshd[53522]: Failed password for invalid user ubadmin from 146.70.79.47 port 58692 ssh2 Jun 8 07:47:11 undercloud sshd[53522]: Received disconnect from 146.70.79.47 port 58692:11: Bye Bye [preauth] Jun 8 07:47:11 undercloud sshd[53522]: Disconnected from invalid user ubadmin 146.70.79.47 port 58692 [preauth] Jun 8 07:47:49 undercloud sshd[55198]: Invalid user angel from 135.13.28.35 port 33638 Jun 8 07:47:49 undercloud sshd[55198]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:47:49 undercloud sshd[55198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:47:51 undercloud sshd[55198]: Failed password for invalid user angel from 135.13.28.35 port 33638 ssh2 Jun 8 07:47:52 undercloud sshd[55198]: Received disconnect from 135.13.28.35 port 33638:11: Bye Bye [preauth] Jun 8 07:47:52 undercloud sshd[55198]: Disconnected from invalid user angel 135.13.28.35 port 33638 [preauth] Jun 8 07:47:58 undercloud sshd[55437]: Invalid user bliss from 103.13.206.100 port 51228 Jun 8 07:47:58 undercloud sshd[55437]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:47:58 undercloud sshd[55437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:48:01 undercloud sshd[55437]: Failed password for invalid user bliss from 103.13.206.100 port 51228 ssh2 Jun 8 07:48:03 undercloud sshd[55437]: Received disconnect from 103.13.206.100 port 51228:11: Bye Bye [preauth] Jun 8 07:48:03 undercloud sshd[55437]: Disconnected from invalid user bliss 103.13.206.100 port 51228 [preauth] Jun 8 07:48:07 undercloud sshd[55341]: error: kex_exchange_identification: read: Connection timed out Jun 8 07:48:07 undercloud sshd[55341]: banner exchange: Connection from 220.250.52.111 port 52034: Connection timed out Jun 8 07:48:08 undercloud sudo[55848]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/tripleo-heat-installer-templates Jun 8 07:48:08 undercloud sudo[55848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:08 undercloud sudo[55848]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:08 undercloud sudo[55859]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/undercloud-ansible-tifuam_1 Jun 8 07:48:08 undercloud sudo[55859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:09 undercloud sudo[55859]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:09 undercloud sudo[55864]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/.tripleo Jun 8 07:48:09 undercloud sudo[55864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:09 undercloud sudo[55864]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:09 undercloud sudo[55867]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /etc/openstack/clouds.yaml /home/zuul/.config/openstack Jun 8 07:48:09 undercloud sudo[55867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:09 undercloud sudo[55867]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:09 undercloud sudo[55871]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chmod 0600 /home/zuul/.config/openstack/clouds.yaml Jun 8 07:48:09 undercloud sudo[55871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:09 undercloud sudo[55871]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:09 undercloud sudo[55874]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R 1000:1000 /home/zuul/.config Jun 8 07:48:09 undercloud sudo[55874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Jun 8 07:48:09 undercloud sudo[55874]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:09 undercloud sudo[31023]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:39 undercloud sudo[56505]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mkdir /tmp/ipa-data Jun 8 07:48:39 undercloud sudo[56505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:48:39 undercloud sudo[56505]: pam_unix(sudo:session): session closed for user root Jun 8 07:48:40 undercloud sudo[56508]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman run -d --name freeipa-server-container --sysctl net.ipv6.conf.lo.disable_ipv6=0 --security-opt seccomp=unconfined --ip 10.255.255.25 -e IPA_SERVER_IP=10.255.255.25 -e PASSWORD=fce95318204114530f31f885c9df588f -h ipa.ooo.test -p 53:53/udp -p 53:53 -p 80:80 -p 443:443 -p 389:389 -p 636:636 -p 88:88 -p 464:464 -p 88:88/udp -p 464:464/udp --read-only --tmpfs /run --tmpfs /tmp -v /sys/fs/cgroup:/sys/fs/cgroup:ro -v /tmp/ipa-data:/data:Z quay.io/freeipa/freeipa-server:fedora-43 no-exit -U -r OOO.TEST --setup-dns --no-reverse --no-ntp --no-dnssec-validation --auto-forwarders Jun 8 07:48:40 undercloud sudo[56508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:49:01 undercloud sudo[56508]: pam_unix(sudo:session): session closed for user root Jun 8 07:49:01 undercloud sudo[57800]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/tail -F /tmp/ipa-data/var/log/ipaserver-install.log Jun 8 07:49:01 undercloud sudo[57800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:49:09 undercloud unix_chkpwd[61064]: password check failed for user (root) Jun 8 07:49:09 undercloud sshd[61019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 07:49:11 undercloud sshd[61019]: Failed password for root from 146.70.79.47 port 50254 ssh2 Jun 8 07:49:13 undercloud sshd[61019]: Received disconnect from 146.70.79.47 port 50254:11: Bye Bye [preauth] Jun 8 07:49:13 undercloud sshd[61019]: Disconnected from authenticating user root 146.70.79.47 port 50254 [preauth] Jun 8 07:49:16 undercloud sshd[60749]: error: kex_exchange_identification: read: Connection timed out Jun 8 07:49:16 undercloud sshd[60749]: banner exchange: Connection from 114.218.57.21 port 39858: Connection timed out Jun 8 07:49:31 undercloud sshd[61448]: error: kex_exchange_identification: read: Connection timed out Jun 8 07:49:31 undercloud sshd[61448]: banner exchange: Connection from 220.250.52.111 port 37440: Connection timed out Jun 8 07:50:03 undercloud sshd[62615]: Invalid user validation from 135.13.28.35 port 33212 Jun 8 07:50:03 undercloud sshd[62615]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:50:03 undercloud sshd[62615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:50:05 undercloud sshd[62615]: Failed password for invalid user validation from 135.13.28.35 port 33212 ssh2 Jun 8 07:50:05 undercloud sshd[62615]: Received disconnect from 135.13.28.35 port 33212:11: Bye Bye [preauth] Jun 8 07:50:05 undercloud sshd[62615]: Disconnected from invalid user validation 135.13.28.35 port 33212 [preauth] Jun 8 07:51:06 undercloud sshd[64837]: Invalid user angel from 146.70.79.47 port 38450 Jun 8 07:51:06 undercloud sshd[64837]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:51:06 undercloud sshd[64837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:51:06 undercloud sshd[64841]: Invalid user devm from 103.13.206.100 port 34232 Jun 8 07:51:06 undercloud sshd[64841]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:51:06 undercloud sshd[64841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:51:07 undercloud sshd[64837]: Failed password for invalid user angel from 146.70.79.47 port 38450 ssh2 Jun 8 07:51:08 undercloud sshd[64841]: Failed password for invalid user devm from 103.13.206.100 port 34232 ssh2 Jun 8 07:51:08 undercloud sshd[64837]: Received disconnect from 146.70.79.47 port 38450:11: Bye Bye [preauth] Jun 8 07:51:08 undercloud sshd[64837]: Disconnected from invalid user angel 146.70.79.47 port 38450 [preauth] Jun 8 07:51:09 undercloud sshd[64841]: Received disconnect from 103.13.206.100 port 34232:11: Bye Bye [preauth] Jun 8 07:51:09 undercloud sshd[64841]: Disconnected from invalid user devm 103.13.206.100 port 34232 [preauth] Jun 8 07:51:35 undercloud sudo[65817]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/dhcp_agent.ini --config-dir /etc/neutron/conf.d/neutron-dhcp-agent --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmp8cab00ml/privsep.sock Jun 8 07:51:35 undercloud sudo[65817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:51:36 undercloud sudo[65817]: pam_unix(sudo:session): session closed for user root Jun 8 07:51:37 undercloud sudo[65895]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf Jun 8 07:51:37 undercloud sudo[65895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Jun 8 07:52:15 undercloud sshd[67532]: Invalid user beta2 from 135.13.28.35 port 47030 Jun 8 07:52:15 undercloud sshd[67532]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:52:15 undercloud sshd[67532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:52:15 undercloud sshd[67523]: Invalid user admin from 185.156.73.233 port 18776 Jun 8 07:52:16 undercloud sshd[67523]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:52:16 undercloud sshd[67523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 Jun 8 07:52:17 undercloud sshd[67532]: Failed password for invalid user beta2 from 135.13.28.35 port 47030 ssh2 Jun 8 07:52:18 undercloud sshd[67523]: Failed password for invalid user admin from 185.156.73.233 port 18776 ssh2 Jun 8 07:52:19 undercloud sshd[67532]: Received disconnect from 135.13.28.35 port 47030:11: Bye Bye [preauth] Jun 8 07:52:19 undercloud sshd[67532]: Disconnected from invalid user beta2 135.13.28.35 port 47030 [preauth] Jun 8 07:52:20 undercloud sshd[67523]: Connection closed by invalid user admin 185.156.73.233 port 18776 [preauth] Jun 8 07:52:59 undercloud sshd[69246]: Invalid user felipe from 146.70.79.47 port 47696 Jun 8 07:52:59 undercloud sshd[69246]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:52:59 undercloud sshd[69246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:53:01 undercloud sshd[69246]: Failed password for invalid user felipe from 146.70.79.47 port 47696 ssh2 Jun 8 07:53:03 undercloud sshd[69246]: Received disconnect from 146.70.79.47 port 47696:11: Bye Bye [preauth] Jun 8 07:53:03 undercloud sshd[69246]: Disconnected from invalid user felipe 146.70.79.47 port 47696 [preauth] Jun 8 07:53:47 undercloud sudo[70609]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mv ipa_resolv.conf /etc/resolv.conf Jun 8 07:53:47 undercloud sudo[70609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:53:47 undercloud sudo[70609]: pam_unix(sudo:session): session closed for user root Jun 8 07:53:48 undercloud sudo[57800]: pam_unix(sudo:session): session closed for user root Jun 8 07:53:51 undercloud sshd[70949]: Accepted publickey for zuul from 192.168.122.100 port 41322 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 07:53:51 undercloud sshd[70949]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 07:53:52 undercloud sudo[71070]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pnjajjgspjjjbbcgkpkkaftyeuxaiiqm ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905231.930026-70947-63632956393039/AnsiballZ_setup.py Jun 8 07:53:52 undercloud sudo[71070]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:53:54 undercloud sudo[71070]: pam_unix(sudo:session): session closed for user root Jun 8 07:53:55 undercloud sudo[71360]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-irksnsmuewcynbdelyjjesauomaiyysd ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905235.5613558-71279-124518558028677/AnsiballZ_dnf.py Jun 8 07:53:55 undercloud sudo[71360]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:53:59 undercloud sudo[71360]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:00 undercloud sudo[71566]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dwnqzkaejmcpifkfvrunyspkbndscpca ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905240.0532918-71473-155853150297566/AnsiballZ_ipaclient_test.py Jun 8 07:54:00 undercloud sudo[71566]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:01 undercloud sudo[71566]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:01 undercloud sudo[71681]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tagmnzidapjuwrhyrdbaincwbnjywcwc ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905241.2959833-71596-233398251968341/AnsiballZ_file.py Jun 8 07:54:01 undercloud sudo[71681]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:01 undercloud