Feb 20 01:37:23 localhost polkitd[1036]: Loading rules from directory /etc/polkit-1/rules.d Feb 20 01:37:23 localhost polkitd[1036]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 20 01:37:23 localhost polkitd[1036]: Finished loading, compiling and executing 4 rules Feb 20 01:37:23 localhost polkitd[1036]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 20 01:37:25 localhost useradd[1118]: new group: name=cloud-user, GID=1001 Feb 20 01:37:25 localhost useradd[1118]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Feb 20 01:37:25 localhost useradd[1118]: add 'cloud-user' to group 'adm' Feb 20 01:37:25 localhost useradd[1118]: add 'cloud-user' to group 'systemd-journal' Feb 20 01:37:25 localhost useradd[1118]: add 'cloud-user' to shadow group 'adm' Feb 20 01:37:25 localhost useradd[1118]: add 'cloud-user' to shadow group 'systemd-journal' Feb 20 01:37:26 localhost sshd[1132]: Server listening on 0.0.0.0 port 22. Feb 20 01:37:26 localhost sshd[1132]: Server listening on :: port 22. Feb 20 01:37:28 localhost sshd[2104]: Connection reset by 38.102.83.114 port 39766 [preauth] Feb 20 01:37:28 localhost sshd[2113]: Unable to negotiate with 38.102.83.114 port 39768: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Feb 20 01:37:28 localhost sshd[2124]: Connection closed by 38.102.83.114 port 39780 [preauth] Feb 20 01:37:28 localhost sshd[2138]: Unable to negotiate with 38.102.83.114 port 39784: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Feb 20 01:37:28 localhost sshd[2147]: Unable to negotiate with 38.102.83.114 port 39790: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Feb 20 01:37:28 localhost sshd[2196]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 01:37:28 localhost sshd[2210]: Unable to negotiate with 38.102.83.114 port 39830: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Feb 20 01:37:28 localhost sshd[2160]: Connection closed by 38.102.83.114 port 39806 [preauth] Feb 20 01:37:28 localhost sshd[2178]: Connection closed by 38.102.83.114 port 39810 [preauth] Feb 20 01:38:16 localhost sshd[4176]: Accepted publickey for zuul from 38.102.83.114 port 47478 ssh2: RSA SHA256:zhs3MiW0JhxzckYcMHQES8SMYHj1iGcomnyzmbiwor8 Feb 20 01:38:16 localhost systemd[4180]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:38:16 localhost sshd[4176]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:38:56 localhost sudo[4779]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hwymmnbvmbzxxxhzxfupunpnsckhlxel ; /usr/bin/python3 Feb 20 01:38:56 localhost sudo[4779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:38:56 localhost sudo[4779]: pam_unix(sudo:session): session closed for user root Feb 20 01:38:57 localhost sudo[4827]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mcyurhdrwfgcajkjhpzukfoqikeoltvc ; /usr/bin/python3 Feb 20 01:38:57 localhost sudo[4827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:38:57 localhost sudo[4827]: pam_unix(sudo:session): session closed for user root Feb 20 01:38:57 localhost sudo[4870]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nbbcasopubbrzqyurcbdcvhsnysdqqcz ; /usr/bin/python3 Feb 20 01:38:57 localhost sudo[4870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:38:57 localhost sudo[4870]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:13 localhost sudo[5264]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-moeffqjmvelybixibricfekesrpsdxef ; /usr/bin/python3 Feb 20 01:39:13 localhost sudo[5264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:13 localhost sudo[5264]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:14 localhost sudo[5285]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fsayklylyjcgghasrhijcoaqvzixrxnl ; /usr/bin/python3 Feb 20 01:39:14 localhost sudo[5285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:14 localhost sudo[5285]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:18 localhost sudo[5535]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-arsigevpwkftqyowbsstsvxawfzaazuw ; /usr/bin/python3 Feb 20 01:39:18 localhost sudo[5535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:18 localhost sudo[5535]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:18 localhost sudo[5578]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-elygnzaivhqlekdqowuzdjqszumsienm ; /usr/bin/python3 Feb 20 01:39:18 localhost sudo[5578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:19 localhost sudo[5578]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:21 localhost sudo[5672]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ejdacomalfnhatdurepzcigkygcqjweh ; /usr/bin/python3 Feb 20 01:39:21 localhost sudo[5672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:21 localhost sudo[5672]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:21 localhost sudo[5716]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ieqjteymriiucuculixzjvfjpvsnikll ; /usr/bin/python3 Feb 20 01:39:21 localhost sudo[5716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:21 localhost sudo[5716]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:23 localhost sudo[5747]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lxzkiponnioshmvvautozoqniprzbjed ; /usr/bin/python3 Feb 20 01:39:23 localhost sudo[5747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:23 localhost sudo[5747]: pam_unix(sudo:session): session closed for user root Feb 20 01:39:45 localhost sudo[5802]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jkthlysuyqvjgfgylzhexzklgadftcnd ; /usr/bin/python3 Feb 20 01:39:45 localhost sudo[5802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:39:45 localhost sudo[5802]: pam_unix(sudo:session): session closed for user root Feb 20 01:40:45 localhost sshd[4189]: Received disconnect from 38.102.83.114 port 47478:11: disconnected by user Feb 20 01:40:45 localhost sshd[4189]: Disconnected from user zuul 38.102.83.114 port 47478 Feb 20 01:40:45 localhost sshd[4176]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:42:28 localhost sshd[5813]: Accepted publickey for zuul from 38.102.83.114 port 58182 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:42:28 localhost sshd[5813]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:42:41 localhost sudo[5878]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxgtfhycbbwwadiynlgzehvvjthxehhl ; OS_CLOUD=vexxhost /usr/bin/python3 Feb 20 01:42:41 localhost sudo[5878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:42:41 localhost sudo[5878]: pam_unix(sudo:session): session closed for user root Feb 20 01:42:42 localhost sudo[5921]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gfjlbvfvnttrwpbtuynrgusbiewoqtfu ; OS_CLOUD=vexxhost /usr/bin/python3 Feb 20 01:42:42 localhost sudo[5921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:42:42 localhost sudo[5921]: pam_unix(sudo:session): session closed for user root Feb 20 01:42:42 localhost sudo[5951]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-arfrginhlyrjwwxmgmcfwafhycbypbgo ; OS_CLOUD=vexxhost /usr/bin/python3 Feb 20 01:42:42 localhost sudo[5951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:42:43 localhost sudo[5951]: pam_unix(sudo:session): session closed for user root Feb 20 01:43:43 localhost sshd[5816]: Received disconnect from 38.102.83.114 port 58182:11: disconnected by user Feb 20 01:43:43 localhost sshd[5816]: Disconnected from user zuul 38.102.83.114 port 58182 Feb 20 01:43:43 localhost sshd[5813]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:45:21 localhost sshd[6056]: Accepted publickey for zuul from 38.102.83.114 port 49962 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:45:21 localhost sshd[6056]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:45:22 localhost sudo[6105]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afkczollvrzxpzyhqnofzlihdnpyxexo ; OS_CLOUD=vexxhost /usr/bin/python3 Feb 20 01:45:22 localhost sudo[6105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:45:22 localhost sudo[6105]: pam_unix(sudo:session): session closed for user root Feb 20 01:45:22 localhost sudo[6148]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-unrxfpdtnjpvojouedaeglmrwerndmse ; OS_CLOUD=vexxhost /usr/bin/python3 Feb 20 01:45:22 localhost sudo[6148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:45:22 localhost sudo[6148]: pam_unix(sudo:session): session closed for user root Feb 20 01:45:28 localhost sshd[6056]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:52:16 localhost sshd[6168]: Accepted publickey for zuul from 38.102.83.114 port 53712 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:52:16 localhost sshd[6168]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:52:17 localhost sudo[6188]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cjwqzjycvngidexcuqhymhexydslozsl ; /usr/bin/python3 Feb 20 01:52:17 localhost sudo[6188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:17 