Jun 8 02:40:02 localhost polkitd[1036]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:40:02 localhost polkitd[1036]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:40:02 localhost polkitd[1036]: Finished loading, compiling and executing 4 rules Jun 8 02:40:02 localhost polkitd[1036]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:40:04 localhost useradd[1119]: new group: name=cloud-user, GID=1001 Jun 8 02:40:04 localhost useradd[1119]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:40:04 localhost useradd[1119]: add 'cloud-user' to group 'adm' Jun 8 02:40:04 localhost useradd[1119]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:40:04 localhost useradd[1119]: add 'cloud-user' to shadow group 'adm' Jun 8 02:40:04 localhost useradd[1119]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:40:05 localhost sshd[1133]: Server listening on 0.0.0.0 port 22. Jun 8 02:40:05 localhost sshd[1133]: Server listening on :: port 22. Jun 8 02:40:05 localhost sshd[1223]: Unable to negotiate with 3.222.39.124 port 2088: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:40:05 localhost sshd[1164]: Connection closed by 3.222.39.124 port 11818 [preauth] Jun 8 02:40:05 localhost sshd[1133]: Received signal 15; terminating. Jun 8 02:40:05 localhost sshd[1321]: Server listening on 0.0.0.0 port 22. Jun 8 02:40:05 localhost sshd[1321]: Server listening on :: port 22. Jun 8 02:40:05 localhost sshd[1337]: Unable to negotiate with 3.222.39.124 port 4849: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:40:05 localhost sshd[1261]: Connection closed by 3.222.39.124 port 6490 [preauth] Jun 8 02:40:05 localhost sshd[1373]: Connection reset by 3.222.39.124 port 35509 [preauth] Jun 8 02:40:05 localhost sshd[1426]: Connection closed by 3.222.39.124 port 2505 [preauth] Jun 8 02:40:05 localhost sshd[1450]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:40:05 localhost sshd[1529]: Unable to negotiate with 3.222.39.124 port 14281: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:41:40 localhost sshd[4177]: Received disconnect from 217.156.65.251 port 33464:11: disconnected by user [preauth] Jun 8 02:41:40 localhost sshd[4177]: Disconnected from authenticating user root 217.156.65.251 port 33464 [preauth] Jun 8 02:41:41 localhost sshd[4179]: Received disconnect from 104.194.10.248 port 39508:11: disconnected by user [preauth] Jun 8 02:41:41 localhost sshd[4179]: Disconnected from authenticating user root 104.194.10.248 port 39508 [preauth] Jun 8 02:43:26 localhost sshd[4184]: Accepted publickey for zuul from 38.102.83.51 port 53542 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:26 localhost systemd[4188]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:27 localhost sshd[4184]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:44:06 localhost sudo[4784]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vvyfjqctehxtgwuovsawfahctgfvtyfh ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4784]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4832]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mctbndyhvzaoliqjuifcexcoukprzsll ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:07 localhost sudo[4832]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:08 localhost sudo[4875]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bcthcgdimwhlakcncgmqemqcpygusetz ; /usr/bin/python3 Jun 8 02:44:08 localhost sudo[4875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:08 localhost sudo[4875]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5269]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-driqxsraizglwzvcsdrcnuubsztmanjy ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5269]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5290]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kiljqxtaskyamwsaxxqluaixzhkyzvgd ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5290]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5540]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xxelnvelqteltzkahxsejhzddcekaakq ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5540]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:30 localhost sudo[5583]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wwjiddzwqamnwdenduelkwfbzxxrwkxd ; /usr/bin/python3 Jun 8 02:44:30 localhost sudo[5583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:30 localhost sudo[5583]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5679]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpaaqyyweqrtvoyycslkacqkbjijxgaj ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5679]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5722]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dzrnjawlngbguqgbwvwtkvekhnnodkhm ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5722]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sshd[5632]: Received disconnect from 172.110.221.82 port 15620:11: disconnected by user [preauth] Jun 8 02:44:33 localhost sshd[5632]: Disconnected from authenticating user root 172.110.221.82 port 15620 [preauth] Jun 8 02:44:34 localhost sudo[5753]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vepnzejpuirkwpggtgdvmhehqjbxpeqd ; /usr/bin/python3 Jun 8 02:44:34 localhost sudo[5753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5753]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:36 localhost sshd[5777]: Received disconnect from 191.101.33.115 port 38458:11: disconnected by user [preauth] Jun 8 02:44:36 localhost sshd[5777]: Disconnected from authenticating user root 191.101.33.115 port 38458 [preauth] Jun 