sudo[71681]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:02 undercloud sudo[71781]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mripvojbqzsuzbknkuznpipnufyhejfg ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905242.108894-71700-274455649733403/AnsiballZ_ipaclient_setup_ntp.py Jun 8 07:54:02 undercloud sudo[71781]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:09 undercloud sudo[71781]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:10 undercloud sshd[71966]: Invalid user ccb from 103.13.206.100 port 45468 Jun 8 07:54:10 undercloud sshd[71966]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:54:10 undercloud sshd[71966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:54:10 undercloud sudo[72095]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zxdyqxbuuirmesixtaevypjlyyydfxjk ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905250.1445878-72014-110201884861365/AnsiballZ_ipaclient_test_keytab.py Jun 8 07:54:10 undercloud sudo[72095]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:11 undercloud sudo[72095]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:11 undercloud sshd[71966]: Failed password for invalid user ccb from 103.13.206.100 port 45468 ssh2 Jun 8 07:54:12 undercloud sudo[72233]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ijsybnkaqinpntwajvyhlwozffccbqtb ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905252.3392463-72152-247842974799610/AnsiballZ_ipaclient_set_hostname.py Jun 8 07:54:12 undercloud sudo[72233]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:13 undercloud sudo[72233]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:13 undercloud sshd[71966]: Received disconnect from 103.13.206.100 port 45468:11: Bye Bye [preauth] Jun 8 07:54:13 undercloud sshd[71966]: Disconnected from invalid user ccb 103.13.206.100 port 45468 [preauth] Jun 8 07:54:14 undercloud sudo[72344]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ctrudhsxaxbysywyznnqvialddznmyee ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905253.6582992-72259-53685289950941/AnsiballZ_ipaclient_temp_krb5.py Jun 8 07:54:14 undercloud sudo[72344]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:14 undercloud sudo[72344]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:15 undercloud sudo[72453]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-crfxevlbhlbxiutooskgkottnftimkka ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905254.8871448-72368-55471975291939/AnsiballZ_ipaclient_join.py Jun 8 07:54:15 undercloud sudo[72453]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:18 undercloud sudo[72453]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:19 undercloud sudo[72719]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lmrcdmuetoqilipczgzmudgeiqdbxssz ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905258.774802-72634-28895008329375/AnsiballZ_ipaclient_ipa_conf.py Jun 8 07:54:19 undercloud sudo[72719]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:19 undercloud sudo[72719]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:20 undercloud sudo[72961]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xibdsklhshnoomdtbpmbuiqcojcoeajz ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905259.9490263-72876-142781866856831/AnsiballZ_ipaclient_setup_sssd.py Jun 8 07:54:20 undercloud sudo[72961]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:20 undercloud sshd[72859]: Invalid user yes from 135.13.28.35 port 39530 Jun 8 07:54:20 undercloud sshd[72859]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:54:20 undercloud sshd[72859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:54:21 undercloud sudo[72961]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:21 undercloud sshd[70118]: error: kex_exchange_identification: read: Connection timed out Jun 8 07:54:21 undercloud sshd[70118]: banner exchange: Connection from 220.250.52.111 port 33848: Connection timed out Jun 8 07:54:21 undercloud sudo[73066]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xshamvhvydstulcuyhglaunhovzgwzki ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905261.18384-72985-202621424077459/AnsiballZ_ipaclient_api.py Jun 8 07:54:21 undercloud sudo[73066]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:22 undercloud sshd[72859]: Failed password for invalid user yes from 135.13.28.35 port 39530 ssh2 Jun 8 07:54:23 undercloud sudo[73066]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:24 undercloud sshd[72859]: Received disconnect from 135.13.28.35 port 39530:11: Bye Bye [preauth] Jun 8 07:54:24 undercloud sshd[72859]: Disconnected from invalid user yes 135.13.28.35 port 39530 [preauth] Jun 8 07:54:24 undercloud sudo[73193]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gpjttbcqymvqzwtbyzfiigtymhwjwqjd ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905264.2961988-73110-63392504436981/AnsiballZ_ipaclient_setup_nss.py Jun 8 07:54:24 undercloud sudo[73193]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:30 undercloud sudo[73193]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:30 undercloud sudo[73477]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eoacpubovcoevpvunbusxkoouwofczvo ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905270.30281-73390-174542057322967/AnsiballZ_ipaclient_setup_ssh.py Jun 8 07:54:30 undercloud sudo[73477]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:31 undercloud sshd[34760]: Received signal 15; terminating. Jun 8 07:54:31 undercloud sshd[73489]: Server listening on 0.0.0.0 port 22. Jun 8 07:54:31 undercloud sshd[73489]: Server listening on :: port 22. Jun 8 07:54:31 undercloud sudo[73477]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:31 undercloud sudo[73604]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kmcphzyilmctjkejmgpirmpkjefvlbwr ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905271.582321-73513-53239043857323/AnsiballZ_ipaclient_setup_automount.py Jun 8 07:54:31 undercloud sudo[73604]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:32 undercloud sudo[73604]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:33 undercloud sudo[73723]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-texyddlmlkrwvijdxhhtvqbtuqlkobdd ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905272.7883012-73632-26250939530953/AnsiballZ_ipaclient_setup_nis.py Jun 8 07:54:33 undercloud sudo[73723]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:34 undercloud sudo[73723]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:34 undercloud sudo[73888]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahjyszujgrozczzkhonwqnikjykrtzvs ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905274.3696208-73793-201667867302822/AnsiballZ_file.py Jun 8 07:54:34 undercloud sudo[73888]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:34 undercloud sudo[73888]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:35 undercloud sudo[74004]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dqkfgnzndkoqckqkqblaibzaccfeprsy ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905275.032311-73909-275098183357069/AnsiballZ_ipaclient_setup_krb5.py Jun 8 07:54:35 undercloud sudo[74004]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:36 undercloud sudo[74004]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:36 undercloud sudo[74139]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nughuzwvrhnnoxwhpfnrfrvpqavgzarp ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905276.346833-74030-128104972264890/AnsiballZ_ipaclient_setup_certmonger.py Jun 8 07:54:36 undercloud sudo[74139]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:37 undercloud sudo[74139]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:38 undercloud sudo[74300]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vewlzhsuqwoldqrwuvizdgtxhyfqboeu ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905277.7333355-74209-19808555776689/AnsiballZ_file.py Jun 8 07:54:38 undercloud sudo[74300]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:38 undercloud sudo[74300]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:38 undercloud sudo[74416]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnhyfxexoqgknaedlizaeyxfazujuovq ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905278.3646538-74321-167727050329692/AnsiballZ_file.py Jun 8 07:54:38 undercloud sudo[74416]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:38 undercloud sudo[74416]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:39 undercloud sudo[74594]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovrwaxxwopkibnaoefkuhgwysrsxpoyt ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905279.031238-74494-114053659826653/AnsiballZ_file.py Jun 8 07:54:39 undercloud sudo[74594]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Jun 8 07:54:39 undercloud sudo[74594]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:39 undercloud sudo[74635]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-okdgnpfmgwmjrbjvxckaxopyepzovthw ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905279.713256-74623-215389018634666/AnsiballZ_setup.py Jun 8 07:54:39 undercloud sudo[74635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:42 undercloud sudo[74635]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:43 undercloud sudo[74862]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-erpfvweuahqkagkgkhjrwjnhdhtqczwf ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905283.175877-74850-203379874034801/AnsiballZ_user.py Jun 8 07:54:43 undercloud sudo[74862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:43 undercloud useradd[74868]: new group: name=tripleo-admin, GID=1002 Jun 8 07:54:43 undercloud useradd[74868]: new user: name=tripleo-admin, UID=1002, GID=1002, home=/home/tripleo-admin, shell=/bin/bash, from=none Jun 8 07:54:43 undercloud sudo[74862]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:44 undercloud sudo[74894]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-buzaoriknbbxgctyvyjfvibqseqpgwgt ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905284.022442-74882-130028360858094/AnsiballZ_stat.py Jun 8 07:54:44 undercloud sudo[74894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:44 undercloud sudo[74894]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:44 undercloud sudo[74902]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rhwlmzcfalnxhujixkrdozwpjvdbxqmn ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905284.022442-74882-130028360858094/AnsiballZ_copy.py Jun 8 07:54:44 undercloud sudo[74902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:44 undercloud sudo[74902]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:44 undercloud sudo[74924]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iugtlmaefuhxfmvyupqgmthrespkzaxb ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905284.775666-74912-242819862434912/AnsiballZ_file.py Jun 8 07:54:44 undercloud sudo[74924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:44 undercloud sudo[74924]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:45 undercloud sudo[74942]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vvvlgdmfmzqtiejxvljptlwctdawfnlp ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905285.0718856-74930-191815707168806/AnsiballZ_file.py Jun 8 07:54:45 undercloud sudo[74942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:45 undercloud sudo[74942]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:45 undercloud sudo[74960]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wxdruyzvfpjruybdibcylyyzkdfsyxlk ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905285.422734-74948-79707368866527/AnsiballZ_file.py Jun 8 07:54:45 undercloud sudo[74960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:45 undercloud sudo[74960]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:46 undercloud sudo[74993]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vnkxtntjvavqcejvbwglolzggmsotgzc ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905286.1080143-74981-126190729270534/AnsiballZ_setup.py