Jun 8 02:39:56 localhost polkitd[1037]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:39:56 localhost polkitd[1037]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:39:56 localhost polkitd[1037]: Finished loading, compiling and executing 4 rules Jun 8 02:39:56 localhost polkitd[1037]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:39:58 localhost useradd[1119]: new group: name=cloud-user, GID=1001 Jun 8 02:39:58 localhost useradd[1119]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:39:58 localhost useradd[1119]: add 'cloud-user' to group 'adm' Jun 8 02:39:58 localhost useradd[1119]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:39:58 localhost useradd[1119]: add 'cloud-user' to shadow group 'adm' Jun 8 02:39:58 localhost useradd[1119]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:39:59 localhost sshd[1133]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:59 localhost sshd[1133]: Server listening on :: port 22. Jun 8 02:39:59 localhost sshd[1249]: Unable to negotiate with 3.222.39.124 port 10996: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:39:59 localhost sshd[1167]: Connection closed by 3.222.39.124 port 21589 [preauth] Jun 8 02:39:59 localhost sshd[1133]: Received signal 15; terminating. Jun 8 02:39:59 localhost sshd[1327]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:59 localhost sshd[1327]: Server listening on :: port 22. Jun 8 02:39:59 localhost sshd[1348]: Unable to negotiate with 3.222.39.124 port 46187: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 8 02:39:59 localhost sshd[1285]: Connection closed by 3.222.39.124 port 43043 [preauth] Jun 8 02:39:59 localhost sshd[1390]: Unable to negotiate with 3.222.39.124 port 4467: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:39:59 localhost sshd[1413]: Connection closed by 3.222.39.124 port 35527 [preauth] Jun 8 02:40:00 localhost sshd[1447]: Connection closed by 3.222.39.124 port 35412 [preauth] Jun 8 02:40:00 localhost sshd[1550]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:40:00 localhost sshd[1631]: Unable to negotiate with 3.222.39.124 port 26653: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:40:05 localhost sshd[3065]: Connection closed by 14.63.166.251 port 33150 [preauth] Jun 8 02:41:36 localhost sshd[4182]: Invalid user admin from 185.156.73.233 port 21062 Jun 8 02:41:36 localhost sshd[4182]: Connection closed by invalid user admin 185.156.73.233 port 21062 [preauth] Jun 8 02:43:26 localhost sshd[4187]: Accepted publickey for zuul from 38.102.83.51 port 33080 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:26 localhost systemd[4191]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:27 localhost sshd[4187]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:44:06 localhost sudo[4787]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hbxffumxfzwstszgpuevsdlzedguojle ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4787]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4835]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nxnpkxgbilrmyqbgccdxmgwnlpwtqhbn ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:07 localhost sudo[4835]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:08 localhost sudo[4878]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-byblvjpnvingxbzglqbokwriintvztiy ; /usr/bin/python3 Jun 8 02:44:08 localhost sudo[4878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:08 localhost sudo[4878]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5272]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rfbwjrvuphxoeehginbvyruvzbvhgodg ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5272]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5293]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tucdfrcwdpbcbyvncdumyhkyblwpvywq ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5293]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5543]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iototziqammyoeyvoauxkwmrqlobluwn ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5543]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:30 localhost sudo[5586]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zqcluiamajzlctbqomhissrjlurnxxda ; /usr/bin/python3 Jun 8 02:44:30 localhost sudo[5586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:30 localhost sudo[5586]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5680]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rnzjadbkvwafffoppzkexmxcibktpzcg ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:32 localhost sudo[5680]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5723]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wfzxmrjwqckilwjklazmjeoqvkskjxfi ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5723]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:34 localhost sudo[5754]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uiockwrzdwfcruzgokvhtjyotiwvewcm ; /usr/bin/python3 Jun 8 02:44:34 localhost sudo[5754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5754]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:56 localhost sudo[5808]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rnzgzqcyaqkfaqypswegxccajilmkqrc ; /usr/bin/python3 Jun 8 02:44:56 localhost