localhost sudo[6188]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:28 localhost sudo[6208]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tpwlkzgxudxvmxozgcdhkiwenakgswcg ; /usr/bin/python3 Feb 20 01:52:28 localhost sudo[6208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:28 localhost sudo[6208]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:28 localhost sudo[6224]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bffkoskygwcrkyhgfsptrioqxlottqdw ; /usr/bin/python3 Feb 20 01:52:28 localhost sudo[6224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:28 localhost sudo[6224]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:28 localhost sudo[6240]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iqbzjdenpbzpgenkgigbrhrmmcpggdfw ; /usr/bin/python3 Feb 20 01:52:28 localhost sudo[6240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:28 localhost sudo[6240]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:28 localhost sudo[6256]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ipiokkeobwrukswsfdnhpangsrvjyuxd ; /usr/bin/python3 Feb 20 01:52:28 localhost sudo[6256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:28 localhost sudo[6256]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:30 localhost sudo[6272]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ktcfekgdzccjlqengnsqnhjktdfxegom ; /usr/bin/python3 Feb 20 01:52:30 localhost sudo[6272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:30 localhost sudo[6272]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:31 localhost sudo[6320]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ujzovyhdkhxrytcouudslumdmgziclqt ; /usr/bin/python3 Feb 20 01:52:31 localhost sudo[6320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:31 localhost sudo[6320]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:31 localhost sudo[6363]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dyaqjylnlqqejxmmqpeydwnaiuoqkkri ; /usr/bin/python3 Feb 20 01:52:31 localhost sudo[6363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:31 localhost sudo[6363]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:33 localhost sudo[6393]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhqahquvnajbceacpjwjxljbjzuiecnb ; /usr/bin/python3 Feb 20 01:52:33 localhost sudo[6393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:33 localhost sudo[6393]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:34 localhost sudo[6442]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spasraynvlaazfhpfkykamlchrcqqwsx ; /usr/bin/python3 Feb 20 01:52:34 localhost sudo[6442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:35 localhost sudo[6442]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:35 localhost sudo[6458]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovlbnphknoztemrpvhssgjnclimbgjuf ; /usr/bin/python3 Feb 20 01:52:35 localhost sudo[6458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:35 localhost sudo[6458]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:35 localhost sudo[6476]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zseswyyqkxhwkvbjeovfymviesejqjpy ; /usr/bin/python3 Feb 20 01:52:35 localhost sudo[6476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:36 localhost sudo[6476]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:36 localhost sudo[6494]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pftmmogiyzpmnoclianlvbypywkjwugc ; /usr/bin/python3 Feb 20 01:52:36 localhost sudo[6494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:36 localhost sudo[6494]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:36 localhost sudo[6512]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dobydbfqujgfzcqcudtfsosprkindwse ; /usr/bin/python3 Feb 20 01:52:36 localhost sudo[6512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:52:36 localhost sudo[6512]: pam_unix(sudo:session): session closed for user root Feb 20 01:52:52 localhost sshd[6168]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:53:47 localhost sshd[6557]: Accepted publickey for zuul from 38.102.83.114 port 56352 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:53:47 localhost sshd[6557]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:53:48 localhost sudo[6574]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ghkqljfkbrmttznbarumgrancksombbl ; /usr/bin/python3 Feb 20 01:53:48 localhost sudo[6574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:53:53 localhost sudo[6574]: pam_unix(sudo:session): session closed for user root Feb 20 01:54:11 localhost sudo[6689]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qsivwonsmkxzkudfmnmhsgtcyfrmczkk ; /usr/bin/python3 Feb 20 01:54:11 localhost sudo[6689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:55:06 localhost sudo[6689]: pam_unix(sudo:session): session closed for user root Feb 20 01:55:58 localhost sudo[18355]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zugoznuizgputkmejbzcjnhducgezset ; /usr/bin/python3 Feb 20 01:55:58 localhost sudo[18355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:55:59 localhost sudo[18355]: pam_unix(sudo:session): session closed for user root Feb 20 01:56:03 localhost sshd[6557]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:56:18 localhost sshd[18421]: Unable to negotiate with 38.102.83.74 port 43814: no matching host key type found. Their offer: ssh-ed25519 [preauth] Feb 20 01:56:18 localhost sshd[18420]: Connection closed by 38.102.83.74 port 43804 [preauth] Feb 20 01:56:18 localhost sshd[18419]: Connection closed by 38.102.83.74 port 43808 [preauth] Feb 20 01:56:18 localhost sshd[18422]: Unable to negotiate with 38.102.83.74 port 43826: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Feb 20 01:56:18 localhost sshd[18423]: Unable to negotiate with 38.102.83.74 port 43836: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Feb 20 01:56:23 localhost sshd[18429]: Accepted publickey for zuul from 38.102.83.114 port 38922 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:56:23 localhost sshd[18429]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:56:24 localhost sudo[18460]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rtvsjsmowaiagpbiaxdqjxbffzxzlbaj ; /usr/bin/python3 Feb 20 01:56:24 localhost sudo[18460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:56:24 localhost sudo[18460]: pam_unix(sudo:session): session closed for user root Feb 20 01:56:26 localhost sshd[18429]: pam_unix(sshd:session): session closed for user zuul Feb 20 01:57:44 localhost sshd[18464]: Accepted publickey for zuul from 38.102.83.114 port 55630 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 01:57:44 localhost sshd[18464]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 01:57:44 localhost sudo[18481]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rzyvzzwoxatyjmkjulrdapdljcxbqdvj ; /usr/bin/python3 Feb 20 01:57:44 localhost sudo[18481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:44 localhost sudo[18481]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:45 localhost sudo[18497]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zcrcymkbqnmnmwoefibvzolvofuixjob ; /usr/bin/python3 Feb 20 01:57:45 localhost sudo[18497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:46 localhost sudo[18497]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:46 localhost sudo[18547]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iwaenvjrsglpqeuqwezeypbofxixokcr ; /usr/bin/python3 Feb 20 01:57:46 localhost sudo[18547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:47 localhost sudo[18547]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:47 localhost sudo[18590]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xrnahsxsxuehkjhxiwtfadlctufvfddk ; /usr/bin/python3 Feb 20 01:57:47 localhost sudo[18590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:47 localhost sudo[18590]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:48 localhost sudo[18652]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-laxqxnlqmkbgbfsndotwbiosfqszwvut ; /usr/bin/python3 Feb 20 01:57:48 localhost sudo[18652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:49 localhost sudo[18652]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:49 localhost sudo[18695]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhiedxmozwrzpbdjnclpzkqzutmbzwpb ; /usr/bin/python3 Feb 20 01:57:49 localhost sudo[18695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:49 localhost sudo[18695]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:51 localhost sudo[18725]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yovrhzugqmqceczixmlzslantgahoswf ; /usr/bin/python3 Feb 20 01:57:51 localhost sudo[18725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 01:57:51 localhost sudo[18725]: pam_unix(sudo:session): session closed for user root Feb 20 01:57:57 localhost