Jun 8 02:40:26 localhost polkitd[1036]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:40:26 localhost polkitd[1036]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:40:26 localhost polkitd[1036]: Finished loading, compiling and executing 4 rules Jun 8 02:40:26 localhost polkitd[1036]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:40:28 localhost useradd[1119]: new group: name=cloud-user, GID=1001 Jun 8 02:40:28 localhost useradd[1119]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:40:28 localhost useradd[1119]: add 'cloud-user' to group 'adm' Jun 8 02:40:28 localhost useradd[1119]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:40:28 localhost useradd[1119]: add 'cloud-user' to shadow group 'adm' Jun 8 02:40:28 localhost useradd[1119]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:40:29 localhost sshd[1133]: Server listening on 0.0.0.0 port 22. Jun 8 02:40:29 localhost sshd[1133]: Server listening on :: port 22. Jun 8 02:40:30 localhost sshd[1133]: Received signal 15; terminating. Jun 8 02:40:30 localhost sshd[1315]: Server listening on 0.0.0.0 port 22. Jun 8 02:40:30 localhost sshd[1315]: Server listening on :: port 22. Jun 8 02:40:30 localhost sshd[1562]: Unable to negotiate with 3.222.39.124 port 60284: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:40:30 localhost sshd[1459]: Connection closed by 3.222.39.124 port 60535 [preauth] Jun 8 02:40:30 localhost sshd[1598]: Connection reset by 3.222.39.124 port 59868 [preauth] Jun 8 02:40:30 localhost sshd[1675]: Unable to negotiate with 3.222.39.124 port 63795: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 8 02:40:30 localhost sshd[1713]: Unable to negotiate with 3.222.39.124 port 43602: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:40:31 localhost sshd[1742]: Connection reset by 3.222.39.124 port 36114 [preauth] Jun 8 02:40:31 localhost sshd[1792]: Connection closed by 3.222.39.124 port 63471 [preauth] Jun 8 02:40:31 localhost sshd[1866]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:40:31 localhost sshd[1906]: Unable to negotiate with 3.222.39.124 port 14167: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:43:25 localhost sshd[4184]: Accepted publickey for zuul from 38.102.83.51 port 53006 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:25 localhost systemd[4188]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:26 localhost sshd[4184]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:51 localhost sshd[4357]: Invalid user admin from 80.94.95.115 port 53978 Jun 8 02:43:51 localhost sshd[4357]: Connection closed by invalid user admin 80.94.95.115 port 53978 [preauth] Jun 8 02:43:56 localhost sshd[4615]: Received disconnect from 176.65.131.192 port 5594:11: disconnected by user [preauth] Jun 8 02:43:56 localhost sshd[4615]: Disconnected from authenticating user root 176.65.131.192 port 5594 [preauth] Jun 8 02:44:05 localhost sudo[4788]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fhewmqmgbrmrcokldedafpifroxvhmko ; /usr/bin/python3 Jun 8 02:44:05 localhost sudo[4788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:05 localhost sudo[4788]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:06 localhost sudo[4836]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yzafhdkkyrbhgiookkrghnarpnahtfcz ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4836]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4879]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chjyxazhibwnmuaansvywijdyqyaermg ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:07 localhost sudo[4879]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5273]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-geqquuqzvikvbirdjgmfsywanycsijgt ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:23 localhost sudo[5273]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5294]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qyrstciujyyfbacvofjdlixyyxbwmroe ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5294]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:28 localhost sudo[5544]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zoazmicraiisktvznqjhtvzoitpjzrvn ; /usr/bin/python3 Jun 8 02:44:28 localhost sudo[5544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5544]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5587]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkgerjkjlefvhpzyiuiknzvlotqmzraw ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5587]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5681]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gcbeldeedbgnkkmdtslezquqxjrnzvcx ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:32 localhost sudo[5681]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5724]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nqboxkemonqnonrktgjmnhquswptkmwm ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:32 localhost sudo[5724]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5755]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvnwdmisjjecgurmqtqqwapywyzggadq ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5755]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:55 localhost sudo[5809]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iquyatlrvrigmbnigjizqbcmbcajpgau ; /usr/bin/python3 Jun 8 02:44:55 localhost sudo[5809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:55 localhost sudo[5809]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:55 localhost sshd[4197]: Received disconnect from 38.102.83.51 port 53006:11: disconnected by user Jun 8 02:45:55 localhost sshd[4197]: Disconnected from user zuul 38.102.83.51 port 53006 Jun 8 02:45:55 localhost sshd[4184]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:46:55 localhost sshd[5817]: Accepted publickey for zuul from 38.102.83.51 port 39708 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:46:55 localhost sshd[5817]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:47:08 localhost sudo[5882]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qzczozbpmabrlvahsgrxsirzwrexfjbz ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:08 localhost sudo[5882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:09 localhost sudo[5882]: pam_unix(sudo:session): session closed for user