Jun 8 02:39:47 localhost polkitd[1040]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:39:47 localhost polkitd[1040]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:39:47 localhost polkitd[1040]: Finished loading, compiling and executing 4 rules Jun 8 02:39:47 localhost polkitd[1040]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:39:49 localhost useradd[1119]: new group: name=cloud-user, GID=1001 Jun 8 02:39:49 localhost useradd[1119]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:39:49 localhost useradd[1119]: add 'cloud-user' to group 'adm' Jun 8 02:39:49 localhost useradd[1119]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:39:49 localhost useradd[1119]: add 'cloud-user' to shadow group 'adm' Jun 8 02:39:49 localhost useradd[1119]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:39:50 localhost sshd[1133]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:50 localhost sshd[1133]: Server listening on :: port 22. Jun 8 02:39:50 localhost sshd[1185]: Unable to negotiate with 3.222.39.124 port 10233: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:39:50 localhost sshd[1153]: Connection closed by 3.222.39.124 port 1693 [preauth] Jun 8 02:39:50 localhost sshd[1133]: Received signal 15; terminating. Jun 8 02:39:50 localhost sshd[1279]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:50 localhost sshd[1279]: Server listening on :: port 22. Jun 8 02:39:50 localhost sshd[1212]: Connection closed by 3.222.39.124 port 52211 [preauth] Jun 8 02:39:50 localhost sshd[1311]: Connection closed by 3.222.39.124 port 35265 [preauth] Jun 8 02:39:50 localhost sshd[1370]: Connection closed by 3.222.39.124 port 56892 [preauth] Jun 8 02:39:50 localhost sshd[1430]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:39:50 localhost sshd[1452]: Unable to negotiate with 3.222.39.124 port 37361: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:40:31 localhost sshd[4174]: Invalid user validator from 2.57.122.238 port 41718 Jun 8 02:40:32 localhost sshd[4174]: Connection closed by invalid user validator 2.57.122.238 port 41718 [preauth] Jun 8 02:42:52 localhost sshd[4180]: Invalid user sol from 2.57.122.238 port 41206 Jun 8 02:42:52 localhost sshd[4180]: Connection closed by invalid user sol 2.57.122.238 port 41206 [preauth] Jun 8 02:43:26 localhost sshd[4182]: Accepted publickey for zuul from 38.102.83.51 port 54574 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:26 localhost systemd[4186]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:27 localhost sshd[4182]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:44:06 localhost sudo[4782]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qfuteuhykwpjimevfkmegqcxawzzymzs ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4782]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4830]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jeajgdaftflrellpxhydwolrrdoagnuy ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:08 localhost sudo[4830]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:08 localhost sudo[4873]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ornkxcdfwniyzjzrygpzcpdmitwaoatk ; /usr/bin/python3 Jun 8 02:44:08 localhost sudo[4873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:08 localhost sudo[4873]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5267]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxutmszofoclewskakutgdzxspwsxlsh ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5267]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5288]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjjhwmrgmzawbiqtnxjygazcumbaemke ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5288]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5538]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pxcjwetvjciuuuavxetzxdbpkcfnjpsm ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5538]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:30 localhost sudo[5581]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxnbfsejxkrqpflljjbcoelaqngieckh ; /usr/bin/python3 Jun 8 02:44:30 localhost sudo[5581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:30 localhost sudo[5581]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5675]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lyayydcwxkfndspuyfsjucngqnjjmoam ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5675]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5718]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyikazqoerganfceypallctfxkltxvcn ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5718]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:34 localhost sudo[5749]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jywywxekxusuiptybipkkdoawypdypyb ; /usr/bin/python3 Jun 8 02:44:34 localhost sudo[5749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5749]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:57 localhost sudo[5803]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-emqrvpjiouaffrlxjmecjnmbddfbujpo ; /usr/bin/python3 Jun 8 02:44:57 localhost sudo[5803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:57 localhost sudo[5803]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:07 localhost sshd[5806]: Invalid user sol from 2.57.122.238 port 57442 Jun 8 02:45:07 localhost sshd[5806]: Connection closed by invalid user sol 2.57.122.238 port 57442 [preauth] Jun 8 02:45:21 localhost sshd[5809]: Invalid user admin from 185.156.73.233 port 34390 Jun 8 02:45:21 localhost sshd[5809]: Connection closed by invalid user admin 185.156.73.233 port 34390 [preauth] Jun 8 02:45:57 localhost sshd[4195]: Received disconnect from 38.102.83.51 port 54574:11: disconnected by user Jun 8 02:45:57 localhost sshd[4195]: Disconnected from user zuul 38.102.83.51 port 54574 Jun 8 02:45:57 localhost sshd[4182]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:47:26 localhost sshd[5812]: Invalid user sol from 