Jun 8 07:54:46 undercloud sudo[74993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:48 undercloud sshd[75141]: Invalid user foundry from 146.70.79.47 port 51012 Jun 8 07:54:48 undercloud sshd[75141]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:54:48 undercloud sshd[75141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:54:48 undercloud sudo[74993]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:49 undercloud sudo[75331]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bubhotnhgfvboncttjxynzdoxkvrkmtc ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905288.9541261-75319-276617149877239/AnsiballZ_command.py Jun 8 07:54:49 undercloud sudo[75331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:49 undercloud sudo[75331]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:49 undercloud sudo[75476]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkmjsharusxcoekinudrpfacxlywbdrh ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905289.7777662-75397-130331591645675/AnsiballZ_ipapermission.py Jun 8 07:54:49 undercloud sudo[75476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:49 undercloud sshd[75141]: Failed password for invalid user foundry from 146.70.79.47 port 51012 ssh2 Jun 8 07:54:50 undercloud sshd[75141]: Received disconnect from 146.70.79.47 port 51012:11: Bye Bye [preauth] Jun 8 07:54:50 undercloud sshd[75141]: Disconnected from invalid user foundry 146.70.79.47 port 51012 [preauth] Jun 8 07:54:51 undercloud sudo[75476]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:51 undercloud sudo[75547]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zrymdxqvpgupqlblyuvipqcqbqmbwest ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905291.281401-75397-87236680550915/AnsiballZ_ipapermission.py Jun 8 07:54:51 undercloud sudo[75547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:52 undercloud sudo[75547]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:52 undercloud sudo[75567]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-luyehlibslnygfmszicdskorozxcwwaj ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905292.791792-75397-167179269405386/AnsiballZ_ipapermission.py Jun 8 07:54:52 undercloud sudo[75567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:53 undercloud sudo[75567]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:54 undercloud sudo[75592]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zhuhtrfdaqtzzezkjofkfmghzzuqmsyd ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905294.047209-75397-215491498553570/AnsiballZ_ipapermission.py Jun 8 07:54:54 undercloud sudo[75592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:55 undercloud sudo[75592]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:55 undercloud sudo[75613]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sxkuzoriorxhexjsdxttkbrlcxrgzjdc ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905295.570554-75601-244491326629206/AnsiballZ_ipaprivilege.py Jun 8 07:54:55 undercloud sudo[75613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:57 undercloud sudo[75613]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:57 undercloud sudo[75642]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kiqhyatozdtstvenasxbnolujtyejbjw ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905297.2878878-75630-240615280391256/AnsiballZ_ipaprivilege.py Jun 8 07:54:57 undercloud sudo[75642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:54:58 undercloud sudo[75642]: pam_unix(sudo:session): session closed for user root Jun 8 07:54:58 undercloud sudo[75663]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aohozpqalulaerqnagwqosjobokxuoya ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905298.8083384-75630-158093898096629/AnsiballZ_ipaprivilege.py Jun 8 07:54:58 undercloud sudo[75663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:00 undercloud sudo[75663]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:00 undercloud sudo[75689]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iidnaokquwzfcbbobzvpqgeqqssfuugb ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905300.321487-75630-190529440742252/AnsiballZ_ipaprivilege.py Jun 8 07:55:00 undercloud sudo[75689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:01 undercloud sudo[75689]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:01 undercloud sudo[75779]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hemukqehxfoinrojczrboxxwpyephaux ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905301.8495991-75630-82448468961129/AnsiballZ_ipaprivilege.py Jun 8 07:55:01 undercloud sudo[75779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:03 undercloud sudo[75779]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:03 undercloud sudo[75803]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qddfxdhhlrqiyglzmdpaznlcgpuvolot ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905303.3989112-75630-255364627018140/AnsiballZ_ipaprivilege.py Jun 8 07:55:03 undercloud sudo[75803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:04 undercloud sudo[75803]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:04 undercloud sudo[75823]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rhzmiqsrkfmabgbpcaltxgvxzcwgbotp ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905304.6813414-75630-181111857428974/AnsiballZ_ipaprivilege.py Jun 8 07:55:04 undercloud sudo[75823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:04 undercloud sshd[75574]: error: kex_exchange_identification: read: Connection timed out Jun 8 07:55:04 undercloud sshd[75574]: banner exchange: Connection from 220.250.52.111 port 36950: Connection timed out Jun 8 07:55:05 undercloud sudo[75823]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:05 undercloud sudo[75843]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-babyafturgjprmfevkhzudasekswvcol ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905305.7322366-75630-192434022634916/AnsiballZ_ipaprivilege.py Jun 8 07:55:05 undercloud sudo[75843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:07 undercloud sudo[75843]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:07 undercloud sudo[75867]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zsosocgmaymwalnmfvszzzfciwgqziqo ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905307.2783008-75630-131982594556495/AnsiballZ_ipaprivilege.py Jun 8 07:55:07 undercloud sudo[75867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:08 undercloud sudo[75867]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:08 undercloud sudo[75906]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nczvkjjuwgawjfvefhlttqvhzpdftkaa ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905308.5222077-75630-146025341133678/AnsiballZ_ipaprivilege.py Jun 8 07:55:08 undercloud sudo[75906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:09 undercloud sudo[75906]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:09 undercloud sudo[75987]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aajjsxoyuraeaetmwfqroofwuefktebg ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905309.7780113-75630-235308498696803/AnsiballZ_ipaprivilege.py Jun 8 07:55:09 undercloud sudo[75987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:11 undercloud sudo[75987]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:11 undercloud sudo[76018]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ypdwqsupixyqnhtvjamwekaueyvhphse ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905311.4176261-75630-165308609718720/AnsiballZ_ipaprivilege.py Jun 8 07:55:11 undercloud sudo[76018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:13 undercloud sudo[76018]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:13 undercloud sudo[76060]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rpxderxzcutbkwlvptbijdjivqqowshq ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905313.0637348-75630-140019728194845/AnsiballZ_ipaprivilege.py Jun 8 07:55:13 undercloud sudo[76060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:14 undercloud sudo[76060]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:14 undercloud sudo[76080]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-picrbdxffyjzodgaaakskbpovpmckjwo ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905314.0635543-75630-175951011691408/AnsiballZ_ipaprivilege.py Jun 8 07:55:14 undercloud sudo[76080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:15 undercloud sudo[76080]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:15 undercloud sudo[76100]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-neqgfwdxiayowwxhvmljykcfcithsino ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905315.3044574-75630-225760289719800/AnsiballZ_ipaprivilege.py Jun 8 07:55:15 undercloud sudo[76100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:16 undercloud sudo[76100]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:16 undercloud sudo[76218]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jbhouroptfsxmvbvjjaooowvnlbsnxyt ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905316.8387916-75630-187287255374953/AnsiballZ_ipaprivilege.py Jun 8 07:55:16 undercloud sudo[76218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:17 undercloud sudo[76218]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:17 undercloud sudo[76275]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kdqcfhkkyygohyntazmtqypdtoitofit ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905317.7368093-75630-123112367030172/AnsiballZ_ipaprivilege.py Jun 8 07:55:17 undercloud sudo[76275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:19 undercloud sudo[76275]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:19 undercloud sudo[76297]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xogpnvaifdmqugrcwuqcpxzrkiimypbh ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905319.2576268-75630-68944504103193/AnsiballZ_ipaprivilege.py Jun 8 07:55:19 undercloud sudo[76297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:20 undercloud sudo[76297]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:20 undercloud sudo[76317]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cuvessjdqjvyvcjsejoioebqwmuuvqbl ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905320.483792-75630-30239518605734/AnsiballZ_ipaprivilege.py Jun 8 07:55:20 undercloud sudo[76317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:21 undercloud sudo[76317]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:21 undercloud sudo[76476]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-donzhmbmshejqpevdnwoddvafyxnjqas ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905321.7678387-75630-247244927676488/AnsiballZ_ipaprivilege.py Jun 8 07:55:21 undercloud sudo[76476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:23 undercloud sudo[76476]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:23 undercloud sudo[76496]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sntqqfnhbpygdiqvmmcxpqxhpbqlnjew ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905323.295659-75630-32072747579740/AnsiballZ_ipaprivilege.py Jun 8 07:55:23 undercloud sudo[76496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:24 undercloud sudo[76496]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:24 undercloud sudo[76520]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkkdghwlluyssfecjhksqtarjhpnzjxh ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905324.5679579-76505-620663695268/AnsiballZ_iparole.py Jun 8 07:55:24 undercloud sudo[76520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:26 undercloud sudo[76520]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:26 undercloud sudo[76545]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-czuvjzrcqmvyiybljiemqbzmigwhzsts ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905326.5998507-76533-205733669579371/AnsiballZ_ipaservice.py Jun 8 07:55:26 undercloud