sudo[5808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:56 localhost sudo[5808]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:56 localhost sshd[4200]: Received disconnect from 38.102.83.51 port 33080:11: disconnected by user Jun 8 02:45:56 localhost sshd[4200]: Disconnected from user zuul 38.102.83.51 port 33080 Jun 8 02:45:56 localhost sshd[4187]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:48:13 localhost sshd[5818]: Accepted publickey for zuul from 38.102.83.51 port 56920 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:48:13 localhost sshd[5818]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:48:26 localhost sudo[5883]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mjwssqjavdyhujyywuwownjxlddrjnyr ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:26 localhost sudo[5883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:26 localhost sudo[5883]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:26 localhost sudo[5926]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bzhzhgwcprtyshfkxfdbtsjeypxyxlvu ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:26 localhost sudo[5926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:27 localhost sudo[5926]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:27 localhost sudo[5956]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uplmciaiywhhsycvzupuucjwhjvggjxr ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:27 localhost sudo[5956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:27 localhost sudo[5956]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:28 localhost sshd[5821]: Received disconnect from 38.102.83.51 port 56920:11: disconnected by user Jun 8 02:49:28 localhost sshd[5821]: Disconnected from user zuul 38.102.83.51 port 56920 Jun 8 02:49:28 localhost sshd[5818]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:49:59 localhost sshd[6059]: error: kex_exchange_identification: Connection closed by remote host Jun 8 02:49:59 localhost sshd[6059]: Connection closed by 172.105.102.42 port 50480 Jun 8 02:50:20 localhost sshd[6060]: error: kex_exchange_identification: Connection closed by remote host Jun 8 02:50:20 localhost sshd[6060]: Connection closed by 172.105.102.42 port 7624 Jun 8 02:50:20 localhost sshd[6066]: error: Protocol major versions differ: 2 vs. 1 Jun 8 02:50:20 localhost sshd[6064]: error: kex_exchange_identification: Connection closed by remote host Jun 8 02:50:20 localhost sshd[6062]: error: Protocol major versions differ: 2 vs. 1 Jun 8 02:50:20 localhost sshd[6064]: Connection closed by 172.105.102.42 port 7688 Jun 8 02:50:20 localhost sshd[6062]: banner exchange: Connection from 172.105.102.42 port 7646: could not read protocol version Jun 8 02:50:20 localhost sshd[6066]: banner exchange: Connection from 172.105.102.42 port 7704: could not read protocol version Jun 8 02:50:20 localhost sshd[6065]: Unable to negotiate with 172.105.102.42 port 7716: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Jun 8 02:50:20 localhost sshd[6070]: Unable to negotiate with 172.105.102.42 port 7730: no matching host key type found. Their offer: ssh-dss [preauth] Jun 8 02:50:20 localhost sshd[6063]: Invalid user vhlre from 172.105.102.42 port 7672 Jun 8 02:50:21 localhost sshd[6063]: Connection closed by invalid user vhlre 172.105.102.42 port 7672 [preauth] Jun 8 02:50:21 localhost sshd[6072]: Unable to negotiate with 172.105.102.42 port 7736: no matching MAC found. Their offer: hmac-md5,hmac-sha1,hmac-ripemd160 [preauth] Jun 8 02:50:21 localhost sshd[6074]: Unable to negotiate with 172.105.102.42 port 7744: no matching MAC found. Their offer: hmac-md5,hmac-sha1,hmac-ripemd160 [preauth] Jun 8 02:50:21 localhost sshd[6076]: Unable to negotiate with 172.105.102.42 port 7750: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth] Jun 8 02:50:22 localhost sshd[6078]: Unable to negotiate with 172.105.102.42 port 7754: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth] Jun 8 02:50:22 localhost sshd[6080]: Unable to negotiate with 172.105.102.42 port 7764: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 02:50:22 localhost sshd[6061]: Connection closed by 172.105.102.42 port 7660 [preauth] Jun 8 02:50:47 localhost sshd[6082]: Accepted publickey for zuul from 38.102.83.51 port 49700 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:50:47 localhost sshd[6082]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:50:47 localhost sudo[6131]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aelbtojxpmwuybexzswbtwhkwxnuewni ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:47 localhost sudo[6131]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:47 localhost sudo[6131]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:47 localhost sudo[6174]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vzccunrfmrntxmrtkrutxywepriymulb ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:47 localhost sudo[6174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:47 localhost sudo[6174]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[6082]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:51:16 localhost sshd[6192]: error: kex_exchange_identification: Connection closed by remote host Jun 8 02:51:16 localhost sshd[6192]: Connection closed by 2.57.122.238 port 42998 Jun 8 