root Jun 8 02:47:09 localhost sudo[5925]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vjqheuwowrmatijbvajpwpudelpsxsjj ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:09 localhost sudo[5925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:09 localhost sudo[5925]: pam_unix(sudo:session): session closed for user root Jun 8 02:47:09 localhost sudo[5955]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmnonufuaryqjfxmmmblqnpeuxhlqfdb ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:09 localhost sudo[5955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:10 localhost sudo[5955]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:10 localhost sshd[5820]: Received disconnect from 38.102.83.51 port 39708:11: disconnected by user Jun 8 02:48:10 localhost sshd[5820]: Disconnected from user zuul 38.102.83.51 port 39708 Jun 8 02:48:10 localhost sshd[5817]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:49:37 localhost sshd[6061]: Received disconnect from 103.149.26.43 port 43728:11: disconnected by user [preauth] Jun 8 02:49:37 localhost sshd[6061]: Disconnected from authenticating user root 103.149.26.43 port 43728 [preauth] Jun 8 02:50:43 localhost sshd[6063]: Accepted publickey for zuul from 38.102.83.51 port 56258 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:50:43 localhost sshd[6063]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:50:44 localhost sudo[6112]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imhotdpdbvhkrdcnaaaacwmsqmxpsexf ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:44 localhost sudo[6112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:44 localhost sudo[6112]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:44 localhost sudo[6155]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-htahjbljsmsfatgnmmazhbrpkflypeyv ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:44 localhost sudo[6155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:44 localhost sudo[6155]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[6063]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:51:36 localhost sshd[6172]: Received disconnect from 208.87.242.107 port 43526:11: disconnected by user [preauth] Jun 8 02:51:36 localhost sshd[6172]: Disconnected from authenticating user root 208.87.242.107 port 43526 [preauth] Jun 8 02:55:16 localhost sshd[6176]: Received disconnect from 191.101.33.115 port 40772:11: disconnected by user [preauth] Jun 8 02:55:16 localhost sshd[6176]: Disconnected from authenticating user root 191.101.33.115 port 40772 [preauth] Jun 8 02:55:31 localhost sshd[6178]: Connection closed by authenticating user root 80.94.95.115 port 50366 [preauth] Jun 8 02:56:39 localhost sshd[6182]: Connection closed by authenticating user root 176.65.139.151 port 39814 [preauth] Jun 8 02:56:50 localhost sshd[6184]: error: kex_exchange_identification: read: Connection reset by peer Jun 8 02:56:50 localhost sshd[6184]: Connection reset by 176.65.139.151 port 56202 Jun 8 02:59:45 localhost sshd[6187]: Accepted publickey for zuul from 38.102.83.51 port 34568 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:45 localhost sshd[6187]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:45 localhost sudo[6204]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qhsvejnbsohqxzjooedjomktwjjvkbbp ; /usr/bin/python3 Jun 8 02:59:45 localhost sudo[6204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6204]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6223]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-espcpqruinlpehepfabfrfpqyymxxnbo ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6223]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6239]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mltatosskdxzvjuueevmtubvvwuszgrp ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6239]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6255]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dhnubhiajtiggmkqacmjgnuagtbgklhn ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6255]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6271]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffzwfxmrbmnkfvlziibmgyfjozbmzmds ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6271]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6287]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tooojoixrugcukuiofoerizkkfleehhe ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6287]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:50 localhost sudo[6335]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jlpsgbtgpeswtdgeexpqilvvecwovyae ; /usr/bin/python3 Jun 8 02:59:50 localhost sudo[6335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:50 localhost sudo[6335]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:50 localhost sudo[6378]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-invrvczrecmmmthevpbzlwbfzyolhdga ; /usr/bin/python3 Jun 8 02:59:50 localhost sudo[6378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:50 localhost sudo[6378]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:52 localhost sudo[6408]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsngjqtdagstimbvewsgtblumigbxlrp ; /usr/bin/python3 Jun 8 02:59:52 localhost sudo[6408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:52 localhost sudo[6408]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6454]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qzmpseplceuhauntlqsguhsifownxaxi ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6454]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6470]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmjyutvofkpjtgldeoiyutziiolipdtx ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6470]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6488]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-baalinldsfqaetiedsakrmflmhdiaebo ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6488]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6506]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nwqpoytxpzqbciismxpwghozqnuhhnxs ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6506]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6524]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ijnjeervaovxxfybqbiqcpmkpftguwyk ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6524]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6187]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:54 localhost sshd[6570]: Accepted publickey for zuul from 38.102.83.51 port 53580 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:00:54 localhost sshd[6570]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:00:54 localhost sudo[6587]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jvjqvwknkebnnveluuetjeqmjxpxweis ; /usr/bin/python3 Jun 8 03:00:54 localhost sudo[6587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:01:15 localhost sudo[6587]: pam_unix(sudo:session): session closed for user root Jun 8 03:01:45 localhost sudo[6685]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oesabkegglyfbqqpnxhiijyqlnztuavc ; /usr/bin/python3 Jun 8 03:01:45 localhost sudo[6685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:03:22 localhost sudo[6685]: pam_unix(sudo:session): session closed for user root Jun 8 03:03:39 localhost sudo[6801]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-grvuulcpexhhahncauckjpixwluojwor ; /usr/bin/python3 Jun 8 03:03:39 localhost sudo[6801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:04:32 localhost sudo[6801]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:26 localhost sudo[18472]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yevbxvpcaggtysromfyiuynqzcgkmqul ; /usr/bin/python3 Jun 8 03:05:26 localhost sudo[18472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:27 localhost sudo[18472]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6570]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:05:40 localhost sshd[18539]: Received disconnect from 50.6.197.105 port 57478:11: disconnected by user [preauth] Jun 8 03:05:40 localhost sshd[18539]: Disconnected from authenticating user root 50.6.197.105 port 57478 [preauth] Jun 8 03:06:08 localhost sshd[18541]: Invalid user guest from 185.156.73.233 port 63444 Jun 8 03:06:08 localhost sshd[18541]: Connection closed by invalid user guest 185.156.73.233 port 63444 [preauth] Jun 8 03:06:14 localhost sshd[18544]: Unable to negotiate with 38.102.83.2 port 33078: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:14 localhost sshd[18546]: Connection closed by 38.102.83.2 port 33060 [preauth] Jun 8 03:06:14 localhost sshd[18545]: Connection closed by 38.102.83.2 port 33068 [preauth] Jun 8 03:06:14 localhost sshd[18547]: Unable to negotiate with 38.102.83.2 port 33086: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:14 localhost sshd[18543]: Unable to negotiate with 38.102.83.2 port 33102: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:19 localhost sshd[18553]: Accepted publickey for zuul from 38.102.83.51 port 46808 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:19 localhost sshd[18553]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18584]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xyranrngpsbpvxqaghtjhmriuwyaaubm ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18584]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18553]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:07:45 localhost sshd[18588]: Accepted publickey for zuul from 38.102.83.51 port 48322 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18588]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18605]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-htceckxyviobizciervqnhrjkzdjzkzv ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:45 localhost sudo[18605]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18621]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jqaueypbugyflyckqowlerhwhfyibvig ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18621]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:47 localhost sudo[18671]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lxbftwylkorvwhnbadaxsbrevhipgrmo ; /usr/bin/python3 Jun 8 03:07:47 localhost sudo[18671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:47 localhost sudo[18671]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:47 localhost sudo[18714]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wbhdzsfambpxzhefzcazuzqtwereheik ; /usr/bin/python3 Jun 8 03:07:47 localhost sudo[18714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18714]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:49 localhost sudo[18776]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xqjhkbzcoebzgnyancjicurzpxittccm ; /usr/bin/python3 Jun 8 03:07:49 localhost sudo[18776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:49 localhost sudo[18776]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:49 localhost sudo[18819]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vfsjrucgwsbynmgcqhbeozdxeinyowpt ; /usr/bin/python3 Jun 8 03:07:49 localhost sudo[18819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:49 localhost sudo[18819]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:51 localhost sudo[18849]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-judxzxsboaddhibdqdsmeomrfwwhdrbe ; /usr/bin/python3 Jun 8 03:07:51 localhost sudo[18849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:51 localhost sudo[18849]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:58 localhost sshd[18588]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:32 localhost sshd[19082]: Accepted publickey for zuul from 38.102.83.51 port 50062 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:32 localhost sshd[19082]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:32 localhost sudo[19099]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvajuxgbtzsvojgdymvugfuhtosddzol ; /usr/bin/python3 Jun 8 03:09:32 localhost sudo[19099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:33 localhost sudo[19099]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[19082]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:53 localhost sshd[19105]: Accepted publickey for zuul from 38.102.83.51 port 33868 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:53 localhost sshd[19105]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:54 localhost sudo[19109]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log Jun 8 03:09:54 localhost sudo[19109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)