sudo[76545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:27 undercloud sudo[76545]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:27 undercloud sudo[76568]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xctgtnfieupjsglciyquraesrjkfprpy ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905327.7965348-76555-17744272788769/AnsiballZ_iparole.py Jun 8 07:55:27 undercloud sudo[76568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:28 undercloud sudo[76568]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:28 undercloud sudo[76592]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uvelhrfrxbiabqmxtrorjcxnxqcehpal ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905328.8308187-76577-254458227936097/AnsiballZ_iparole.py Jun 8 07:55:28 undercloud sudo[76592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:30 undercloud sudo[76592]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:30 undercloud sudo[76619]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tkyingftqzmdbmakiqijehobivficjia ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905330.1810853-76607-36480174528709/AnsiballZ_file.py Jun 8 07:55:30 undercloud sudo[76619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:30 undercloud sudo[76619]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:30 undercloud sudo[76637]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tcwcazznrtqzcwyeypbiqfvhjoomwkze ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905330.533655-76625-276450490878151/AnsiballZ_command.py Jun 8 07:55:30 undercloud sudo[76637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:30 undercloud sudo[76637]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:31 undercloud sudo[76728]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dshkfsfjynjpoeggcqpyctpdfkpkoppp ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1780905331.0854237-76716-240785162407458/AnsiballZ_file.py Jun 8 07:55:31 undercloud sudo[76728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:31 undercloud sudo[76728]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:39 undercloud sudo[76801]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::default_user Jun 8 07:55:39 undercloud sudo[76801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:39 undercloud sudo[76801]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:39 undercloud sudo[76804]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::default_pass Jun 8 07:55:39 undercloud sudo[76804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:39 undercloud sshd[70955]: Received disconnect from 192.168.122.100 port 41322:11: disconnected by user Jun 8 07:55:39 undercloud sshd[70955]: Disconnected from user zuul 192.168.122.100 port 41322 Jun 8 07:55:39 undercloud sshd[70949]: pam_unix(sshd:session): session closed for user zuul Jun 8 07:55:39 undercloud sudo[76804]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:39 undercloud sudo[76807]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera fqdn_ctlplane Jun 8 07:55:39 undercloud sudo[76807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:39 undercloud sudo[76807]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:39 undercloud sudo[76810]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::port Jun 8 07:55:39 undercloud sudo[76810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:39 undercloud sudo[76810]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:39 undercloud sudo[76813]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera controller_virtual_ip Jun 8 07:55:39 undercloud sudo[76813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:40 undercloud sudo[76813]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:40 undercloud sudo[76817]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera ctlplane Jun 8 07:55:40 undercloud sudo[76817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:40 undercloud sudo[76817]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:40 undercloud sudo[76824]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -h 192.168.122.100 -e show databases; Jun 8 07:55:40 undercloud sudo[76824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:40 undercloud sudo[76824]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:40 undercloud sudo[76853]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root rabbitmq rabbitmqctl list_queues Jun 8 07:55:40 undercloud sudo[76853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:40 undercloud runuser[76902]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Jun 8 07:55:41 undercloud runuser[76902]: pam_unix(runuser:session): session closed for user rabbitmq Jun 8 07:55:41 undercloud sudo[76853]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:41 undercloud sudo[77001]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e show databases like "heat" Jun 8 07:55:41 undercloud sudo[77001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:41 undercloud sudo[77001]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:41 undercloud sudo[77039]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e create database heat Jun 8 07:55:41 undercloud sudo[77039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:41 undercloud sudo[77039]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:41 undercloud sudo[77072]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e create user if not exists 'heat'@'%' identified by 'heat' Jun 8 07:55:41 undercloud sudo[77072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:41 undercloud sudo[77072]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:41 undercloud sudo[77116]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql heat -e grant all privileges on heat.* to 'heat'@'%' Jun 8 07:55:41 undercloud sudo[77116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:42 undercloud sudo[77116]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:42 undercloud sudo[77159]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e flush privileges; Jun 8 07:55:42 undercloud sudo[77159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:42 undercloud sudo[77159]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:42 undercloud sudo[77195]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman run --rm --user heat --net host --volume /home/zuul/overcloud-deploy/overcloud/heat-launcher/heat.conf:/etc/heat/heat.conf:z --volume /home/zuul/overcloud-deploy/overcloud/heat-launcher:/home/zuul/overcloud-deploy/overcloud/heat-launcher:z localhost/tripleo/openstack-heat-api:ephemeral heat-manage db_sync Jun 8 07:55:42 undercloud sudo[77195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:44 undercloud sudo[77195]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:44 undercloud sudo[77241]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect --format "{{.State}}" ephemeral-heat Jun 8 07:55:44 undercloud sudo[77241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:44 undercloud sudo[77241]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:44 undercloud sudo[77255]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman play kube /home/zuul/overcloud-deploy/overcloud/heat-launcher/heat-pod.yaml Jun 8 07:55:44 undercloud sudo[77255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:46 undercloud sudo[77255]: pam_unix(sudo:session): session closed for user root Jun 8 07:55:47 undercloud sudo[77454]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec rabbitmq rabbitmqctl list_queues Jun 8 07:55:47 undercloud sudo[77454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:55:48 undercloud sudo[77454]: pam_unix(sudo:session): session closed for user root Jun 8 07:56:21 undercloud sshd[78040]: Connection closed by 220.250.52.111 port 60380 [preauth] Jun 8 07:56:27 undercloud sshd[78395]: Invalid user association from 135.13.28.35 port 59478 Jun 8 07:56:27 undercloud sshd[78395]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:56:27 undercloud sshd[78395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:56:29 undercloud sshd[78395]: Failed password for invalid user association from 135.13.28.35 port 59478 ssh2 Jun 8 07:56:29 undercloud sshd[78395]: Received disconnect from 135.13.28.35 port 59478:11: Bye Bye [preauth] Jun 8 07:56:29 undercloud sshd[78395]: Disconnected from invalid user association 135.13.28.35 port 59478 [preauth] Jun 8 07:56:40 undercloud unix_chkpwd[78549]: password check failed for user (root) Jun 8 07:56:40 undercloud sshd[78523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 07:56:42 undercloud sshd[78523]: Failed password for root from 146.70.79.47 port 53222 ssh2 Jun 8 07:56:43 undercloud sshd[78523]: Received disconnect from 146.70.79.47 port 53222:11: Bye Bye [preauth] Jun 8 07:56:43 undercloud sshd[78523]: Disconnected from authenticating user root 146.70.79.47 port 53222 [preauth] Jun 8 07:57:13 undercloud sshd[79059]: Invalid user weihnachten from 103.13.206.100 port 56700 Jun 8 07:57:13 undercloud sshd[79059]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:57:13 undercloud sshd[79059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 07:57:14 undercloud sshd[79059]: Failed password for invalid user weihnachten from 103.13.206.100 port 56700 ssh2 Jun 8 07:57:16 undercloud sshd[79059]: Received disconnect from 103.13.206.100 port 56700:11: Bye Bye [preauth] Jun 8 07:57:16 undercloud sshd[79059]: Disconnected from invalid user weihnachten 103.13.206.100 port 56700 [preauth] Jun 8 07:57:47 undercloud sshd[79609]: error: kex_exchange_identification: read: Connection reset by peer Jun 8 07:57:47 undercloud sshd[79609]: Connection reset by 220.250.52.111 port 39794 Jun 8 07:58:34 undercloud sshd[80381]: Invalid user zhangwei from 146.70.79.47 port 42454 Jun 8 07:58:34 undercloud sshd[80381]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:58:34 undercloud sshd[80381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 07:58:34 undercloud sshd[80385]: Invalid user magento from 135.13.28.35 port 49284 Jun 8 07:58:34 undercloud sshd[80385]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:58:34 undercloud sshd[80385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 07:58:37 undercloud sshd[80381]: Failed password for invalid user zhangwei from 146.70.79.47 port 42454 ssh2 Jun 8 07:58:37 undercloud sshd[80385]: Failed password for invalid user magento from 135.13.28.35 port 49284 ssh2 Jun 8 07:58:38 undercloud sshd[80381]: Received disconnect from 146.70.79.47 port 42454:11: Bye Bye [preauth] Jun 8 07:58:38 undercloud sshd[80381]: Disconnected from invalid user zhangwei 146.70.79.47 port 42454 [preauth] Jun 8 07:58:39 undercloud sshd[80385]: Received disconnect from 135.13.28.35 port 49284:11: Bye Bye [preauth] Jun 8 07:58:39 undercloud sshd[80385]: Disconnected from invalid user magento 135.13.28.35 port 49284 [preauth] Jun 8 07:58:53 undercloud sudo[80790]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect ephemeral-heat Jun 8 07:58:53 undercloud sudo[80790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:58:53 undercloud sudo[80790]: pam_unix(sudo:session): session closed for user root Jun 8 07:58:53 undercloud sudo[80804]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod kill ephemeral-heat Jun 8 07:58:53 undercloud sudo[80804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:58:54 undercloud sudo[80804]: pam_unix(sudo:session): session closed for user root Jun 8 07:58:54 undercloud sudo[80854]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e show databases like "heat" Jun 8 07:58:54 undercloud sudo[80854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:58:54 undercloud sudo[80854]: pam_unix(sudo:session): session closed for user root Jun 8 07:58:54 undercloud sudo[80897]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysqldump heat Jun 8 07:58:54 undercloud sudo[80897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:58:55 undercloud sudo[80897]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:03 undercloud