sshd[18464]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:00:05 localhost sshd[18958]: Accepted publickey for zuul from 38.102.83.74 port 42264 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:00:05 localhost sshd[18958]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:01:35 localhost sshd[19021]: Received disconnect from 103.59.94.62 port 56626:11: Bye Bye [preauth] Feb 20 02:01:35 localhost sshd[19021]: Disconnected from authenticating user root 103.59.94.62 port 56626 [preauth] Feb 20 02:05:05 localhost sshd[18961]: Received disconnect from 38.102.83.74 port 42264:11: disconnected by user Feb 20 02:05:05 localhost sshd[18961]: Disconnected from user zuul 38.102.83.74 port 42264 Feb 20 02:05:05 localhost sshd[18958]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:06:21 localhost sshd[19027]: Invalid user n8n from 27.112.79.121 port 38926 Feb 20 02:06:21 localhost sshd[19027]: Received disconnect from 27.112.79.121 port 38926:11: Bye Bye [preauth] Feb 20 02:06:21 localhost sshd[19027]: Disconnected from invalid user n8n 27.112.79.121 port 38926 [preauth] Feb 20 02:08:03 localhost sshd[19031]: Received disconnect from 103.59.94.62 port 46232:11: Bye Bye [preauth] Feb 20 02:08:03 localhost sshd[19031]: Disconnected from authenticating user root 103.59.94.62 port 46232 [preauth] Feb 20 02:09:37 localhost sshd[19034]: error: kex_exchange_identification: Connection closed by remote host Feb 20 02:09:37 localhost sshd[19034]: Connection closed by 147.182.212.230 port 40106 Feb 20 02:09:40 localhost sshd[19035]: Invalid user nutanix from 27.112.79.121 port 48208 Feb 20 02:09:41 localhost sshd[19035]: Received disconnect from 27.112.79.121 port 48208:11: Bye Bye [preauth] Feb 20 02:09:41 localhost sshd[19035]: Disconnected from invalid user nutanix 27.112.79.121 port 48208 [preauth] Feb 20 02:11:23 localhost sshd[19039]: Accepted publickey for zuul from 38.102.83.114 port 49342 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:11:23 localhost sshd[19039]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:11:25 localhost sudo[19074]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ckdxizolrssdfolooyyarekpjatqhouz ; /usr/bin/python3 Feb 20 02:11:25 localhost sudo[19074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:11:27 localhost sudo[19074]: pam_unix(sudo:session): session closed for user root Feb 20 02:11:30 localhost sudo[19093]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fopddshdqhlrhwksrnmpqpmrobprlxvx ; /usr/bin/python3 Feb 20 02:11:30 localhost sudo[19093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:11:58 localhost sudo[19093]: pam_unix(sudo:session): session closed for user root Feb 20 02:12:03 localhost sshd[19238]: Invalid user kapil from 27.112.79.121 port 57938 Feb 20 02:12:03 localhost sshd[19238]: Received disconnect from 27.112.79.121 port 57938:11: Bye Bye [preauth] Feb 20 02:12:03 localhost sshd[19238]: Disconnected from invalid user kapil 27.112.79.121 port 57938 [preauth] Feb 20 02:12:23 localhost sshd[19240]: Invalid user spadon from 103.59.94.62 port 50308 Feb 20 02:12:24 localhost sshd[19240]: Received disconnect from 103.59.94.62 port 50308:11: Bye Bye [preauth] Feb 20 02:12:24 localhost sshd[19240]: Disconnected from invalid user spadon 103.59.94.62 port 50308 [preauth] Feb 20 02:12:25 localhost sudo[19255]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pirshrldhzpvrfjiyfeooanomlvzeiid ; /usr/bin/python3 Feb 20 02:12:25 localhost sudo[19255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:12:30 localhost sudo[19255]: pam_unix(sudo:session): session closed for user root Feb 20 02:12:36 localhost sudo[19454]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-grmfilprbkiihkfxjpnsbemvrfkyfuxb ; /usr/bin/python3 Feb 20 02:12:36 localhost sudo[19454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:12:40 localhost sshd[19582]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:12:50 localhost sudo[19454]: pam_unix(sudo:session): session closed for user root Feb 20 02:13:04 localhost sudo[19732]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjuacjqafohdvbqfqcaklopmcyxcxvqv ; /usr/bin/python3 Feb 20 02:13:04 localhost sudo[19732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:13:10 localhost sshd[19736]: Invalid user 0 from 185.246.128.171 port 63724 Feb 20 02:13:12 localhost sshd[19736]: Disconnecting invalid user 0 185.246.128.171 port 63724: Change of username or service not allowed: (0,ssh-connection) -> (123456,ssh-connection) [preauth] Feb 20 02:13:16 localhost sshd[20047]: Invalid user 123456 from 185.246.128.171 port 29766 Feb 20 02:13:17 localhost sshd[20047]: Disconnecting invalid user 123456 185.246.128.171 port 29766: Change of username or service not allowed: (123456,ssh-connection) -> (vncuser,ssh-connection) [preauth] Feb 20 02:13:18 localhost sudo[19732]: pam_unix(sudo:session): session closed for user root Feb 20 02:13:22 localhost sshd[20117]: Invalid user vncuser from 185.246.128.171 port 52705 Feb 20 02:13:23 localhost sshd[20117]: Disconnecting invalid user vncuser 185.246.128.171 port 52705: Change of username or service not allowed: (vncuser,ssh-connection) -> (anthony,ssh-connection) [preauth] Feb 20 02:13:25 localhost sshd[20120]: Invalid user anthony from 185.246.128.171 port 8486 Feb 20 02:13:26 localhost sshd[20120]: Disconnecting invalid user anthony 185.246.128.171 port 8486: Change of username or service not allowed: (anthony,ssh-connection) -> (odoo,ssh-connection) [preauth] Feb 20 02:13:31 localhost sshd[20122]: Invalid user odoo from 185.246.128.171 port 26852 Feb 20 02:13:32 localhost sshd[20122]: Disconnecting invalid user odoo 185.246.128.171 port 26852: Change of username or service not allowed: (odoo,ssh-connection) -> (qaz,ssh-connection) [preauth] Feb 20 02:13:32 localhost sudo[20137]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tlgiocoeutugicjyptbvrfovnfwpnspo ; /usr/bin/python3 Feb 20 02:13:32 localhost sudo[20137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:13:35 localhost sshd[20141]: Invalid user qaz from 185.246.128.171 port 47622 Feb 20 02:13:35 localhost sshd[20141]: Disconnecting invalid user qaz 185.246.128.171 port 47622: Change of username or service not allowed: (qaz,ssh-connection) -> (abigail,ssh-connection) [preauth] Feb 20 02:13:41 localhost sshd[20268]: Invalid user abigail from 185.246.128.171 port 3282 Feb 20 02:13:41 localhost sshd[20268]: Disconnecting invalid user abigail 185.246.128.171 port 3282: Change of username or service not allowed: (abigail,ssh-connection) -> (soporte,ssh-connection) [preauth] Feb 20 02:13:46 localhost sshd[20458]: Invalid user soporte from 185.246.128.171 port 27355 Feb 20 02:13:47 localhost sudo[20137]: pam_unix(sudo:session): session closed for user root Feb 20 02:13:47 localhost sshd[20458]: Disconnecting invalid user soporte 185.246.128.171 port 27355: Change of username or service not allowed: (soporte,ssh-connection) -> (staff,ssh-connection) [preauth] Feb 20 02:13:53 localhost sshd[20465]: Invalid user staff from 185.246.128.171 port 45499 Feb 20 02:13:54 localhost sshd[20465]: Disconnecting invalid user staff 185.246.128.171 port 45499: Change of username or service not allowed: (staff,ssh-connection) -> (opc,ssh-connection) [preauth] Feb 20 02:14:01 localhost sshd[20467]: Invalid user opc from 185.246.128.171 port 13184 Feb 20 02:14:02 localhost sudo[20483]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imbgndotdoxubkmmwzzwkbgdolrypewp ; /usr/bin/python3 Feb 20 02:14:02 localhost sudo[20483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:14:03 localhost sshd[20467]: Disconnecting invalid user opc 185.246.128.171 port 13184: Change of username or service not allowed: (opc,ssh-connection) -> (newusername,ssh-connection) [preauth] Feb 20 02:14:04 localhost sudo[20483]: pam_unix(sudo:session): session closed for user root Feb 20 02:14:07 localhost sudo[20504]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdaaqdromqiheksjnwioabaqzmfddfyp ; /usr/bin/python3 Feb 20 02:14:07 localhost sudo[20504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:14:08 localhost sshd[20489]: Invalid user newusername from 185.246.128.171 port 46403 Feb 20 02:14:08 localhost sshd[20489]: Disconnecting invalid user newusername 185.246.128.171 port 46403: Change of username or service not allowed: (newusername,ssh-connection) -> (auditor,ssh-connection) [preauth] Feb 20 02:14:11 localhost sshd[20516]: Invalid user auditor from 185.246.128.171 port 3238 Feb 20 02:14:11 localhost sshd[20516]: Disconnecting invalid user auditor 185.246.128.171 port 3238: Change of username or service not allowed: (auditor,ssh-connection) -> (test1,ssh-connection) [preauth] Feb 20 02:14:14 localhost sshd[20538]: Invalid user systemd from 27.112.79.121 port 52286 Feb 20 02:14:15 localhost sshd[20538]: Received disconnect from 