02:53:40 localhost sshd[6194]: Invalid user sol from 2.57.122.238 port 58930 Jun 8 02:53:40 localhost sshd[6194]: Connection closed by invalid user sol 2.57.122.238 port 58930 [preauth] Jun 8 02:53:57 localhost sshd[6197]: Connection closed by authenticating user root 185.156.73.233 port 48498 [preauth] Jun 8 02:56:04 localhost sshd[6202]: Invalid user solana from 2.57.122.238 port 55732 Jun 8 02:56:04 localhost sshd[6202]: Connection closed by invalid user solana 2.57.122.238 port 55732 [preauth] Jun 8 02:57:05 localhost sshd[6205]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedAlgorithms [preauth] Jun 8 02:57:05 localhost sshd[6205]: Received disconnect from 128.0.104.44 port 34074:11: disconnected by user [preauth] Jun 8 02:57:05 localhost sshd[6205]: Disconnected from authenticating user root 128.0.104.44 port 34074 [preauth] Jun 8 02:58:23 localhost sshd[6207]: Invalid user solv from 2.57.122.238 port 58752 Jun 8 02:58:24 localhost sshd[6207]: Connection closed by invalid user solv 2.57.122.238 port 58752 [preauth] Jun 8 02:59:46 localhost sshd[6211]: Accepted publickey for zuul from 38.102.83.51 port 55790 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:46 localhost sshd[6211]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:46 localhost sudo[6228]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rroirpkbkpbtaibkqpqwrzkfhlbquseu ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6228]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6247]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ozrqseqdvobjceawlkshfzfoofthqxjn ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6247]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6263]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ylaoxfrxfmwrrsvpguyhjiqohbivqynm ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6263]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6279]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bhnqwfuaviwxtcfroupknupazaclkhfr ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6279]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6295]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkxjwljlmoibvuvkxhyxlzudqcryvcnq ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6295]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6311]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uarmlhicndwhvjqaulcvvrxosqsizmvb ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6311]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:50 localhost sudo[6359]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rjdgmslxnwcnsvulfpztsxuykwpolvni ; /usr/bin/python3 Jun 8 02:59:50 localhost sudo[6359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6359]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6402]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iluqqwlaypskyctxmipezlxldtwbazkh ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6402]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:52 localhost sudo[6433]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cswvetspxgajkvttvqmkhduofvcjjuyd ; /usr/bin/python3 Jun 8 02:59:52 localhost sudo[6433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:53 localhost sudo[6433]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6480]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqdasrkihkdleiewatdjyimfkcdgkdrm ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6480]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6496]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ivmmjlvfjtcpzzwnhxceeeruabpbqdcx ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6496]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6514]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wbolllqwoxxkypmohlnpacqwuprjlkug ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6514]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6532]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oewzwtptjldyzibqaqwtpljousavmnrs ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6532]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6550]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmiyqyhazvrfuxfnzmozeyuuvkpkpwex ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6550]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6211]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:44 localhost sshd[6594]: Invalid user solv from 2.57.122.238 port 51514 Jun 8 03:00:44 localhost sshd[6594]: Connection closed by invalid user solv 2.57.122.238 port 51514 [preauth] Jun 8 03:00:54 localhost sshd[6597]: Accepted publickey for zuul from 38.102.83.51 port 55348 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:00:54 localhost sshd[6597]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:00:54 localhost sudo[6614]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hkuvyanwjccatnnceagexpxxfqfegsdf ; /usr/bin/python3 Jun 8 03:00:54 localhost sudo[6614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:01:15 localhost sudo[6614]: pam_unix(sudo:session): session closed for user root Jun 8 03:01:45 localhost sudo[6712]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmkygzwzylyfjuhjopbldxxmmgmmbmcu ; /usr/bin/python3 Jun 8 03:01:45 localhost sudo[6712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:02:53 