sudo[81070]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql heat -e drop database heat Jun 8 07:59:03 undercloud sudo[81070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:04 undercloud sudo[81070]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:04 undercloud sudo[81096]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e drop user 'heat'@'%' Jun 8 07:59:04 undercloud sudo[81096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:04 undercloud sudo[81096]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:04 undercloud sudo[81133]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect ephemeral-heat Jun 8 07:59:04 undercloud sudo[81133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:04 undercloud sudo[81133]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:04 undercloud sudo[81151]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod rm -f ephemeral-heat Jun 8 07:59:04 undercloud sudo[81151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:04 undercloud sudo[81151]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:06 undercloud sudo[81181]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jssfjyslxvfydnwhhwtbwjvrcyxdojpm ; /usr/bin/python3 Jun 8 07:59:06 undercloud sudo[81181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:06 undercloud sudo[81181]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:06 undercloud sudo[81253]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ewnuxcdfqxawprkvkgjsxsaoraqxgoua ; /usr/bin/python3 Jun 8 07:59:06 undercloud sudo[81253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:07 undercloud sudo[81253]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:07 undercloud sudo[81272]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-osrdwofpwhplxuryxcewjzsyqbeftcbx ; /usr/bin/python3 Jun 8 07:59:07 undercloud sudo[81272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:08 undercloud sudo[81272]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:08 undercloud sudo[81278]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mxfbcgqlmbcealicwfnpnpzitdovhnjk ; /usr/bin/python3 Jun 8 07:59:08 undercloud sudo[81278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:08 undercloud sudo[81278]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:09 undercloud sudo[81324]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gwojmwxbazpjhhxkjbjgqhbszreqooif ; /usr/bin/python3 Jun 8 07:59:09 undercloud sudo[81324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:10 undercloud sudo[81324]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:10 undercloud sudo[81367]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-olizcbhafcwmxzvmmmzfvvlwxoqozokc ; /usr/bin/python3 Jun 8 07:59:10 undercloud sudo[81367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:10 undercloud sudo[81367]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:11 undercloud sudo[81463]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smxwrhnhwfrvugnkpnmmrxoaqwernnpb ; /usr/bin/python3 Jun 8 07:59:11 undercloud sudo[81463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:11 undercloud sudo[81463]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:12 undercloud sudo[81531]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gptdrkpakcqnueuaxdcuhwxxhgxyoled ; /usr/bin/python3 Jun 8 07:59:12 undercloud sudo[81531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:12 undercloud sudo[81531]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:13 undercloud sudo[81583]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkrycidqhimfjtnddwstkkqtvpmajmih ; /usr/bin/python3 Jun 8 07:59:13 undercloud sudo[81583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:13 undercloud sudo[81583]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:13 undercloud sudo[81638]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mfsqrvofmibnetumcozasgvlenplrlqv ; /usr/bin/python3 Jun 8 07:59:13 undercloud sudo[81638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:13 undercloud sudo[81638]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:14 undercloud sudo[81734]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iofaystaobosnsyagupjpgdiklbdwsxg ; /usr/bin/python3 Jun 8 07:59:14 undercloud sudo[81734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:14 undercloud sudo[81734]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:14 undercloud sudo[81786]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dgsypdqwydagthyhigxvrugasyslweif ; /usr/bin/python3 Jun 8 07:59:14 undercloud sudo[81786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:14 undercloud sudo[81786]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:14 undercloud sudo[81823]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-adksigccfxsjivgaougpmkgelkptgrwn ; /usr/bin/python3 Jun 8 07:59:14 undercloud sudo[81823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:15 undercloud sudo[81823]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:15 undercloud sudo[81892]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ylmigiwvfmrdcaqdzumiyligdyqjhzjq ; /usr/bin/python3 Jun 8 07:59:15 undercloud sudo[81892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:15 undercloud sudo[81892]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:17 undercloud sudo[82069]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xsfkzpzllwllnyxlwxaqgkkrfnhcbkwg ; /usr/bin/python3 Jun 8 07:59:17 undercloud sudo[82069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:18 undercloud sudo[82069]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:18 undercloud sudo[82082]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzmagrqbyqqrynevnmaycjdtfzgzwlax ; /usr/bin/python3 Jun 8 07:59:18 undercloud sudo[82082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:18 undercloud sudo[82082]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:18 undercloud sudo[82090]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mnvammleluxexjcdgawturxkkefrrvsl ; /usr/bin/python3 Jun 8 07:59:18 undercloud sudo[82090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:19 undercloud sudo[82090]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:22 undercloud sshd[81168]: Connection closed by 220.250.52.111 port 48168 [preauth] Jun 8 07:59:27 undercloud sudo[82264]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fzxcectoltkatmapfhtdjnzfmusbkaan ; /usr/bin/python3 Jun 8 07:59:27 undercloud sudo[82264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:27 undercloud sudo[82264]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:28 undercloud sudo[82419]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sojumwrwuhsfyskboymjocyryzgkstkn ; /usr/bin/python3 Jun 8 07:59:28 undercloud sudo[82419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:28 undercloud sudo[82419]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:33 undercloud sshd[82892]: Invalid user ubuntu from 107.155.48.84 port 49640 Jun 8 07:59:33 undercloud sshd[82892]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:59:33 undercloud sshd[82892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.84 Jun 8 07:59:33 undercloud sudo[82929]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zododrvmymmkwwchdahanvapyfsqyods ; /usr/bin/python3 Jun 8 07:59:33 undercloud sudo[82929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:34 undercloud sudo[82929]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:34 undercloud sudo[83003]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tqnkorvbiwzyvizgouapyuhsssomkuwn ; /usr/bin/python3 Jun 8 07:59:34 undercloud sudo[83003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:34 undercloud sudo[83003]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:35 undercloud sudo[83064]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ibpdgxxdrqdkcdrozszyyhqtftyxopmn ; /usr/bin/python3 Jun 8 07:59:35 undercloud sudo[83064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:35 undercloud sudo[83064]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:35 undercloud sshd[82892]: Failed password for invalid user ubuntu from 107.155.48.84 port 49640 ssh2 Jun 8 07:59:35 undercloud sudo[83092]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qguudilnutfoeouizhnqfszjvepzkkkl ; /usr/bin/python3 Jun 8 07:59:35 undercloud sudo[83092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:36 undercloud sudo[83092]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:36 undercloud sudo[83133]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-andoslqltvlvvwrjvpebggdefjroxqpx ; /usr/bin/python3 Jun 8 07:59:36 undercloud sudo[83133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:36 undercloud sudo[83133]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:36 undercloud sshd[82892]: Postponed keyboard-interactive for invalid user ubuntu from 107.155.48.84 port 49640 ssh2 [preauth] Jun 8 07:59:36 undercloud sshd[83205]: pam_unix(sshd:auth): check pass; user unknown Jun 8 07:59:37 undercloud sudo[83243]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xinqgxwgcpnqdfbhonkxjnkbsqovtazx ; /usr/bin/python3 Jun 8 07:59:37 undercloud sudo[83243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 07:59:38 undercloud sudo[83243]: pam_unix(sudo:session): session closed for user root Jun 8 07:59:38 undercloud sshd[82892]: error: PAM: Authentication failure for illegal user ubuntu from 107.155.48.84 Jun 8 07:59:38 undercloud sshd[82892]: Failed keyboard-interactive/pam for invalid user ubuntu from 107.155.48.84 port 49640 ssh2 Jun 8 07:59:38 undercloud sshd[82892]: Received disconnect from 107.155.48.84 port 49640:11: [preauth] Jun 8 07:59:38 undercloud sshd[82892]: Disconnected from invalid user ubuntu 107.155.48.84 port 49640 [preauth] Jun 8 08:00:14 undercloud sshd[83938]: Invalid user im1 from 103.13.206.100 port 39698 Jun 8 08:00:14 undercloud sshd[83938]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:00:14 undercloud sshd[83938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:00:16 undercloud sshd[83938]: Failed password for invalid user im1 from 103.13.206.100 port 39698 ssh2 Jun 8 08:00:16 undercloud sshd[83938]: Received disconnect from 103.13.206.100 port 39698:11: Bye Bye [preauth] Jun 8 08:00:16 undercloud sshd[83938]: Disconnected from invalid user im1 103.13.206.100 port 39698 [preauth] Jun 8 08:00:32 undercloud unix_chkpwd[84330]: password check failed for user (root) Jun 8 08:00:32 undercloud sshd[84328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:00:34 undercloud sshd[84328]: Failed password for root from 146.70.79.47 port 44972 ssh2 Jun 8 08:00:35 undercloud sshd[84328]: Received disconnect from 146.70.79.47 port 44972:11: Bye Bye [preauth] Jun 8 08:00:35 undercloud sshd[84328]: Disconnected from authenticating user root 146.70.79.47 port 44972 [preauth] Jun 8 08:00:43 undercloud sshd[84401]: Invalid user regis from 135.13.28.35 port 36250 Jun 8 08:00:43 undercloud sshd[84401]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:00:43 undercloud sshd[84401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:00:45 undercloud sshd[84401]: Failed password for invalid user regis from 135.13.28.35 port 36250 ssh2 Jun 8 08:00:46 undercloud sshd[84401]: Received disconnect from 135.13.28.35 port 36250:11: Bye Bye [preauth] Jun 8 08:00:46 undercloud sshd[84401]: Disconnected from invalid user regis 135.13.28.35 port 36250 [preauth] Jun 8 08:00:49 undercloud sshd[84188]: error: kex_exchange_identification: read: Connection timed out Jun 8 08:00:49 undercloud sshd[84188]: banner exchange: Connection from 220.250.52.111 port 52366: Connection timed out Jun 8 08:01:38 undercloud sudo[65895]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:54 undercloud sudo[89241]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gpogoukrswxluxipnwznuluatrodwclj ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:54 undercloud sudo[89246]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iopibwzefamtnwgigvssaddmelbuwydc ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:54 undercloud sudo[89252]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-psgrzparerdtqhimtlmliuugayjtgldu ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:54 undercloud sudo[89251]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-crmramsgupjwunfhrrrqryshqvqsfqsb ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:54 undercloud sudo[89259]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnfrpniukhbruoqbkglfhonardfbrxoa ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:54 undercloud sudo[89264]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdmhncvpnnzkhikjzodxpjrsfiyzqdxb ; /usr/bin/python3 Jun 8 08:01:54 undercloud sudo[89264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:01:55 undercloud sudo[89246]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:55 undercloud sudo[89241]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:55 undercloud sudo[89251]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:55 undercloud sudo[89252]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:55 undercloud sudo[89259]: pam_unix(sudo:session): session closed for user root Jun 8 08:01:55 undercloud sudo[89264]: pam_unix(sudo:session): session closed for user root Jun 8 08:02:29 undercloud unix_chkpwd[90528]: password check failed for user (root) Jun 8 08:02:29 undercloud sshd[90524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:02:31 undercloud sshd[90524]: Failed password for root from 146.70.79.47 port 57316 ssh2 Jun 8 08:02:34 undercloud sshd[90524]: Received disconnect from 146.70.79.47 port 57316:11: Bye Bye [preauth] Jun 8 08:02:34 undercloud sshd[90524]: Disconnected from authenticating user root 146.70.79.47 port 57316 [preauth] Jun 8 08:02:55 undercloud sshd[90965]: Invalid user reverse from 135.13.28.35 port 39128 Jun 8 08:02:55 undercloud sshd[90965]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:02:55 undercloud sshd[90965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:02:56 undercloud sshd[90965]: Failed password for invalid user reverse from 135.13.28.35 port 39128 ssh2 Jun 8 08:02:57 undercloud sshd[90965]: Received disconnect from 135.13.28.35 port 39128:11: Bye Bye [preauth] Jun 8 08:02:57 undercloud sshd[90965]: Disconnected from invalid user reverse 135.13.28.35 port 39128 [preauth] Jun 8 08:03:20 undercloud sshd[92863]: Invalid user aud from 103.13.206.100 port 50936 Jun 8 08:03:20 undercloud sshd[92863]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:03:20 undercloud sshd[92863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:03:22 undercloud sshd[92863]: Failed password for invalid user aud from 103.13.206.100 port 50936 ssh2 Jun 8 08:03:24 undercloud sshd[92863]: Received disconnect from 103.13.206.100 port 50936:11: Bye Bye [preauth] Jun 8 08:03:24 undercloud sshd[92863]: Disconnected from invalid user aud 103.13.206.100 port 50936 [preauth] Jun 8 08:03:25 undercloud sshd[92771]: error: kex_exchange_identification: read: Connection timed out Jun 8 08:03:25 undercloud sshd[92771]: banner exchange: Connection from 220.250.52.111 port 58034: Connection timed out Jun 8 08:04:31 undercloud unix_chkpwd[98572]: password check failed for user (root) Jun 8 08:04:31 undercloud sshd[98479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:04:32 undercloud sshd[98479]: Failed password for root from 146.70.79.47 port 42846 ssh2 Jun 8 08:04:33 undercloud sshd[98479]: Received disconnect from 146.70.79.47 port 42846:11: Bye Bye [preauth] Jun 8 08:04:33 undercloud sshd[98479]: Disconnected from authenticating user root 146.70.79.47 port 42846 [preauth] Jun 8 08:05:06 undercloud sshd[101233]: Invalid user zion from 135.13.28.35 port 40368 Jun 8 08:05:06 undercloud sshd[101233]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:05:06 undercloud sshd[101233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:05:09 undercloud sshd[101233]: Failed password for invalid user zion from 135.13.28.35 port 40368 ssh2 Jun 8 08:05:10 undercloud sshd[101233]: Received disconnect from 135.13.28.35 port 40368:11: Bye Bye [preauth] Jun 8 08:05:10 undercloud sshd[101233]: Disconnected from invalid user zion 135.13.28.35 port 40368 [preauth] Jun 8 08:05:37 undercloud sudo[102688]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mdmyrgdwwdkarkfkdqqtbxpsocqefwsu ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066810.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:37 undercloud sudo[102688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:37 undercloud sudo[102713]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdxapooyxmuetooqehrbchkkdpscaxuj ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066811.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:37 undercloud sudo[102713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:37 undercloud sudo[102729]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xmsgsrjipygsrzcabjpnpecgpcflvpur ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066812.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:37 undercloud sudo[102729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:37 undercloud sudo[102688]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:37 undercloud sudo[102713]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:37 undercloud sudo[102769]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mhnvornfkykhevnpmqpnnfnenjiizumu ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066807.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:37 undercloud sudo[102769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:37 undercloud sudo[102729]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:38 undercloud sudo[102769]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:38 undercloud sudo[102800]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zrnszkwoyfopwhkbdlcixeixteriiuwl ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066808.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102809]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jqaculbjwiqtqunywpjfakuytlxqesms ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066809.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102800]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:38 undercloud sudo[102818]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afqrvyyyvmhsstpbiesdyuaahxslvyfa ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066811.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102819]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jxscfesshuoddiibdcocqbysdgqhrldz ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066810.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102820]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsbacwlvedkudbbdzqoxkvvqsdjkcgxm ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066812.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102830]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnlpwfmkgdiqnrtsgdsnjcdadssjvfzz ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066807.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102809]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:38 undercloud sudo[102838]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcninlvfsoirwwsftbmqogsovqapxnmp ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066808.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:38 undercloud sudo[102844]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bqujlzwgelvlxrlkicytllpudiyuvexh ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066809.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:38 undercloud sudo[102844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102819]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:39 undercloud sudo[102820]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:39 undercloud sudo[102818]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:39 undercloud sudo[102830]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:39 undercloud sudo[102838]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:39 undercloud sudo[102866]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tvpqyhcqwanhdymgzvlbryfuckzfomhj ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066811.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:39 undercloud sudo[102866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102867]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzzvmkpskucmuihsmjhhgcqsnnuxccme ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066812.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:39 undercloud sudo[102867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102868]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ztiiekayetkbqpjswpnvvwctkzddxxeq ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066810.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:39 undercloud sudo[102868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102882]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rxcfwuybdezfjcdkmgrhktqqimsoowvm ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066808.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:39 undercloud sudo[102880]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tyfbezypzmwkdmazhperqzmlvcjwoeng ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066807.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:39 undercloud sudo[102882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:39 undercloud sudo[102844]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:40 undercloud sudo[102894]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ofcpknvrdkpsvfooqyhamgewjnvbiemj ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0000066809.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:05:40 undercloud sudo[102894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:05:41 undercloud sudo[102868]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:41 undercloud sudo[102866]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:41 undercloud sudo[102867]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:42 undercloud sudo[102880]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:42 undercloud sudo[102882]: pam_unix(sudo:session): session closed for user root Jun 8 08:05:42 undercloud sudo[102894]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:15 undercloud sudo[104482]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wobnotgnlzqfujpqukcwneckpwmmolnr ; /usr/bin/python3 Jun 8 08:06:15 undercloud sudo[104482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:16 undercloud sudo[104482]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:16 undercloud sudo[104496]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gmycvivhnvgetkfnrxvehrdxbzmgnqcr ; IPA_HOST=ipa.ooo.test IPA_USER=nova/undercloud.