27.112.79.121 port 52286:11: Bye Bye [preauth] Feb 20 02:14:15 localhost sshd[20538]: Disconnected from invalid user systemd 27.112.79.121 port 52286 [preauth] Feb 20 02:14:18 localhost sshd[20540]: Invalid user test1 from 185.246.128.171 port 18414 Feb 20 02:14:19 localhost groupadd[20598]: group added to /etc/group: name=unbound, GID=987 Feb 20 02:14:19 localhost groupadd[20598]: group added to /etc/gshadow: name=unbound Feb 20 02:14:19 localhost groupadd[20598]: new group: name=unbound, GID=987 Feb 20 02:14:19 localhost useradd[20605]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none Feb 20 02:14:23 localhost sshd[20540]: Disconnecting invalid user test1 185.246.128.171 port 18414: Change of username or service not allowed: (test1,ssh-connection) -> (trx,ssh-connection) [preauth] Feb 20 02:14:26 localhost sshd[20624]: Invalid user trx from 185.246.128.171 port 56960 Feb 20 02:14:26 localhost sshd[20624]: Disconnecting invalid user trx 185.246.128.171 port 56960: Change of username or service not allowed: (trx,ssh-connection) -> (telecomadmin,ssh-connection) [preauth] Feb 20 02:14:28 localhost groupadd[20636]: group added to /etc/group: name=openvswitch, GID=986 Feb 20 02:14:28 localhost groupadd[20636]: group added to /etc/gshadow: name=openvswitch Feb 20 02:14:28 localhost groupadd[20636]: new group: name=openvswitch, GID=986 Feb 20 02:14:28 localhost useradd[20643]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none Feb 20 02:14:28 localhost groupadd[20651]: group added to /etc/group: name=hugetlbfs, GID=985 Feb 20 02:14:28 localhost groupadd[20651]: group added to /etc/gshadow: name=hugetlbfs Feb 20 02:14:28 localhost groupadd[20651]: new group: name=hugetlbfs, GID=985 Feb 20 02:14:28 localhost usermod[20659]: add 'openvswitch' to group 'hugetlbfs' Feb 20 02:14:28 localhost usermod[20659]: add 'openvswitch' to shadow group 'hugetlbfs' Feb 20 02:14:30 localhost sshd[20670]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:14:31 localhost sshd[20627]: Invalid user telecomadmin from 185.246.128.171 port 8879 Feb 20 02:14:33 localhost sshd[20627]: Disconnecting invalid user telecomadmin 185.246.128.171 port 8879: Change of username or service not allowed: (telecomadmin,ssh-connection) -> (ayush,ssh-connection) [preauth] Feb 20 02:14:33 localhost sudo[20504]: pam_unix(sudo:session): session closed for user root Feb 20 02:14:36 localhost sshd[21710]: Invalid user ayush from 185.246.128.171 port 33995 Feb 20 02:14:37 localhost sshd[21710]: Disconnecting invalid user ayush 185.246.128.171 port 33995: Change of username or service not allowed: (ayush,ssh-connection) -> (system,ssh-connection) [preauth] Feb 20 02:14:45 localhost sshd[21712]: Invalid user system from 185.246.128.171 port 57494 Feb 20 02:14:51 localhost sshd[21712]: error: maximum authentication attempts exceeded for invalid user system from 185.246.128.171 port 57494 ssh2 [preauth] Feb 20 02:14:51 localhost sshd[21712]: Disconnecting invalid user system 185.246.128.171 port 57494: Too many authentication failures [preauth] Feb 20 02:14:54 localhost sshd[21714]: Invalid user system from 185.246.128.171 port 40485 Feb 20 02:14:54 localhost sshd[21714]: Disconnecting invalid user system 185.246.128.171 port 40485: Change of username or service not allowed: (system,ssh-connection) -> (ali,ssh-connection) [preauth] Feb 20 02:14:58 localhost sudo[21732]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpiqcxjeinzcaslsxcfdfhdzyyxdagei ; /usr/bin/python3 Feb 20 02:14:58 localhost sudo[21732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:14:58 localhost sshd[21716]: Invalid user ali from 185.246.128.171 port 60609 Feb 20 02:15:00 localhost sshd[21716]: Disconnecting invalid user ali 185.246.128.171 port 60609: Change of username or service not allowed: (ali,ssh-connection) -> (ftp1,ssh-connection) [preauth] Feb 20 02:15:04 localhost sshd[21738]: Invalid user ftp1 from 185.246.128.171 port 13218 Feb 20 02:15:06 localhost sshd[21738]: Disconnecting invalid user ftp1 185.246.128.171 port 13218: Change of username or service not allowed: (ftp1,ssh-connection) -> (telecom,ssh-connection) [preauth] Feb 20 02:15:09 localhost sshd[21740]: Invalid user telecom from 185.246.128.171 port 38858 Feb 20 02:15:10 localhost sshd[21740]: Disconnecting invalid user telecom 185.246.128.171 port 38858: Change of username or service not allowed: (telecom,ssh-connection) -> (ganesh,ssh-connection) [preauth] Feb 20 02:15:11 localhost sudo[21732]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:15 localhost sshd[21742]: Invalid user ganesh from 185.246.128.171 port 55088 Feb 20 02:15:17 localhost sshd[21742]: Disconnecting invalid user ganesh 185.246.128.171 port 55088: Change of username or service not allowed: (ganesh,ssh-connection) -> (autcom,ssh-connection) [preauth] Feb 20 02:15:20 localhost sshd[21745]: Invalid user autcom from 185.246.128.171 port 21743 Feb 20 02:15:20 localhost sshd[21745]: Disconnecting invalid user autcom 185.246.128.171 port 21743: Change of username or service not allowed: (autcom,ssh-connection) -> (httpadmin,ssh-connection) [preauth] Feb 20 02:15:22 localhost sshd[21747]: Invalid user httpadmin from 185.246.128.171 port 31988 Feb 20 02:15:23 localhost sshd[21747]: Disconnecting invalid user httpadmin 185.246.128.171 port 31988: Change of username or service not allowed: (httpadmin,ssh-connection) -> (dan,ssh-connection) [preauth] Feb 20 02:15:25 localhost sshd[21749]: Invalid user dan from 185.246.128.171 port 39176 Feb 20 02:15:25 localhost sshd[21749]: Disconnecting invalid user dan 185.246.128.171 port 39176: Change of username or service not allowed: (dan,ssh-connection) -> (dev1,ssh-connection) [preauth] Feb 20 02:15:28 localhost sshd[21751]: Invalid user dev1 from 185.246.128.171 port 49142 Feb 20 02:15:29 localhost sshd[21751]: Disconnecting invalid user dev1 185.246.128.171 port 49142: Change of username or service not allowed: (dev1,ssh-connection) -> (momoru,ssh-connection) [preauth] Feb 20 02:15:33 localhost sshd[21753]: Invalid user momoru from 185.246.128.171 port 3040 Feb 20 02:15:33 localhost sshd[21753]: Disconnecting invalid user momoru 185.246.128.171 port 3040: Change of username or service not allowed: (momoru,ssh-connection) -> (suresh,ssh-connection) [preauth] Feb 20 02:15:34 localhost sudo[21768]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrpxzljrlbcnqrmwbipaoviftlcrzhhu ; /usr/bin/python3 Feb 20 02:15:34 localhost sudo[21768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:34 localhost sudo[21768]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:35 localhost sudo[21817]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-omwzzfwbnpsjottgqvetucyxuuqvwxxr ; /usr/bin/python3 Feb 20 02:15:35 localhost sudo[21817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:35 localhost sudo[21817]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:35 localhost sudo[21861]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bpjzahqagkqhbljgdpkuiijmyqsmhkcl ; /usr/bin/python3 Feb 20 02:15:35 localhost sudo[21861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:35 localhost sudo[21861]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:36 localhost sudo[21892]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uwhedrxuuxoehhqlpzebvlatowwerprc ; /usr/bin/python3 Feb 20 02:15:36 localhost sudo[21892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:37 localhost sudo[21892]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:37 localhost sudo[21913]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bdufyneytjuossqaisqjbjmpcsweidbi ; /usr/bin/python3 Feb 20 02:15:37 localhost sudo[21913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:37 localhost sudo[21913]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:37 localhost sshd[21833]: Invalid user suresh from 185.246.128.171 port 21741 Feb 20 02:15:37 localhost sudo[21933]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lawsvwxkcrfcmexeklpiggfsducnkptn ; /usr/bin/python3 Feb 20 02:15:37 localhost sudo[21933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:37 localhost sudo[21933]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:37 localhost sshd[21833]: Disconnecting invalid user suresh 185.246.128.171 port 21741: Change of username or service not allowed: (suresh,ssh-connection) -> (nagios,ssh-connection) [preauth] Feb 20 02:15:37 localhost sudo[21953]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jnolynkyqrkyerrstzfxszharqdigwfr ; /usr/bin/python3 Feb 20 02:15:37 localhost sudo[21953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:38 localhost sudo[21953]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:38 localhost sudo[21973]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tniyvznqwbbcyxijswdvkqfpkezigaua ; /usr/bin/python3 Feb 20 02:15:38 localhost