2.57.122.238 port 48280 Jun 8 02:47:27 localhost sshd[5812]: Connection closed by invalid user sol 2.57.122.238 port 48280 [preauth] Jun 8 02:49:37 localhost sshd[5819]: Accepted publickey for zuul from 38.102.83.51 port 52546 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:49:37 localhost sshd[5819]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:49:50 localhost sudo[5885]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bbufyodqtytavilgwencxrsqlbxsohcg ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:50 localhost sudo[5885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:51 localhost sudo[5885]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:51 localhost sudo[5928]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-juzuiecwrobkotzhkhuyzchyhredoqko ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:51 localhost sudo[5928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:51 localhost sudo[5928]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:51 localhost sudo[5958]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-teruingxiultmuovhaiwrabpeaxaanyq ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:51 localhost sudo[5958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:52 localhost sudo[5958]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:50 localhost sudo[6104]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-njodvjxhgtfldztlsdednzoajdlwyyjq ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:50 localhost sudo[6104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:50 localhost sudo[6104]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:50 localhost sudo[6147]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fgdarcivlifpnetpqkxlyyvpeupkcocv ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:50 localhost sudo[6147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:50 localhost sudo[6147]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[5819]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:57:43 localhost sshd[6168]: Connection closed by authenticating user root 185.156.73.233 port 36720 [preauth] Jun 8 02:59:46 localhost sshd[6173]: Accepted publickey for zuul from 38.102.83.51 port 47284 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:46 localhost sshd[6173]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:46 localhost sudo[6190]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bmxempixepsfaovzaxceyxvtaxtogich ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6190]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6209]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wktdfccagumwehwgcnvomyhxfqfofwoy ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6209]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6225]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bntibwnfvttpvyaxlbhniwvsplbeqzkh ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6225]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6241]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vfizaypmvfcwjlblilbxszvzoodsldiu ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6241]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6257]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mbrkugzfdylaiwkplsrdbxajowyfaxan ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6257]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6273]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sfospwozzqmpjyrwnyzbopzfdrvbbwkh ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6273]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6321]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rrejrxeliikkqvffinsltfjjahepxrmp ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6321]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6364]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kiqwhlmagmwjfmzqkiucfpriasqbvkwk ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6364]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:53 localhost sudo[6395]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgspyaegfkwggzkiqaxhbhwtklsxzgwf ; /usr/bin/python3 Jun 8 02:59:53 localhost sudo[6395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:53 localhost sudo[6395]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6441]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dysuciyxgmrlunqirkodxjoorbdpbwha ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6441]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6457]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bjsctnsmkkpoawsgomasuuvxhkkacptf ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6457]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6475]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-facrahcvxiqfoaxtatzrebkkiifyvleq ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6475]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6493]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jsmizgoquyieblmnfiwpwmbfbxhtypby ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:57 localhost sudo[6493]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:57 localhost sudo[6511]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-krhjrynrxmfqybfppzyplessbjuvzvxm ; /usr/bin/python3 Jun 8 02:59:57 localhost sudo[6511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:57 localhost sudo[6511]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6173]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:01:37 localhost sshd[6171]: fatal: Timeout before authentication for 218.71.38.151 port 60778 Jun 8 03:03:18 localhost sshd[6573]: Accepted publickey for zuul from 38.102.83.51 port 56424 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:03:18 localhost sshd[6573]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:03:19 localhost sudo[6590]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dcihoxptsppwsnitiqhidofsfcazshlo ; /usr/bin/python3 Jun 8 03:03:19 