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Jun 8 08:06:16 undercloud sudo[104496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:21 undercloud sudo[104496]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:21 undercloud sudo[104570]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkmnrzvhzhalnrbyqqyvgfwvbkzskpbj ; /usr/bin/python3 Jun 8 08:06:21 undercloud sudo[104570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:21 undercloud sudo[104570]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:21 undercloud sudo[104578]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-njfgroqflswhibpkioamctfqlkhidbrh ; /usr/bin/python3 Jun 8 08:06:21 undercloud sudo[104578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:22 undercloud sudo[104578]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:22 undercloud sudo[104599]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sphbpeksqwcvgonptfnxffmwnrilfqjr ; /usr/bin/python3 Jun 8 08:06:22 undercloud sudo[104599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:22 undercloud sudo[104599]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:22 undercloud sudo[104605]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhcnfxvkptushcnpvscfrtpziorctrml ; /usr/bin/python3 Jun 8 08:06:22 undercloud sudo[104605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:22 undercloud sudo[104605]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:22 undercloud sudo[104609]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iftplgglnviuhewythswnjssmkmpqjwv ; /usr/bin/python3 Jun 8 08:06:22 undercloud sudo[104609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 08:06:22 undercloud sudo[104609]: pam_unix(sudo:session): session closed for user root Jun 8 08:06:23 undercloud sshd[104602]: Invalid user invoice from 103.13.206.100 port 33938 Jun 8 08:06:23 undercloud sshd[104602]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:06:23 undercloud sshd[104602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:06:25 undercloud sshd[104602]: Failed password for invalid user invoice from 103.13.206.100 port 33938 ssh2 Jun 8 08:06:27 undercloud sshd[104602]: Received disconnect from 103.13.206.100 port 33938:11: Bye Bye [preauth] Jun 8 08:06:27 undercloud sshd[104602]: Disconnected from invalid user invoice 103.13.206.100 port 33938 [preauth] Jun 8 08:06:30 undercloud unix_chkpwd[105405]: password check failed for user (root) Jun 8 08:06:30 undercloud sshd[105320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:06:32 undercloud sshd[105320]: Failed password for root from 146.70.79.47 port 33134 ssh2 Jun 8 08:06:32 undercloud sshd[105320]: Received disconnect from 146.70.79.47 port 33134:11: Bye Bye [preauth] Jun 8 08:06:32 undercloud sshd[105320]: Disconnected from authenticating user root 146.70.79.47 port 33134 [preauth] Jun 8 08:07:11 undercloud sshd[106867]: Invalid user charity from 135.13.28.35 port 57534 Jun 8 08:07:11 undercloud sshd[106867]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:07:11 undercloud sshd[106867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:07:14 undercloud sshd[106867]: Failed password for invalid user charity from 135.13.28.35 port 57534 ssh2 Jun 8 08:07:14 undercloud sshd[106867]: Received disconnect from 135.13.28.35 port 57534:11: Bye Bye [preauth] Jun 8 08:07:14 undercloud sshd[106867]: Disconnected from invalid user charity 135.13.28.35 port 57534 [preauth] Jun 8 08:07:30 undercloud sshd[107110]: error: kex_exchange_identification: read: Connection timed out Jun 8 08:07:30 undercloud sshd[107110]: banner exchange: Connection from 220.250.52.111 port 39248: Connection timed out Jun 8 08:08:22 undercloud unix_chkpwd[108727]: password check failed for user (root) Jun 8 08:08:22 undercloud sshd[108712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:08:24 undercloud sshd[108712]: Failed password for root from 146.70.79.47 port 41686 ssh2 Jun 8 08:08:24 undercloud sshd[108712]: Received disconnect from 146.70.79.47 port 41686:11: Bye Bye [preauth] Jun 8 08:08:24 undercloud sshd[108712]: Disconnected from authenticating user root 146.70.79.47 port 41686 [preauth] Jun 8 08:08:51 undercloud sshd[109430]: Invalid user jeux from 220.250.52.111 port 39102 Jun 8 08:08:51 undercloud sshd[109430]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:08:51 undercloud sshd[109430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.250.52.111 Jun 8 08:08:53 undercloud sshd[109430]: Failed password for invalid user jeux from 220.250.52.111 port 39102 ssh2 Jun 8 08:08:55 undercloud sshd[109430]: Received disconnect from 220.250.52.111 port 39102:11: Bye Bye [preauth] Jun 8 08:08:55 undercloud sshd[109430]: Disconnected from invalid user jeux 220.250.52.111 port 39102 [preauth] Jun 8 08:09:18 undercloud sshd[110698]: Invalid user solarwinds from 135.13.28.35 port 58514 Jun 8 08:09:18 undercloud sshd[110698]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:09:18 undercloud sshd[110698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:09:21 undercloud sshd[110698]: Failed password for invalid user solarwinds from 135.13.28.35 port 58514 ssh2 Jun 8 08:09:23 undercloud sshd[110698]: Received disconnect from 135.13.28.35 port 58514:11: Bye Bye [preauth] Jun 8 08:09:23 undercloud sshd[110698]: Disconnected from invalid user solarwinds 135.13.28.35 port 58514 [preauth] Jun 8 08:09:27 undercloud sshd[110956]: Invalid user charlie from 103.13.206.100 port 45174 Jun 8 08:09:27 undercloud sshd[110956]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:09:27 undercloud sshd[110956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:09:30 undercloud sshd[110956]: Failed password for invalid user charlie from 103.13.206.100 port 45174 ssh2 Jun 8 08:09:30 undercloud sshd[110956]: Received disconnect from 103.13.206.100 port 45174:11: Bye Bye [preauth] Jun 8 08:09:30 undercloud sshd[110956]: Disconnected from invalid user charlie 103.13.206.100 port 45174 [preauth] Jun 8 08:10:12 undercloud sshd[112861]: error: kex_exchange_identification: Connection closed by remote host Jun 8 08:10:12 undercloud sshd[112861]: Connection closed by 8.141.125.233 port 57060 Jun 8 08:10:16 undercloud sshd[113005]: Invalid user julian from 146.70.79.47 port 35534 Jun 8 08:10:16 undercloud sshd[113005]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:10:16 undercloud sshd[113005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 Jun 8 08:10:19 undercloud sshd[113005]: Failed password for invalid user julian from 146.70.79.47 port 35534 ssh2 Jun 8 08:10:21 undercloud sshd[113005]: Received disconnect from 146.70.79.47 port 35534:11: Bye Bye [preauth] Jun 8 08:10:21 undercloud sshd[113005]: Disconnected from invalid user julian 146.70.79.47 port 35534 [preauth] Jun 8 08:10:24 undercloud sshd[113164]: Invalid user RPM from 185.156.73.233 port 19532 Jun 8 08:10:24 undercloud sshd[113164]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:10:24 undercloud sshd[113164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 Jun 8 08:10:26 undercloud sshd[113164]: Failed password for invalid user RPM from 185.156.73.233 port 19532 ssh2 Jun 8 08:10:27 undercloud sshd[113164]: Connection closed by invalid user RPM 185.156.73.233 port 19532 [preauth] Jun 8 08:11:26 undercloud sshd[114187]: Invalid user alexander from 135.13.28.35 port 34480 Jun 8 08:11:26 undercloud sshd[114187]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:11:26 undercloud sshd[114187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:11:28 undercloud sshd[114187]: Failed password for invalid user alexander from 135.13.28.35 port 34480 ssh2 Jun 8 08:11:29 undercloud sshd[114187]: Received disconnect from 135.13.28.35 port 34480:11: Bye Bye [preauth] Jun 8 08:11:29 undercloud sshd[114187]: Disconnected from invalid user alexander 135.13.28.35 port 34480 [preauth] Jun 8 08:12:08 undercloud unix_chkpwd[114825]: password check failed for user (root) Jun 8 08:12:08 undercloud sshd[114820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 8 08:12:10 undercloud sshd[114820]: Failed password for root from 146.70.79.47 port 48708 ssh2 Jun 8 08:12:10 undercloud sshd[114820]: Received disconnect from 146.70.79.47 port 48708:11: Bye Bye [preauth] Jun 8 08:12:10 undercloud sshd[114820]: Disconnected from authenticating user root 146.70.79.47 port 48708 [preauth] Jun 8 08:12:34 undercloud sshd[115301]: Invalid user japan from 103.13.206.100 port 56404 Jun 8 08:12:34 undercloud sshd[115301]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:12:34 undercloud sshd[115301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:12:36 undercloud sshd[115301]: Failed password for invalid user japan from 103.13.206.100 port 56404 ssh2 Jun 8 08:12:38 undercloud sshd[115301]: Received disconnect from 103.13.206.100 port 56404:11: Bye Bye [preauth] Jun 8 08:12:38 undercloud sshd[115301]: Disconnected from invalid user japan 103.13.206.100 port 56404 [preauth] Jun 8 08:13:24 undercloud sshd[115933]: Connection closed by 66.132.172.34 port 14596 [preauth] Jun 8 08:13:32 undercloud sshd[116490]: Invalid user glossary from 135.13.28.35 port 41512 Jun 8 08:13:32 undercloud sshd[116490]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:13:32 undercloud sshd[116490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:13:34 undercloud sshd[116490]: Failed password for invalid user glossary from 135.13.28.35 port 41512 ssh2 Jun 8 08:13:35 undercloud sshd[116490]: Received disconnect from 135.13.28.35 port 41512:11: Bye Bye [preauth] Jun 8 08:13:35 undercloud sshd[116490]: Disconnected from invalid user glossary 135.13.28.35 port 41512 [preauth] Jun 8 08:15:38 undercloud sshd[118494]: Invalid user bitrix from 103.13.206.100 port 39402 Jun 8 08:15:38 undercloud sshd[118494]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:15:38 undercloud sshd[118494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:15:40 undercloud sshd[118494]: Failed password for invalid user bitrix from 103.13.206.100 port 39402 ssh2 Jun 8 08:15:41 undercloud sshd[118494]: Received disconnect from 103.13.206.100 port 39402:11: Bye Bye [preauth] Jun 8 08:15:41 undercloud sshd[118494]: Disconnected from invalid user bitrix 103.13.206.100 port 39402 [preauth] Jun 8 08:15:51 undercloud sshd[118603]: Invalid user kamera from 135.13.28.35 port 33648 Jun 8 08:15:51 undercloud sshd[118603]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:15:51 undercloud sshd[118603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:15:53 undercloud sshd[118603]: Failed password for invalid user kamera from 135.13.28.35 port 33648 ssh2 Jun 8 08:15:53 undercloud sshd[118603]: Received disconnect from 135.13.28.35 port 33648:11: Bye Bye [preauth] Jun 8 08:15:53 undercloud sshd[118603]: Disconnected from invalid user kamera 135.13.28.35 port 33648 [preauth] Jun 8 08:18:02 undercloud sshd[120746]: Invalid user parceiros from 135.13.28.35 port 58966 Jun 8 08:18:02 undercloud sshd[120746]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:18:02 undercloud sshd[120746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.13.28.35 Jun 8 08:18:04 undercloud sshd[120746]: Failed password for invalid user parceiros from 135.13.28.35 port 58966 ssh2 Jun 8 08:18:06 undercloud sshd[120746]: Received disconnect from 135.13.28.35 port 58966:11: Bye Bye [preauth] Jun 8 08:18:06 undercloud sshd[120746]: Disconnected from invalid user parceiros 135.13.28.35 port 58966 [preauth] Jun 8 08:18:07 undercloud sshd[120890]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.38.69.67 user=admin Jun 8 08:18:07 undercloud sshd[120890]: pam_sss(sshd:auth): received for user admin: 6 (Permission denied) Jun 8 08:18:09 undercloud sshd[120890]: Failed password for admin from 34.38.69.67 port 40632 ssh2 Jun 8 08:18:11 undercloud sshd[120900]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.38.69.67 user=admin Jun 8 08:18:11 undercloud sshd[120900]: pam_sss(sshd:auth): received for user admin: 6 (Permission denied) Jun 8 08:18:12 undercloud sshd[120890]: error: PAM: Authentication failure for admin from 34.38.69.67 Jun 8 08:18:13 undercloud sshd[120890]: Connection closed by authenticating user admin 34.38.69.67 port 40632 [preauth] Jun 8 08:18:16 undercloud sshd[120969]: error: kex_exchange_identification: Connection closed by remote host Jun 8 08:18:16 undercloud sshd[120969]: Connection closed by 34.62.41.237 port 61032 Jun 8 08:18:23 undercloud sshd[121019]: error: Protocol major versions differ: 2 vs. 1 Jun 8 08:18:23 undercloud sshd[121019]: banner exchange: Connection from 34.62.41.237 port 29926: could not read protocol version Jun 8 08:18:23 undercloud sshd[121021]: Unable to negotiate with 34.62.41.237 port 29942: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Jun 8 08:18:23 undercloud sshd[121020]: Invalid user itwrq from 34.62.41.237 port 29954 Jun 8 08:18:23 undercloud sshd[121024]: Unable to negotiate with 34.62.41.237 port 29964: no matching host key type found. Their offer: ssh-dss [preauth] Jun 8 08:18:23 undercloud sshd[121020]: Connection closed by invalid user itwrq 34.62.41.237 port 29954 [preauth] Jun 8 08:18:24 undercloud