sudo[21973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:38 localhost sudo[21973]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:40 localhost sudo[21994]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ujinweybnqptbuvvjnlapdandxhnsvsj ; /usr/bin/python3 Feb 20 02:15:40 localhost sudo[21994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:41 localhost sudo[21994]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:41 localhost sudo[22169]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ptdjnzisomjmahorxswihmhlpqhqdbbx ; /usr/bin/python3 Feb 20 02:15:41 localhost sudo[22169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:42 localhost sudo[22169]: pam_unix(sudo:session): session closed for user root Feb 20 02:15:43 localhost sshd[21980]: Invalid user nagios from 185.246.128.171 port 38468 Feb 20 02:15:44 localhost sshd[21980]: Disconnecting invalid user nagios 185.246.128.171 port 38468: Change of username or service not allowed: (nagios,ssh-connection) -> (alarm,ssh-connection) [preauth] Feb 20 02:15:45 localhost sudo[22335]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-psmqdemynxgjhltsgfoslrfzyjmbixua ; /usr/bin/python3 Feb 20 02:15:45 localhost sudo[22335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:15:49 localhost sshd[22589]: Invalid user alarm from 185.246.128.171 port 3838 Feb 20 02:15:50 localhost sshd[22589]: Disconnecting invalid user alarm 185.246.128.171 port 3838: Change of username or service not allowed: (alarm,ssh-connection) -> (storage,ssh-connection) [preauth] Feb 20 02:15:57 localhost sshd[22751]: Invalid user storage from 185.246.128.171 port 23787 Feb 20 02:15:58 localhost sshd[22751]: Disconnecting invalid user storage 185.246.128.171 port 23787: Change of username or service not allowed: (storage,ssh-connection) -> (off,ssh-connection) [preauth] Feb 20 02:16:01 localhost sshd[22978]: Invalid user off from 185.246.128.171 port 55392 Feb 20 02:16:02 localhost sshd[22978]: Disconnecting invalid user off 185.246.128.171 port 55392: Change of username or service not allowed: (off,ssh-connection) -> (redhat,ssh-connection) [preauth] Feb 20 02:16:05 localhost sshd[23070]: Invalid user redhat from 185.246.128.171 port 2667 Feb 20 02:16:06 localhost sshd[23070]: Disconnecting invalid user redhat 185.246.128.171 port 2667: Change of username or service not allowed: (redhat,ssh-connection) -> (linuxadmin,ssh-connection) [preauth] Feb 20 02:16:12 localhost sshd[23165]: Invalid user linuxadmin from 185.246.128.171 port 23820 Feb 20 02:16:12 localhost sshd[23415]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:16:12 localhost sshd[23165]: Disconnecting invalid user linuxadmin 185.246.128.171 port 23820: Change of username or service not allowed: (linuxadmin,ssh-connection) -> (wms,ssh-connection) [preauth] Feb 20 02:16:15 localhost sudo[22335]: pam_unix(sudo:session): session closed for user root Feb 20 02:16:16 localhost sshd[23583]: Invalid user wms from 185.246.128.171 port 48068 Feb 20 02:16:16 localhost sshd[23583]: Disconnecting invalid user wms 185.246.128.171 port 48068: Change of username or service not allowed: (wms,ssh-connection) -> (samp,ssh-connection) [preauth] Feb 20 02:16:23 localhost sshd[23627]: Invalid user samp from 185.246.128.171 port 1622 Feb 20 02:16:26 localhost sshd[23627]: Disconnecting invalid user samp 185.246.128.171 port 1622: Change of username or service not allowed: (samp,ssh-connection) -> (backup,ssh-connection) [preauth] Feb 20 02:16:27 localhost sshd[23629]: Invalid user max from 27.112.79.121 port 38738 Feb 20 02:16:28 localhost sshd[23629]: Received disconnect from 27.112.79.121 port 38738:11: Bye Bye [preauth] Feb 20 02:16:28 localhost sshd[23629]: Disconnected from invalid user max 27.112.79.121 port 38738 [preauth] Feb 20 02:16:30 localhost sshd[23631]: Invalid user backup from 185.246.128.171 port 36210 Feb 20 02:16:31 localhost sshd[23631]: error: maximum authentication attempts exceeded for invalid user backup from 185.246.128.171 port 36210 ssh2 [preauth] Feb 20 02:16:31 localhost sshd[23631]: Disconnecting invalid user backup 185.246.128.171 port 36210: Too many authentication failures [preauth] Feb 20 02:16:37 localhost sshd[23633]: Invalid user backup from 185.246.128.171 port 57119 Feb 20 02:16:39 localhost sshd[23633]: Disconnecting invalid user backup 185.246.128.171 port 57119: Change of username or service not allowed: (backup,ssh-connection) -> (a,ssh-connection) [preauth] Feb 20 02:16:43 localhost sshd[23635]: Invalid user a from 185.246.128.171 port 23935 Feb 20 02:16:44 localhost sshd[23635]: Disconnecting invalid user a 185.246.128.171 port 23935: Change of username or service not allowed: (a,ssh-connection) -> (ftpuser1,ssh-connection) [preauth] Feb 20 02:16:49 localhost sshd[23639]: Invalid user claude from 103.59.94.62 port 48430 Feb 20 02:16:50 localhost sshd[23639]: Received disconnect from 103.59.94.62 port 48430:11: Bye Bye [preauth] Feb 20 02:16:50 localhost sshd[23639]: Disconnected from invalid user claude 103.59.94.62 port 48430 [preauth] Feb 20 02:16:51 localhost sshd[23637]: Invalid user ftpuser1 from 185.246.128.171 port 45322 Feb 20 02:16:52 localhost sshd[23637]: Disconnecting invalid user ftpuser1 185.246.128.171 port 45322: Change of username or service not allowed: (ftpuser1,ssh-connection) -> (firefly,ssh-connection) [preauth] Feb 20 02:16:57 localhost sshd[23641]: Invalid user firefly from 185.246.128.171 port 18809 Feb 20 02:16:58 localhost sshd[23641]: Disconnecting invalid user firefly 185.246.128.171 port 18809: Change of username or service not allowed: (firefly,ssh-connection) -> (adfexc,ssh-connection) [preauth] Feb 20 02:17:05 localhost sshd[23643]: Invalid user adfexc from 185.246.128.171 port 35975 Feb 20 02:17:05 localhost sshd[23643]: Disconnecting invalid user adfexc 185.246.128.171 port 35975: Change of username or service not allowed: (adfexc,ssh-connection) -> (wangqi,ssh-connection) [preauth] Feb 20 02:17:10 localhost sshd[23664]: Invalid user wangqi from 185.246.128.171 port 10178 Feb 20 02:17:11 localhost sshd[23664]: Disconnecting invalid user wangqi 185.246.128.171 port 10178: Change of username or service not allowed: (wangqi,ssh-connection) -> (yealink,ssh-connection) [preauth] Feb 20 02:17:14 localhost sudo[23696]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uztwcmpzybvvwejnvrnlhdvrvmpsnabk ; /usr/bin/python3 Feb 20 02:17:14 localhost sudo[23696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:17:14 localhost sshd[23667]: Invalid user yealink from 185.246.128.171 port 30120 Feb 20 02:17:14 localhost sudo[23696]: pam_unix(sudo:session): session closed for user root Feb 20 02:17:14 localhost sshd[23667]: Disconnecting invalid user yealink 185.246.128.171 port 30120: Change of username or service not allowed: (yealink,ssh-connection) -> (client,ssh-connection) [preauth] Feb 20 02:17:16 localhost sudo[23728]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-farexljqzghcpdpyoihhheckuscgrizc ; /usr/bin/python3 Feb 20 02:17:16 localhost sudo[23728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:17:16 localhost sudo[23728]: pam_unix(sudo:session): session closed for user root Feb 20 02:17:16 localhost sshd[23699]: Invalid user client from 185.246.128.171 port 40548 Feb 20 02:17:19 localhost sudo[23777]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aczhuscretlptijlgvzokjoorffcwday ; /usr/bin/python3 Feb 20 02:17:19 localhost sudo[23777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:17:19 localhost sshd[23699]: Disconnecting invalid user client 185.246.128.171 port 40548: Change of username or service not allowed: (client,ssh-connection) -> (Samuel,ssh-connection) [preauth] Feb 20 02:17:19 localhost sudo[23777]: pam_unix(sudo:session): session closed for user root Feb 20 02:17:20 localhost sshd[19039]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:17:22 localhost sshd[23796]: Accepted publickey for zuul from 38.102.83.114 port 44324 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:17:22 localhost sshd[23796]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:17:25 localhost sshd[23796]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:17:27 localhost sshd[23794]: Invalid user Samuel from 185.246.128.171 port 61262 Feb 20 02:17:28 localhost sshd[23794]: Disconnecting invalid user Samuel 185.246.128.171 port 61262: Change of username or service not allowed: (Samuel,ssh-connection) -> (service,ssh-connection) [preauth] Feb 20 02:17:34 localhost sshd[23814]: Invalid user service from 185.246.128.171 port 32415 Feb 20 02:17:35 localhost sshd[23814]: Disconnecting invalid user service 185.246.128.171 port 32415: Change of username or service not allowed: (service,ssh-connection) -> (hduser,ssh-connection) [preauth] Feb 20 02:17:42 localhost sshd[23816]: Invalid user hduser from 185.246.128.171 