8 02:44:56 localhost sudo[5809]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xiujwwsuogzlexptifvelailfsangefq ; /usr/bin/python3 Jun 8 02:44:56 localhost sudo[5809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:56 localhost sudo[5809]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:21 localhost sshd[5812]: Invalid user admin from 185.156.73.233 port 22040 Jun 8 02:45:21 localhost sshd[5812]: Connection closed by invalid user admin 185.156.73.233 port 22040 [preauth] Jun 8 02:45:56 localhost sshd[4197]: Received disconnect from 38.102.83.51 port 53542:11: disconnected by user Jun 8 02:45:56 localhost sshd[4197]: Disconnected from user zuul 38.102.83.51 port 53542 Jun 8 02:45:56 localhost sshd[4184]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:46:03 localhost sshd[5816]: Invalid user usuario from 124.18.182.99 port 40436 Jun 8 02:46:03 localhost sshd[5816]: Received disconnect from 124.18.182.99 port 40436:11: Bye Bye [preauth] Jun 8 02:46:03 localhost sshd[5816]: Disconnected from invalid user usuario 124.18.182.99 port 40436 [preauth] Jun 8 02:46:24 localhost sshd[5819]: Invalid user ubuntu from 185.233.3.95 port 50188 Jun 8 02:46:24 localhost sshd[5819]: Received disconnect from 185.233.3.95 port 50188:11: Bye Bye [preauth] Jun 8 02:46:24 localhost sshd[5819]: Disconnected from invalid user ubuntu 185.233.3.95 port 50188 [preauth] Jun 8 02:48:41 localhost sshd[5825]: Accepted publickey for zuul from 38.102.83.51 port 46092 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:48:41 localhost sshd[5825]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:48:54 localhost sudo[5890]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cjwogyiqqfsejwcbswkzyzxpbdqgatfe ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:54 localhost sudo[5890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:54 localhost sudo[5890]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:55 localhost sudo[5933]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wnumxdxbsozsvqkrikaoqmvkxotidcyv ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:55 localhost sudo[5933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:55 localhost sudo[5933]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:55 localhost sudo[5963]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xrbeximqcumzjtdvlhmfhvxpuntqqway ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:48:55 localhost sudo[5963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:48:55 localhost sudo[5963]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:56 localhost sshd[5828]: Received disconnect from 38.102.83.51 port 46092:11: disconnected by user Jun 8 02:49:56 localhost sshd[5828]: Disconnected from user zuul 38.102.83.51 port 46092 Jun 8 02:49:56 localhost sshd[5825]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:50:48 localhost sshd[6065]: Accepted publickey for zuul from 38.102.83.51 port 55744 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:50:48 localhost sshd[6065]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:50:48 localhost sudo[6114]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hdasqmhtcgkkzozzxypjpfnwhdotdpea ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:48 localhost sudo[6114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:48 localhost sudo[6114]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:48 localhost sudo[6157]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zxyxrjvdjuiaweekgnjkozbnqwrlzbvu ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:48 localhost sudo[6157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:48 localhost sudo[6157]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[6065]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:52:17 localhost sshd[6176]: Received disconnect from 148.113.221.114 port 39066:11: disconnected by user [preauth] Jun 8 02:52:17 localhost sshd[6176]: Disconnected from authenticating user root 148.113.221.114 port 39066 [preauth] Jun 8 02:55:23 localhost sshd[6181]: Received disconnect from 103.161.34.59 port 4008:11: disconnected by user [preauth] Jun 8 02:55:23 localhost sshd[6181]: Disconnected from authenticating user root 103.161.34.59 port 4008 [preauth] Jun 8 02:57:43 localhost sshd[6186]: Connection closed by authenticating user root 185.156.73.233 port 47688 [preauth] Jun 8 02:58:17 localhost sshd[6188]: Received disconnect from 185.233.3.95 port 48296:11: Bye Bye [preauth] Jun 8 02:58:17 localhost sshd[6188]: Disconnected from authenticating user root 185.233.3.95 port 48296 [preauth] Jun 8 02:58:40 localhost sshd[6190]: Invalid user vpn from 124.18.182.99 port 60566 Jun 8 02:58:40 localhost sshd[6190]: Received disconnect from 124.18.182.99 port 60566:11: Bye Bye [preauth] Jun 8 02:58:40 localhost sshd[6190]: Disconnected from invalid user vpn 124.18.182.99 port 60566 [preauth] Jun 8 02:59:46 localhost sshd[6193]: Accepted publickey for zuul from 38.102.83.51 port 50546 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:46 localhost sshd[6193]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:46 localhost sudo[6210]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dsbyipiaxdvqkwwgvjqielpyomtvyaah ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6210]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6229]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lxuizfgydcrzhibcxotdlvdhshgliwcu ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6229]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6245]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcdytjjrqxoisihgbgxziuborjiyyptb ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6245]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6261]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpqbjddvcgafsinhoiwyuhxjnicdtqsk ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6261]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6277]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdfedkwhelbthldrcyjlcbdxaaaltyab ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6277]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6293]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nkkhqhwvxpykruqkrdnhzcedffrnlhrh ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6293]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6341]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ygjzvjqjbfyumgudonpnyrrorulubrky ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6341]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6384]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ofgqvsrafhcxbgwklozxtjinknajknio ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6384]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:53 localhost sudo[6414]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tdjmzyrxodrfwvtunmgaejezxlknaygb ; /usr/bin/python3 Jun 8 02:59:53 localhost sudo[6414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:53 localhost sudo[6414]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6461]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qdzhcgudnfzcfxcogicvlklunzaxawvq ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6461]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6477]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bsqwzvfuniaiudkohcrhfaasljprkcrr ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6477]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6495]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-olzxxriopzobpgtfzanukjafuamrmevs ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6495]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6513]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hsvzmjgnqfyvbputrbawbwcdeskdrbjx ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6513]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6531]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tihccmxzqwzpqzwrudynkdtfynyszdhu ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:57 localhost sudo[6531]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6193]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:54 localhost sshd[6576]: Accepted publickey for zuul from 38.102.83.51 port 49586 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:00:54 localhost sshd[6576]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:00:54 localhost sudo[6593]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bqsftokfonorasvzfnsibnlcrceluycd ; /usr/bin/python3 Jun 8 03:00:54 localhost sudo[6593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:01:04 localhost sshd[6677]: Invalid user user from 124.18.182.99 port 37622 Jun 8 03:01:04 localhost sshd[6677]: Received disconnect from 124.18.182.99 port 37622:11: Bye Bye [preauth] Jun 8 03:01:04 localhost sshd[6677]: Disconnected from invalid user user 124.18.182.99 port 37622 [preauth] Jun 8 03:01:15 localhost sudo[6593]: pam_unix(sudo:session): session closed for user root Jun 8 03:01:45 localhost sudo[6692]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uduaxhmdsxffcilaowakkasfvyybufqs ; /usr/bin/python3 Jun 8 03:01:45 localhost sudo[6692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:01:48 localhost sshd[6762]: Invalid user yuany from 185.233.3.95 port 57578 Jun 8 03:01:48 localhost sshd[6762]: Received disconnect from 185.233.3.95 port 57578:11: Bye Bye [preauth] Jun 8 03:01:48 localhost sshd[6762]: Disconnected from invalid user yuany 185.233.3.95 port 57578 [preauth] Jun 8 03:02:35 localhost sshd[6770]: Received disconnect from 102.129.200.117 port 22008:11: disconnected by user [preauth] Jun 8 03:02:35 localhost sshd[6770]: Disconnected from authenticating user root 102.129.200.117 port 22008 [preauth] Jun 8 03:03:04 localhost sudo[6692]: pam_unix(sudo:session): session closed for user root Jun 8 03:03:21 localhost sshd[6783]: Received disconnect from 129.232.165.250 port 50748:11: disconnected by user [preauth] Jun 8 03:03:21 localhost sshd[6783]: Disconnected from authenticating user root 129.232.165.250 port 50748 [preauth] Jun 8 03:03:25 localhost sshd[6785]: Received disconnect from 124.18.182.99 port 33028:11: Bye Bye [preauth] Jun 8 03:03:25 localhost sshd[6785]: Disconnected from authenticating user root 124.18.182.99 port 33028 [preauth] Jun 8 03:03:26 localhost sshd[6787]: Received disconnect from 114.29.11.190 port 56670:11: Bye Bye [preauth] Jun 8 03:03:26 localhost sshd[6787]: Disconnected from authenticating user root 114.29.11.190 port 56670 [preauth] Jun 8 03:03:39 localhost sudo[6820]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uzpzodsznyzberyrkemqqnhlchntcjxa ; /usr/bin/python3 Jun 8 03:03:39 localhost sudo[6820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:04:32 localhost sudo[6820]: pam_unix(sudo:session): session closed for user root Jun 8 03:04:36 localhost sshd[11175]: Connection closed by authenticating user root 80.94.95.115 port 17820 [preauth] Jun 8 03:05:15 localhost sshd[18477]: Invalid user root2 from 185.233.3.95 port 38500 Jun 8 03:05:15 localhost sshd[18477]: Received disconnect from 185.233.3.95 port 38500:11: Bye Bye [preauth] Jun 8 03:05:15 localhost sshd[18477]: Disconnected from invalid user root2 185.233.3.95 port 38500 [preauth] Jun 8 03:05:26 localhost sudo[18492]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afyfywkhgdpvzvdhxghxvjrscdqtuyyl ; /usr/bin/python3 Jun 8 03:05:26 localhost sudo[18492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:27 localhost sudo[18492]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6576]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:05:43 localhost sshd[18558]: Received disconnect from 124.18.182.99 port 33508:11: Bye Bye [preauth] Jun 8 03:05:43 localhost sshd[18558]: Disconnected from authenticating user root 124.18.182.99 port 33508 [preauth] Jun 8 03:06:05 localhost sshd[18560]: Connection closed by 194.164.107.4 port 37124 [preauth] Jun 8 03:06:15 localhost sshd[18563]: Connection closed by 38.102.83.2 port 53254 [preauth] Jun 8 03:06:15 localhost sshd[18562]: Unable to negotiate with 38.102.83.2 port 53274: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:15 localhost sshd[18566]: Connection closed by 38.102.83.2 port 53250 [preauth] Jun 8 03:06:15 localhost sshd[18565]: Unable to negotiate with 38.102.83.2 port 53258: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:15 localhost sshd[18564]: Unable to negotiate with 38.102.83.2 port 53286: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:20 localhost sshd[18572]: Accepted publickey for zuul from 38.102.83.51 port 40204 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:20 localhost sshd[18572]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18603]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jbxvlzlrtrkbehrncxppojooefesghby ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18603]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18572]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:06:24 localhost sshd[18606]: Received disconnect from 114.29.11.190 port 60088:11: Bye Bye [preauth] Jun 8 03:06:24 localhost sshd[18606]: Disconnected from authenticating user root 114.29.11.190 port 60088 [preauth] Jun 8 03:06:59 localhost sshd[18608]: Invalid user satis from 14.103.115.233 port 58632 Jun 8 03:06:59 localhost sshd[18608]: Received disconnect from 14.103.115.233 port 58632:11: Bye Bye [preauth] Jun 8 03:06:59 localhost sshd[18608]: Disconnected from invalid user satis 14.103.115.233 port 58632 [preauth] Jun 8 03:07:45 localhost sshd[18612]: Accepted publickey for zuul from 38.102.83.51 port 46892 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18612]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18629]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntkojkyyfzbpswbvbfttchcywyzxakzt ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18629]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18645]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdekopnlqhswftpfzcxtougbafwckrvr ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:47 localhost sudo[18645]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18695]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hnpzxvaiwlwwgomaobfwiypovbafhcrl ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18695]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18738]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tcbpuscfhwagtipjztjfamaspgqhmsdn ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18738]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18800]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uddlcdsgceplfadgfopgvcadbzwmxxij ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18800]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18843]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgpkrfotkzkuiruloghieuiibffkzdhc ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18843]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:52 localhost sudo[18873]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ingjvrfvrwvngblliblbqprnsgrmcphn ; /usr/bin/python3 Jun 8 03:07:52 localhost sudo[18873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:52 localhost sudo[18873]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:57 localhost sshd[19028]: Invalid user pablo from 124.18.182.99 port 50226 Jun 8 03:07:57 localhost sshd[19028]: Received disconnect from 124.18.182.99 port 50226:11: Bye Bye [preauth] Jun 8 03:07:57 localhost sshd[19028]: Disconnected from invalid user pablo 124.18.182.99 port 50226 [preauth] Jun 8 03:07:58 localhost sshd[18612]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:08:57 localhost sshd[19107]: Received disconnect from 185.233.3.95 port 50380:11: Bye Bye [preauth] Jun 8 03:08:57 localhost sshd[19107]: Disconnected from authenticating user root 185.233.3.95 port 50380 [preauth] Jun 8 03:09:32 localhost sshd[19110]: Accepted publickey for zuul from 38.102.83.51 port 58258 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:32 localhost sshd[19110]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:32 localhost sudo[19127]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpwokqvoimcctkheljfqhxhhjhfjmspx ; /usr/bin/python3 Jun 8 03:09:32 localhost sudo[19127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:33 localhost sudo[19127]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[19110]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:53 localhost sshd[19133]: Accepted publickey for zuul from 38.102.83.51 port 40838 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:53 localhost sshd[19133]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:54 localhost sudo[19137]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log