sshd[121026]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 08:18:24 undercloud sshd[121028]: Connection closed by 34.62.41.237 port 29992 [preauth] Jun 8 08:18:25 undercloud sshd[121089]: Unable to negotiate with 34.62.41.237 port 30008: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth] Jun 8 08:18:25 undercloud sshd[121096]: Unable to negotiate with 34.62.41.237 port 30016: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth] Jun 8 08:18:26 undercloud sshd[121103]: Connection closed by 34.62.41.237 port 30032 [preauth] Jun 8 08:18:45 undercloud sshd[121459]: Invalid user anzeigen from 103.13.206.100 port 50642 Jun 8 08:18:45 undercloud sshd[121459]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:18:45 undercloud sshd[121459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:18:47 undercloud sshd[121459]: Failed password for invalid user anzeigen from 103.13.206.100 port 50642 ssh2 Jun 8 08:18:48 undercloud sshd[121459]: Received disconnect from 103.13.206.100 port 50642:11: Bye Bye [preauth] Jun 8 08:18:48 undercloud sshd[121459]: Disconnected from invalid user anzeigen 103.13.206.100 port 50642 [preauth] Jun 8 08:19:07 undercloud sshd[120888]: Connection closed by 34.38.69.67 port 40630 [preauth] Jun 8 08:20:14 undercloud unix_chkpwd[122858]: password check failed for user (root) Jun 8 08:20:14 undercloud sshd[122856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.84 user=root Jun 8 08:20:15 undercloud sshd[122856]: Failed password for root from 107.155.48.84 port 40396 ssh2 Jun 8 08:20:16 undercloud unix_chkpwd[122926]: password check failed for user (root) Jun 8 08:20:18 undercloud sshd[122856]: error: PAM: Authentication failure for root from 107.155.48.84 Jun 8 08:20:18 undercloud sshd[122856]: Received disconnect from 107.155.48.84 port 40396:11: [preauth] Jun 8 08:20:18 undercloud sshd[122856]: Disconnected from authenticating user root 107.155.48.84 port 40396 [preauth] Jun 8 08:21:43 undercloud sshd[124289]: Invalid user fb from 103.13.206.100 port 33642 Jun 8 08:21:43 undercloud sshd[124289]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:21:43 undercloud sshd[124289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:21:45 undercloud sshd[124289]: Failed password for invalid user fb from 103.13.206.100 port 33642 ssh2 Jun 8 08:21:45 undercloud sshd[124289]: Received disconnect from 103.13.206.100 port 33642:11: Bye Bye [preauth] Jun 8 08:21:45 undercloud sshd[124289]: Disconnected from invalid user fb 103.13.206.100 port 33642 [preauth] Jun 8 08:22:52 undercloud sshd[125331]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 user=admin Jun 8 08:22:52 undercloud sshd[125331]: pam_sss(sshd:auth): received for user admin: 6 (Permission denied) Jun 8 08:22:54 undercloud sshd[125331]: Failed password for admin from 185.156.73.233 port 59390 ssh2 Jun 8 08:22:54 undercloud sshd[125331]: Connection closed by authenticating user admin 185.156.73.233 port 59390 [preauth] Jun 8 08:24:43 undercloud sshd[127069]: Invalid user nic from 103.13.206.100 port 44872 Jun 8 08:24:43 undercloud sshd[127069]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:24:43 undercloud sshd[127069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:24:45 undercloud sshd[127069]: Failed password for invalid user nic from 103.13.206.100 port 44872 ssh2 Jun 8 08:24:45 undercloud sshd[127069]: Received disconnect from 103.13.206.100 port 44872:11: Bye Bye [preauth] Jun 8 08:24:45 undercloud sshd[127069]: Disconnected from invalid user nic 103.13.206.100 port 44872 [preauth] Jun 8 08:27:44 undercloud sshd[129879]: Invalid user project from 103.13.206.100 port 56108 Jun 8 08:27:44 undercloud sshd[129879]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:27:44 undercloud sshd[129879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:27:46 undercloud sshd[129879]: Failed password for invalid user project from 103.13.206.100 port 56108 ssh2 Jun 8 08:27:47 undercloud sshd[129879]: Received disconnect from 103.13.206.100 port 56108:11: Bye Bye [preauth] Jun 8 08:27:47 undercloud sshd[129879]: Disconnected from invalid user project 103.13.206.100 port 56108 [preauth] Jun 8 08:30:50 undercloud sshd[132951]: Invalid user csit from 103.13.206.100 port 39108 Jun 8 08:30:50 undercloud sshd[132951]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:30:50 undercloud sshd[132951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:30:51 undercloud sshd[132951]: Failed password for invalid user csit from 103.13.206.100 port 39108 ssh2 Jun 8 08:30:53 undercloud sshd[132951]: Received disconnect from 103.13.206.100 port 39108:11: Bye Bye [preauth] Jun 8 08:30:53 undercloud sshd[132951]: Disconnected from invalid user csit 103.13.206.100 port 39108 [preauth] Jun 8 08:33:56 undercloud sshd[135860]: Invalid user jeux from 103.13.206.100 port 50342 Jun 8 08:33:56 undercloud sshd[135860]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:33:56 undercloud sshd[135860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:33:58 undercloud sshd[135860]: Failed password for invalid user jeux from 103.13.206.100 port 50342 ssh2 Jun 8 08:33:59 undercloud sshd[135860]: Received disconnect from 103.13.206.100 port 50342:11: Bye Bye [preauth] Jun 8 08:33:59 undercloud sshd[135860]: Disconnected from invalid user jeux 103.13.206.100 port 50342 [preauth] Jun 8 08:35:27 undercloud unix_chkpwd[137362]: password check failed for user (root) Jun 8 08:35:27 undercloud sshd[137360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 user=root Jun 8 08:35:29 undercloud sshd[137360]: Failed password for root from 80.94.95.116 port 58842 ssh2 Jun 8 08:35:31 undercloud sshd[137360]: Connection closed by authenticating user root 80.94.95.116 port 58842 [preauth] Jun 8 08:37:02 undercloud sshd[139032]: Invalid user pov from 103.13.206.100 port 33350 Jun 8 08:37:02 undercloud sshd[139032]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:37:02 undercloud sshd[139032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.206.100 Jun 8 08:37:04 undercloud sshd[139032]: Failed password for invalid user pov from 103.13.206.100 port 33350 ssh2 Jun 8 08:37:04 undercloud sshd[139032]: Received disconnect from 103.13.206.100 port 33350:11: Bye Bye [preauth] Jun 8 08:37:04 undercloud sshd[139032]: Disconnected from invalid user pov 103.13.206.100 port 33350 [preauth] Jun 8 08:41:02 undercloud sshd[142724]: Invalid user ubuntu from 107.155.48.84 port 46978 Jun 8 08:41:02 undercloud sshd[142724]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:41:02 undercloud sshd[142724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.84 Jun 8 08:41:04 undercloud sshd[142724]: Failed password for invalid user ubuntu from 107.155.48.84 port 46978 ssh2 Jun 8 08:41:05 undercloud sshd[142724]: Postponed keyboard-interactive for invalid user ubuntu from 107.155.48.84 port 46978 ssh2 [preauth] Jun 8 08:41:05 undercloud sshd[142728]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:41:08 undercloud sshd[142724]: error: PAM: Authentication failure for illegal user ubuntu from 107.155.48.84 Jun 8 08:41:08 undercloud sshd[142724]: Failed keyboard-interactive/pam for invalid user ubuntu from 107.155.48.84 port 46978 ssh2 Jun 8 08:41:08 undercloud sshd[142724]: Received disconnect from 107.155.48.84 port 46978:11: [preauth] Jun 8 08:41:08 undercloud sshd[142724]: Disconnected from invalid user ubuntu 107.155.48.84 port 46978 [preauth] Jun 8 08:45:07 undercloud sshd[146622]: Invalid user teste from 80.94.95.115 port 42026 Jun 8 08:45:07 undercloud sshd[146622]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:45:07 undercloud sshd[146622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.115 Jun 8 08:45:09 undercloud sshd[146622]: Failed password for invalid user teste from 80.94.95.115 port 42026 ssh2 Jun 8 08:45:10 undercloud sshd[146622]: Connection closed by invalid user teste 80.94.95.115 port 42026 [preauth] Jun 8 08:56:12 undercloud sshd[157301]: Invalid user user from 185.156.73.233 port 63436 Jun 8 08:56:12 undercloud sshd[157301]: pam_unix(sshd:auth): check pass; user unknown Jun 8 08:56:12 undercloud sshd[157301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 Jun 8 08:56:14 undercloud sshd[157301]: Failed password for invalid user user from 185.156.73.233 port 63436 ssh2 Jun 8 08:56:16 undercloud sshd[157301]: Connection closed by invalid user user 185.156.73.233 port 63436 [preauth] Jun 8 09:01:29 undercloud unix_chkpwd[162223]: password check failed for user (root) Jun 8 09:01:29 undercloud sshd[162218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.84 user=root Jun 8 09:01:31 undercloud sshd[162218]: Failed password for root from 107.155.48.84 port 48266 ssh2 Jun 8 09:01:32 undercloud unix_chkpwd[162290]: password check failed for user (root) Jun 8 09:01:34 undercloud sshd[162218]: error: PAM: Authentication failure for root from 107.155.48.84 Jun 8 09:01:34 undercloud sshd[162218]: Received disconnect from 107.155.48.84 port 48266:11: [preauth] Jun 8 09:01:34 undercloud sshd[162218]: Disconnected from authenticating user root 107.155.48.84 port 48266 [preauth] Jun 8 09:07:50 undercloud sshd[168238]: error: kex_exchange_identification: banner line contains invalid characters Jun 8 09:07:50 undercloud sshd[168238]: banner exchange: Connection from 65.49.1.142 port 59016: invalid format Jun 8 09:10:29 undercloud unix_chkpwd[170714]: password check failed for user (root) Jun 8 09:10:29 undercloud sshd[170712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 user=root Jun 8 09:10:31 undercloud sshd[170712]: Failed password for root from 185.156.73.233 port 54790 ssh2 Jun 8 09:10:33 undercloud sshd[170712]: Connection closed by authenticating user root 185.156.73.233 port 54790 [preauth] Jun 8 09:14:49 undercloud sudo[175785]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /etc/openstack/clouds.yaml /home/zuul/.config/openstack Jun 8 09:14:49 undercloud sudo[175785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 09:14:49 undercloud sudo[175785]: pam_unix(sudo:session): session closed for user root Jun 8 09:14:49 undercloud sudo[175788]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chmod 0600 /home/zuul/.config/openstack/clouds.yaml Jun 8 09:14:49 undercloud sudo[175788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 09:14:49 undercloud sudo[175788]: pam_unix(sudo:session): session closed for user root Jun 8 09:14:49 undercloud sudo[175791]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R 1000:1000 /home/zuul/.config Jun 8 09:14:49 undercloud sudo[175791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 09:14:49 undercloud sudo[175791]: pam_unix(sudo:session): session closed for user root Jun 8 09:14:51 undercloud sshd[26623]: Received disconnect from 192.168.122.11 port 48832:11: disconnected by user Jun 8 09:14:51 undercloud sshd[26623]: Disconnected from user zuul 192.168.122.11 port 48832 Jun 8 09:14:51 undercloud sshd[26620]: pam_unix(sshd:session): session closed for user zuul Jun 8 09:15:01 undercloud sshd[175887]: Accepted publickey for zuul from 38.102.83.32 port 52396 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 09:15:01 undercloud sshd[175887]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 09:15:01 undercloud sudo[175906]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lwvyrfvqegnodvzynxstgdhyowbbbqtx ; /usr/bin/python3 Jun 8 09:15:01 undercloud sudo[175906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 09:15:02 undercloud sudo[175906]: pam_unix(sudo:session): session closed for user root Jun 8 09:15:02 undercloud sshd[175887]: pam_unix(sshd:session): session closed for user zuul Jun 8 09:15:17 undercloud sshd[176307]: Accepted publickey for zuul from 38.102.83.32 port 59778 ssh2: RSA SHA256:p3d9hvyvYlrO6cF/vjYN+/0BekAIbNkRAzSJMX+o1GM Jun 8 09:15:18 undercloud sshd[176307]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 09:15:18 undercloud sudo[176313]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log