port 5562 Feb 20 02:17:43 localhost sshd[23816]: Disconnecting invalid user hduser 185.246.128.171 port 5562: Change of username or service not allowed: (hduser,ssh-connection) -> (cx,ssh-connection) [preauth] Feb 20 02:17:49 localhost sshd[23818]: Invalid user cx from 185.246.128.171 port 41165 Feb 20 02:17:49 localhost sshd[23818]: Disconnecting invalid user cx 185.246.128.171 port 41165: Change of username or service not allowed: (cx,ssh-connection) -> (default,ssh-connection) [preauth] Feb 20 02:17:53 localhost sshd[23825]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:17:54 localhost sshd[23823]: Invalid user default from 185.246.128.171 port 61577 Feb 20 02:17:56 localhost sshd[23827]: Accepted publickey for zuul from 38.102.83.114 port 41746 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:17:56 localhost sshd[23827]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:17:56 localhost sudo[23844]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nkxsgtgryixyvlqrggmblkardumvwhag ; /usr/bin/python3 Feb 20 02:17:56 localhost sudo[23844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:17:57 localhost sshd[23823]: error: maximum authentication attempts exceeded for invalid user default from 185.246.128.171 port 61577 ssh2 [preauth] Feb 20 02:17:57 localhost sshd[23823]: Disconnecting invalid user default 185.246.128.171 port 61577: Too many authentication failures [preauth] Feb 20 02:18:02 localhost sshd[23848]: Invalid user default from 185.246.128.171 port 28168 Feb 20 02:18:02 localhost sshd[23848]: Disconnecting invalid user default 185.246.128.171 port 28168: Change of username or service not allowed: (default,ssh-connection) -> (validator,ssh-connection) [preauth] Feb 20 02:18:02 localhost sudo[23844]: pam_unix(sudo:session): session closed for user root Feb 20 02:18:08 localhost sshd[24622]: Invalid user validator from 185.246.128.171 port 59500 Feb 20 02:18:09 localhost sshd[24622]: Disconnecting invalid user validator 185.246.128.171 port 59500: Change of username or service not allowed: (validator,ssh-connection) -> (es1,ssh-connection) [preauth] Feb 20 02:18:14 localhost sshd[24624]: Invalid user es1 from 185.246.128.171 port 23660 Feb 20 02:18:15 localhost sshd[24624]: Disconnecting invalid user es1 185.246.128.171 port 23660: Change of username or service not allowed: (es1,ssh-connection) -> (amit,ssh-connection) [preauth] Feb 20 02:18:18 localhost sshd[24626]: Invalid user amit from 185.246.128.171 port 42839 Feb 20 02:18:19 localhost sshd[24626]: Disconnecting invalid user amit 185.246.128.171 port 42839: Change of username or service not allowed: (amit,ssh-connection) -> (syncthing,ssh-connection) [preauth] Feb 20 02:18:22 localhost sshd[24628]: Invalid user syncthing from 185.246.128.171 port 56379 Feb 20 02:18:24 localhost sshd[24628]: Disconnecting invalid user syncthing 185.246.128.171 port 56379: Change of username or service not allowed: (syncthing,ssh-connection) -> (fatima,ssh-connection) [preauth] Feb 20 02:18:30 localhost sshd[24630]: Invalid user fatima from 185.246.128.171 port 27220 Feb 20 02:18:30 localhost sshd[24630]: Disconnecting invalid user fatima 185.246.128.171 port 27220: Change of username or service not allowed: (fatima,ssh-connection) -> (sshuser,ssh-connection) [preauth] Feb 20 02:18:33 localhost sshd[24632]: Invalid user sshuser from 185.246.128.171 port 45226 Feb 20 02:18:34 localhost sshd[24632]: Disconnecting invalid user sshuser 185.246.128.171 port 45226: Change of username or service not allowed: (sshuser,ssh-connection) -> (esroot,ssh-connection) [preauth] Feb 20 02:18:38 localhost sshd[24634]: Invalid user esroot from 185.246.128.171 port 4459 Feb 20 02:18:40 localhost sshd[24634]: Disconnecting invalid user esroot 185.246.128.171 port 4459: Change of username or service not allowed: (esroot,ssh-connection) -> (redis,ssh-connection) [preauth] Feb 20 02:18:42 localhost sshd[24636]: Received disconnect from 27.112.79.121 port 56406:11: Bye Bye [preauth] Feb 20 02:18:42 localhost sshd[24636]: Disconnected from authenticating user root 27.112.79.121 port 56406 [preauth] Feb 20 02:18:43 localhost sshd[24638]: Invalid user redis from 185.246.128.171 port 26665 Feb 20 02:18:45 localhost sshd[24638]: Disconnecting invalid user redis 185.246.128.171 port 26665: Change of username or service not allowed: (redis,ssh-connection) -> (lab,ssh-connection) [preauth] Feb 20 02:18:49 localhost sshd[24640]: Invalid user lab from 185.246.128.171 port 49673 Feb 20 02:18:49 localhost sshd[24640]: Disconnecting invalid user lab 185.246.128.171 port 49673: Change of username or service not allowed: (lab,ssh-connection) -> (tmax,ssh-connection) [preauth] Feb 20 02:18:51 localhost sshd[24642]: Invalid user tmax from 185.246.128.171 port 3971 Feb 20 02:18:52 localhost sshd[24642]: Disconnecting invalid user tmax 185.246.128.171 port 3971: Change of username or service not allowed: (tmax,ssh-connection) -> (array,ssh-connection) [preauth] Feb 20 02:18:56 localhost sshd[24644]: Invalid user array from 185.246.128.171 port 13820 Feb 20 02:18:56 localhost sshd[24644]: Disconnecting invalid user array 185.246.128.171 port 13820: Change of username or service not allowed: (array,ssh-connection) -> (es2,ssh-connection) [preauth] Feb 20 02:18:59 localhost sshd[24646]: Invalid user es2 from 185.246.128.171 port 32596 Feb 20 02:18:59 localhost sshd[24646]: Disconnecting invalid user es2 185.246.128.171 port 32596: Change of username or service not allowed: (es2,ssh-connection) -> (ftp,ssh-connection) [preauth] Feb 20 02:19:02 localhost sshd[23830]: Received disconnect from 38.102.83.114 port 41746:11: disconnected by user Feb 20 02:19:02 localhost sshd[23830]: Disconnected from user zuul 38.102.83.114 port 41746 Feb 20 02:19:02 localhost sshd[23827]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:19:11 localhost sshd[24648]: error: maximum authentication attempts exceeded for ftp from 185.246.128.171 port 48166 ssh2 [preauth] Feb 20 02:19:11 localhost sshd[24648]: Disconnecting authenticating user ftp 185.246.128.171 port 48166: Too many authentication failures [preauth] Feb 20 02:19:20 localhost sshd[24650]: Disconnecting authenticating user ftp 185.246.128.171 port 36376: Change of username or service not allowed: (ftp,ssh-connection) -> (tmp,ssh-connection) [preauth] Feb 20 02:19:26 localhost sshd[24652]: Invalid user tmp from 185.246.128.171 port 12641 Feb 20 02:19:27 localhost sshd[24654]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:19:27 localhost sshd[24652]: Disconnecting invalid user tmp 185.246.128.171 port 12641: Change of username or service not allowed: (tmp,ssh-connection) -> (support,ssh-connection) [preauth] Feb 20 02:19:36 localhost sshd[24656]: Invalid user support from 185.246.128.171 port 46579 Feb 20 02:19:40 localhost sshd[24656]: error: maximum authentication attempts exceeded for invalid user support from 185.246.128.171 port 46579 ssh2 [preauth] Feb 20 02:19:40 localhost sshd[24656]: Disconnecting invalid user support 185.246.128.171 port 46579: Too many authentication failures [preauth] Feb 20 02:19:48 localhost sshd[24658]: Invalid user support from 185.246.128.171 port 39749 Feb 20 02:19:49 localhost sshd[24658]: Disconnecting invalid user support 185.246.128.171 port 39749: Change of username or service not allowed: (support,ssh-connection) -> (x,ssh-connection) [preauth] Feb 20 02:19:54 localhost sshd[24660]: Invalid user x from 185.246.128.171 port 8404 Feb 20 02:19:55 localhost sshd[24660]: Disconnecting invalid user x 185.246.128.171 port 8404: Change of username or service not allowed: (x,ssh-connection) -> (admin123,ssh-connection) [preauth] Feb 20 02:20:01 localhost sshd[24662]: Invalid user admin123 from 185.246.128.171 port 34802 Feb 20 02:20:01 localhost sshd[24662]: Disconnecting invalid user admin123 185.246.128.171 port 34802: Change of username or service not allowed: (admin123,ssh-connection) -> (oozie,ssh-connection) [preauth] Feb 20 02:20:06 localhost sshd[24664]: Invalid user oozie from 185.246.128.171 port 64867 Feb 20 02:20:07 localhost sshd[24664]: Disconnecting invalid user oozie 185.246.128.171 port 64867: Change of username or service not allowed: (oozie,ssh-connection) -> (lotus,ssh-connection) [preauth] Feb 20 02:20:14 localhost sshd[24666]: Invalid user lotus from 185.246.128.171 port 18537 Feb 20 02:20:14 localhost sshd[24666]: Disconnecting invalid user lotus 185.246.128.171 port 18537: Change of username or service not allowed: (lotus,ssh-connection) -> (landscape,ssh-connection) [preauth] Feb 20 02:20:19 localhost sshd[24668]: Invalid user landscape from 185.246.128.171 port 51890 Feb 20 02:20:20 localhost sshd[24668]: Disconnecting invalid user landscape 185.246.128.171 port 51890: Change of username or service not allowed: (landscape,ssh-connection) -> (smb,ssh-connection) [preauth] Feb 