localhost sudo[6590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:03:37 localhost sudo[6590]: pam_unix(sudo:session): session closed for user root Jun 8 03:04:32 localhost sudo[6705]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjqjmcybivwdumudcevoqfjyjjlesdte ; /usr/bin/python3 Jun 8 03:04:32 localhost sudo[6705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:25 localhost sudo[6705]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:28 localhost sudo[12555]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zjpiadmjtxeufecsfjssptfsxtbwvmkg ; /usr/bin/python3 Jun 8 03:05:28 localhost sudo[12555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:28 localhost sudo[12555]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6573]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:06:16 localhost sshd[18441]: Unable to negotiate with 38.102.83.2 port 43842: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:16 localhost sshd[18440]: Unable to negotiate with 38.102.83.2 port 43852: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:16 localhost sshd[18444]: Connection closed by 38.102.83.2 port 43818 [preauth] Jun 8 03:06:16 localhost sshd[18443]: Connection closed by 38.102.83.2 port 43820 [preauth] Jun 8 03:06:16 localhost sshd[18442]: Unable to negotiate with 38.102.83.2 port 43830: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:20 localhost sshd[18450]: Accepted publickey for zuul from 38.102.83.51 port 39590 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:20 localhost sshd[18450]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18481]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-umxgwcxveqdqrlrbbgyvvynanuceimug ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18481]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18450]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:06:42 localhost sshd[18484]: Invalid user guest from 185.156.73.233 port 37398 Jun 8 03:06:42 localhost sshd[18484]: Connection closed by invalid user guest 185.156.73.233 port 37398 [preauth] Jun 8 03:07:45 localhost sshd[18489]: Accepted publickey for zuul from 38.102.83.51 port 43354 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18489]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18506]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pddtpwkhutyjzaovxqmobzdtxzbfuijb ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18506]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18522]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rdbnygmjafrodchercrogdfgdkbrewdz ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:47 localhost sudo[18522]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18572]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yzqcjxdvetptmfgkikhkgqapzlrdidvd ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18572]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18615]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yfuvfnnwhezjntxhtbysmmenrbbqlltg ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:49 localhost sudo[18615]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18677]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wracjhjoawzhavvxkuaozdybhxpdyxby ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18677]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18720]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lmynjzkoxhjpjgpwdllmwiujssfojjiz ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18720]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:52 localhost sudo[18750]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eogtaebqspqnxkhtajuccwefdliavguq ; /usr/bin/python3 Jun 8 03:07:52 localhost sudo[18750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:52 localhost sudo[18750]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:58 localhost sshd[18489]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:08:39 localhost sshd[18983]: Connection closed by authenticating user root 49.116.25.62 port 47279 [preauth] Jun 8 03:08:41 localhost sshd[18985]: Connection closed by authenticating user root 49.116.25.62 port 51389 [preauth] Jun 8 03:09:13 localhost sshd[18989]: Invalid user eris from 174.35.25.179 port 34576 Jun 8 03:09:13 localhost sshd[18989]: Received disconnect from 174.35.25.179 port 34576:11: Bye Bye [preauth] Jun 8 03:09:13 localhost sshd[18989]: Disconnected from invalid user eris 174.35.25.179 port 34576 [preauth] Jun 8 03:09:20 localhost sshd[18987]: Connection closed by authenticating user root 49.116.25.62 port 52472 [preauth] Jun 8 03:09:32 localhost sshd[18487]: fatal: Timeout before authentication for 49.116.25.62 port 18791 Jun 8 03:09:37 localhost sshd[18994]: Connection closed by authenticating user root 49.116.25.62 port 9599 [preauth] Jun 8 03:09:38 localhost sshd[18991]: Connection closed by authenticating user root 49.116.25.62 port 5976 [preauth] Jun 8 03:09:39 localhost sshd[18996]: Connection closed by authenticating user root 49.116.25.62 port 13996 [preauth] Jun 8 03:09:40 localhost sshd[18998]: Connection closed by authenticating user root 49.116.25.62 port 14872 [preauth] Jun 8 03:09:43 localhost sshd[19003]: Accepted publickey for zuul from 38.102.83.51 port 54084 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:43 localhost sshd[19003]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:43 localhost sudo[19020]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvkozydhlpufluuuipdmmrohbxfumuhu ; /usr/bin/python3 Jun 8 03:09:43 localhost sudo[19020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:44 localhost sudo[19020]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[19003]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:59 localhost sshd[19029]: Accepted publickey for zuul from 38.102.83.51 port 40964 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:59 localhost sshd[19029]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)