localhost sshd[6782]: Invalid user solv from 2.57.122.238 port 50644 Jun 8 03:02:53 localhost sshd[6782]: Connection closed by invalid user solv 2.57.122.238 port 50644 [preauth] Jun 8 03:03:22 localhost sudo[6712]: pam_unix(sudo:session): session closed for user root Jun 8 03:03:39 localhost sudo[6831]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-emwmjxlkudioeulfrxodutidmwkzgbni ; /usr/bin/python3 Jun 8 03:03:39 localhost sudo[6831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:04:32 localhost sudo[6831]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:01 localhost sshd[18486]: Invalid user solv from 2.57.122.238 port 60926 Jun 8 03:05:01 localhost sshd[18486]: Connection closed by invalid user solv 2.57.122.238 port 60926 [preauth] Jun 8 03:05:26 localhost sudo[18501]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xirzgzmyzmadwknwwdvtynoebwsfzddv ; /usr/bin/python3 Jun 8 03:05:26 localhost sudo[18501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:27 localhost sudo[18501]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6597]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:06:15 localhost sshd[18569]: Connection closed by 38.102.83.2 port 42664 [preauth] Jun 8 03:06:15 localhost sshd[18573]: Connection closed by 38.102.83.2 port 42678 [preauth] Jun 8 03:06:15 localhost sshd[18572]: Unable to negotiate with 38.102.83.2 port 42682: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:15 localhost sshd[18571]: Unable to negotiate with 38.102.83.2 port 42684: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:15 localhost sshd[18570]: Unable to negotiate with 38.102.83.2 port 42688: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:20 localhost sshd[18579]: Accepted publickey for zuul from 38.102.83.51 port 40384 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:20 localhost sshd[18579]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18610]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-anqyqjetmxmqxzkgmhudvjicnmxjrumx ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18610]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18579]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:07:15 localhost sshd[18614]: Invalid user ethereum from 2.57.122.238 port 37406 Jun 8 03:07:15 localhost sshd[18614]: Connection closed by invalid user ethereum 2.57.122.238 port 37406 [preauth] Jun 8 03:07:45 localhost sshd[18617]: Accepted publickey for zuul from 38.102.83.51 port 41074 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18617]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18634]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qulossieurhzbcshxtgvarqqteiucqqn ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:45 localhost sudo[18634]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18650]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-geulrptlkbrqpykcfrzkpgomceshhxsi ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18650]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18700]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjyxktiewtgpqqwxrjvdkervgayxbpbw ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18700]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18743]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-omtrxvfcytyrsjzkfybqklijpdxjadzo ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18743]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18805]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hinafkenayljdtfskirkdnxtjkcqtupl ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18805]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18848]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ukygvltcffvmimmdcsxzhzbawprxbuqt ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18848]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:52 localhost sudo[18878]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lnvcsmjhxnqnldlbfwemjzpzcoluntsu ; /usr/bin/python3 Jun 8 03:07:52 localhost sudo[18878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:52 localhost sudo[18878]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:58 localhost sshd[18617]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:29 localhost sshd[19112]: Invalid user node from 2.57.122.238 port 40858 Jun 8 03:09:29 localhost sshd[19112]: Connection closed by invalid user node 2.57.122.238 port 40858 [preauth] Jun 8 03:09:32 localhost sshd[19115]: Accepted publickey for zuul from 38.102.83.51 port 59660 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:32 localhost sshd[19115]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:32 localhost sudo[19132]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eigvedsjashsdmxmctxcbvpzubaljamd ; /usr/bin/python3 Jun 8 03:09:32 localhost sudo[19132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:33 localhost sudo[19132]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[19115]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:53 localhost sshd[19139]: Accepted publickey for zuul from 38.102.83.51 port 33272 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:53 localhost sshd[19139]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:54 localhost sudo[19143]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log