20 02:20:22 localhost sshd[24670]: Invalid user smb from 185.246.128.171 port 2472 Feb 20 02:20:22 localhost sshd[24670]: Disconnecting invalid user smb 185.246.128.171 port 2472: Change of username or service not allowed: (smb,ssh-connection) -> (station6,ssh-connection) [preauth] Feb 20 02:20:25 localhost sshd[24672]: Invalid user station6 from 185.246.128.171 port 15614 Feb 20 02:20:26 localhost sshd[24672]: Disconnecting invalid user station6 185.246.128.171 port 15614: Change of username or service not allowed: (station6,ssh-connection) -> (azure,ssh-connection) [preauth] Feb 20 02:20:30 localhost sshd[24674]: Invalid user azure from 185.246.128.171 port 34932 Feb 20 02:20:31 localhost sshd[24674]: Disconnecting invalid user azure 185.246.128.171 port 34932: Change of username or service not allowed: (azure,ssh-connection) -> (user6,ssh-connection) [preauth] Feb 20 02:20:34 localhost sshd[24676]: Invalid user user6 from 185.246.128.171 port 50620 Feb 20 02:20:34 localhost sshd[24676]: Disconnecting invalid user user6 185.246.128.171 port 50620: Change of username or service not allowed: (user6,ssh-connection) -> (sepehr,ssh-connection) [preauth] Feb 20 02:20:40 localhost sshd[24678]: Invalid user sepehr from 185.246.128.171 port 2248 Feb 20 02:20:42 localhost sshd[24678]: Disconnecting invalid user sepehr 185.246.128.171 port 2248: Change of username or service not allowed: (sepehr,ssh-connection) -> (aa,ssh-connection) [preauth] Feb 20 02:20:45 localhost sshd[24680]: Invalid user aa from 185.246.128.171 port 35338 Feb 20 02:20:45 localhost sshd[24680]: Disconnecting invalid user aa 185.246.128.171 port 35338: Change of username or service not allowed: (aa,ssh-connection) -> (chenwang,ssh-connection) [preauth] Feb 20 02:20:50 localhost sshd[24682]: Invalid user chenwang from 185.246.128.171 port 48567 Feb 20 02:20:50 localhost sshd[24682]: Disconnecting invalid user chenwang 185.246.128.171 port 48567: Change of username or service not allowed: (chenwang,ssh-connection) -> (TEST,ssh-connection) [preauth] Feb 20 02:20:51 localhost sshd[24684]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:20:52 localhost sshd[24685]: Invalid user cyl from 27.112.79.121 port 54424 Feb 20 02:20:52 localhost sshd[24685]: Received disconnect from 27.112.79.121 port 54424:11: Bye Bye [preauth] Feb 20 02:20:52 localhost sshd[24685]: Disconnected from invalid user cyl 27.112.79.121 port 54424 [preauth] Feb 20 02:20:58 localhost sshd[24688]: Invalid user TEST from 185.246.128.171 port 14713 Feb 20 02:20:58 localhost sshd[24688]: Disconnecting invalid user TEST 185.246.128.171 port 14713: Change of username or service not allowed: (TEST,ssh-connection) -> (ai,ssh-connection) [preauth] Feb 20 02:20:59 localhost sshd[24692]: error: kex_exchange_identification: banner line contains invalid characters Feb 20 02:20:59 localhost sshd[24692]: banner exchange: Connection from 45.227.254.152 port 65115: invalid format Feb 20 02:21:00 localhost sshd[24690]: Received disconnect from 103.59.94.62 port 35344:11: Bye Bye [preauth] Feb 20 02:21:00 localhost sshd[24690]: Disconnected from authenticating user root 103.59.94.62 port 35344 [preauth] Feb 20 02:21:04 localhost sshd[24693]: Invalid user ai from 185.246.128.171 port 40187 Feb 20 02:21:06 localhost sshd[24693]: Disconnecting invalid user ai 185.246.128.171 port 40187: Change of username or service not allowed: (ai,ssh-connection) -> (telnet,ssh-connection) [preauth] Feb 20 02:21:13 localhost sshd[24696]: Invalid user telnet from 185.246.128.171 port 5829 Feb 20 02:21:16 localhost sshd[24696]: Disconnecting invalid user telnet 185.246.128.171 port 5829: Change of username or service not allowed: (telnet,ssh-connection) -> (thomas,ssh-connection) [preauth] Feb 20 02:21:20 localhost sshd[24698]: Invalid user thomas from 185.246.128.171 port 47260 Feb 20 02:21:21 localhost sshd[24698]: Disconnecting invalid user thomas 185.246.128.171 port 47260: Change of username or service not allowed: (thomas,ssh-connection) -> (tomcat,ssh-connection) [preauth] Feb 20 02:21:23 localhost sshd[24700]: Invalid user tomcat from 185.246.128.171 port 63736 Feb 20 02:21:27 localhost sshd[24700]: error: maximum authentication attempts exceeded for invalid user tomcat from 185.246.128.171 port 63736 ssh2 [preauth] Feb 20 02:21:27 localhost sshd[24700]: Disconnecting invalid user tomcat 185.246.128.171 port 63736: Too many authentication failures [preauth] Feb 20 02:21:29 localhost sshd[24702]: Invalid user tomcat from 185.246.128.171 port 21575 Feb 20 02:21:30 localhost sshd[24702]: Disconnecting invalid user tomcat 185.246.128.171 port 21575: Change of username or service not allowed: (tomcat,ssh-connection) -> (tim,ssh-connection) [preauth] Feb 20 02:21:36 localhost sshd[24704]: Invalid user tim from 185.246.128.171 port 41926 Feb 20 02:21:36 localhost sshd[24704]: Disconnecting invalid user tim 185.246.128.171 port 41926: Change of username or service not allowed: (tim,ssh-connection) -> (admin1,ssh-connection) [preauth] Feb 20 02:21:39 localhost sshd[24706]: Invalid user admin1 from 185.246.128.171 port 62006 Feb 20 02:21:42 localhost sshd[24706]: error: maximum authentication attempts exceeded for invalid user admin1 from 185.246.128.171 port 62006 ssh2 [preauth] Feb 20 02:21:42 localhost sshd[24706]: Disconnecting invalid user admin1 185.246.128.171 port 62006: Too many authentication failures [preauth] Feb 20 02:21:47 localhost sshd[24708]: Invalid user admin1 from 185.246.128.171 port 26236 Feb 20 02:21:50 localhost sshd[24708]: Disconnecting invalid user admin1 185.246.128.171 port 26236: Change of username or service not allowed: (admin1,ssh-connection) -> (natalie,ssh-connection) [preauth] Feb 20 02:21:51 localhost sshd[24710]: Invalid user natalie from 185.246.128.171 port 48524 Feb 20 02:21:51 localhost sshd[24710]: Disconnecting invalid user natalie 185.246.128.171 port 48524: Change of username or service not allowed: (natalie,ssh-connection) -> (factory,ssh-connection) [preauth] Feb 20 02:21:54 localhost sshd[24712]: Invalid user factory from 185.246.128.171 port 56619 Feb 20 02:21:56 localhost sshd[24712]: Disconnecting invalid user factory 185.246.128.171 port 56619: Change of username or service not allowed: (factory,ssh-connection) -> (newuser,ssh-connection) [preauth] Feb 20 02:22:03 localhost sshd[24714]: Invalid user newuser from 185.246.128.171 port 21211 Feb 20 02:22:03 localhost sshd[24714]: Disconnecting invalid user newuser 185.246.128.171 port 21211: Change of username or service not allowed: (newuser,ssh-connection) -> (alfresco,ssh-connection) [preauth] Feb 20 02:22:08 localhost sshd[24716]: Invalid user alfresco from 185.246.128.171 port 46043 Feb 20 02:22:09 localhost sshd[24718]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:22:10 localhost sshd[24716]: Disconnecting invalid user alfresco 185.246.128.171 port 46043: Change of username or service not allowed: (alfresco,ssh-connection) -> (tt,ssh-connection) [preauth] Feb 20 02:22:14 localhost sshd[24720]: Invalid user tt from 185.246.128.171 port 2786 Feb 20 02:22:14 localhost sshd[24720]: Disconnecting invalid user tt 185.246.128.171 port 2786: Change of username or service not allowed: (tt,ssh-connection) -> (plex,ssh-connection) [preauth] Feb 20 02:22:19 localhost sshd[24722]: Invalid user plex from 185.246.128.171 port 23463 Feb 20 02:22:20 localhost sshd[24722]: Disconnecting invalid user plex 185.246.128.171 port 23463: Change of username or service not allowed: (plex,ssh-connection) -> (root,ssh-connection) [preauth] Feb 20 02:22:29 localhost sshd[24724]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 52519 ssh2 [preauth] Feb 20 02:22:29 localhost sshd[24724]: Disconnecting authenticating user root 185.246.128.171 port 52519: Too many authentication failures [preauth] Feb 20 02:22:39 localhost sshd[24726]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 15067 ssh2 [preauth] Feb 20 02:22:39 localhost sshd[24726]: Disconnecting authenticating user root 185.246.128.171 port 15067: Too many authentication failures [preauth] Feb 20 02:22:47 localhost sshd[24728]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 63659 ssh2 [preauth] Feb 20 02:22:47 localhost sshd[24728]: Disconnecting authenticating user root 185.246.128.171 port 63659: Too many authentication failures [preauth] Feb 20 02:23:02 localhost sshd[24730]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 27553 ssh2 [preauth] Feb 20 02:23:02 localhost sshd[24730]: Disconnecting authenticating user root 185.246.128.171 port 27553: Too many authentication failures [preauth] Feb 20 02:23:06 localhost sshd[24732]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 21780 ssh2 [preauth] Feb 20 02:23:06 localhost sshd[24732]: Disconnecting authenticating user root 185.246.128.171 port 21780: Too many authentication failures [preauth] Feb 20 02:23:16 localhost sshd[24737]: error: kex_exchange_identification: Connection closed by remote host Feb 20 02:23:16 localhost sshd[24737]: Connection closed by 119.148.49.82 port 55196 Feb 20 02:23:19 localhost sshd[24738]: Received disconnect from 27.112.79.121 port 35370:11: Bye Bye [preauth] Feb 20 02:23:19 localhost sshd[24738]: Disconnected from authenticating user root 27.112.79.121 port 35370 [preauth] Feb 20 02:23:21 localhost sshd[24734]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 40784 ssh2 [preauth] Feb 20 02:23:21 localhost sshd[24734]: Disconnecting authenticating user root 185.246.128.171 port 40784: Too many authentication failures [preauth] Feb 20 02:23:26 localhost sshd[24742]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:23:34 localhost sshd[24740]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 42519 ssh2 [preauth] Feb 20 02:23:34 localhost sshd[24740]: Disconnecting authenticating user root 185.246.128.171 port 42519: Too many authentication failures [preauth] Feb 20 02:23:43 localhost sshd[24744]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 25599 ssh2 [preauth] Feb 20 02:23:43 localhost sshd[24744]: Disconnecting authenticating user root 185.246.128.171 port 25599: Too many authentication failures [preauth] Feb 20 02:23:58 localhost sshd[24746]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 64935 ssh2 [preauth] Feb 20 02:23:58 localhost sshd[24746]: Disconnecting authenticating user root 185.246.128.171 port 64935: Too many authentication failures [preauth] Feb 20 02:24:08 localhost sshd[24748]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 5645 ssh2 [preauth] Feb 20 02:24:08 localhost sshd[24748]: Disconnecting authenticating user root 185.246.128.171 port 5645: Too many authentication failures [preauth] Feb 20 02:24:19 localhost sshd[24750]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 48645 ssh2 [preauth] Feb 20 02:24:19 localhost sshd[24750]: Disconnecting authenticating user root 185.246.128.171 port 48645: Too many authentication failures [preauth] Feb 20 02:24:32 localhost sshd[24752]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 29731 ssh2 [preauth] Feb 20 02:24:32 localhost sshd[24752]: Disconnecting authenticating user root 185.246.128.171 port 29731: Too many authentication failures [preauth] Feb 20 02:24:41 localhost sshd[24754]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 20918 ssh2 [preauth] Feb 20 02:24:41 localhost sshd[24754]: Disconnecting authenticating user root 185.246.128.171 port 20918: Too many authentication failures [preauth] Feb 20 02:24:42 localhost sshd[24757]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:24:52 localhost sshd[24758]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 55805 ssh2 [preauth] Feb 20 02:24:52 localhost sshd[24758]: Disconnecting authenticating user root 185.246.128.171 port 55805: Too many authentication failures [preauth] Feb 20 02:25:08 localhost sshd[24763]: Received disconnect from 103.59.94.62 port 54994:11: Bye Bye [preauth] Feb 20 02:25:08 localhost sshd[24763]: Disconnected from authenticating user root 103.59.94.62 port 54994 [preauth] Feb 20 02:25:11 localhost sshd[24761]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 46251 ssh2 [preauth] Feb 20 02:25:11 localhost sshd[24761]: Disconnecting authenticating user root 185.246.128.171 port 46251: Too many authentication failures [preauth] Feb 20 02:25:18 localhost sshd[24765]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 59788 ssh2 [preauth] Feb 20 02:25:18 localhost sshd[24765]: Disconnecting authenticating user root 185.246.128.171 port 59788: Too many authentication failures [preauth] Feb 20 02:25:24 localhost sshd[24767]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 23263 ssh2 [preauth] Feb 20 02:25:24 localhost sshd[24767]: Disconnecting authenticating user root 185.246.128.171 port 23263: Too many authentication failures [preauth] Feb 20 02:25:32 localhost sshd[24769]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 48543 ssh2 [preauth] Feb 20 02:25:32 localhost sshd[24769]: Disconnecting authenticating user root 185.246.128.171 port 48543: Too many authentication failures [preauth] Feb 20 02:25:43 localhost sshd[24773]: Invalid user omar from 27.112.79.121 port 36070 Feb 20 02:25:43 localhost sshd[24773]: Received disconnect from 27.112.79.121 port 36070:11: Bye Bye [preauth] Feb 20 02:25:43 localhost sshd[24773]: Disconnected from invalid user omar 27.112.79.121 port 36070 [preauth] Feb 20 02:25:46 localhost sshd[24771]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 25266 ssh2 [preauth] Feb 20 02:25:46 localhost sshd[24771]: Disconnecting authenticating user root 185.246.128.171 port 25266: Too many authentication failures [preauth] Feb 20 02:25:53 localhost sshd[24775]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 17011 ssh2 [preauth] Feb 20 02:25:53 localhost sshd[24775]: Disconnecting authenticating user root 185.246.128.171 port 17011: Too many authentication failures [preauth] Feb 20 02:25:56 localhost sshd[24779]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:26:01 localhost sshd[24777]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 43351 ssh2 [preauth] Feb 20 02:26:01 localhost sshd[24777]: Disconnecting authenticating user root 185.246.128.171 port 43351: Too many authentication failures [preauth] Feb 20 02:26:11 localhost sshd[24781]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 20863 ssh2 [preauth] Feb 20 02:26:11 localhost sshd[24781]: Disconnecting authenticating user root 185.246.128.171 port 20863: Too many authentication failures [preauth] Feb 20 02:26:19 localhost sshd[24783]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 2354 ssh2 [preauth] Feb 20 02:26:19 localhost sshd[24783]: Disconnecting authenticating user root 185.246.128.171 port 2354: Too many authentication failures [preauth] Feb 20 02:26:30 localhost sshd[24785]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 41454 ssh2 [preauth] Feb 20 02:26:30 localhost sshd[24785]: Disconnecting authenticating user root 185.246.128.171 port 41454: Too many authentication failures [preauth] Feb 20 02:26:41 localhost sshd[24788]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 21692 ssh2 [preauth] Feb 20 02:26:41 localhost sshd[24788]: Disconnecting authenticating user root 185.246.128.171 port 21692: Too many authentication failures [preauth] Feb 20 02:26:48 localhost sshd[24790]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 4120 ssh2 [preauth] Feb 20 02:26:48 localhost sshd[24790]: Disconnecting authenticating user root 185.246.128.171 port 4120: Too many authentication failures [preauth] Feb 20 02:26:56 localhost sshd[24792]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 30558 ssh2 [preauth] Feb 20 02:26:56 localhost sshd[24792]: Disconnecting authenticating user root 185.246.128.171 port 30558: Too many authentication failures [preauth] Feb 20 02:27:05 localhost sshd[24794]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 10668 ssh2 [preauth] Feb 20 02:27:05 localhost sshd[24794]: Disconnecting authenticating user root 185.246.128.171 port 10668: Too many authentication failures [preauth] Feb 20 02:27:10 localhost sshd[24798]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 42141 ssh2 [preauth] Feb 20 02:27:10 localhost sshd[24798]: Disconnecting authenticating user root 185.246.128.171 port 42141: Too many authentication failures [preauth] Feb 20 02:27:11 localhost sshd[24800]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:27:23 localhost sshd[24802]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 3176 ssh2 [preauth] Feb 20 02:27:23 localhost sshd[24802]: Disconnecting authenticating user root 185.246.128.171 port 3176: Too many authentication failures [preauth] Feb 20 02:27:30 localhost sshd[24804]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 3293 ssh2 [preauth] Feb 20 02:27:30 localhost sshd[24804]: Disconnecting authenticating user root 185.246.128.171 port 3293: Too many authentication failures [preauth] Feb 20 02:27:39 localhost sshd[24806]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 32283 ssh2 [preauth] Feb 20 02:27:39 localhost sshd[24806]: Disconnecting authenticating user root 185.246.128.171 port 32283: Too many authentication failures [preauth] Feb 20 02:27:45 localhost sshd[24808]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 64728 ssh2 [preauth] Feb 20 02:27:45 localhost sshd[24808]: Disconnecting authenticating user root 185.246.128.171 port 64728: Too many authentication failures [preauth] Feb 20 02:27:53 localhost sshd[24810]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 37350 ssh2 [preauth] Feb 20 02:27:53 localhost sshd[24810]: Disconnecting authenticating user root 185.246.128.171 port 37350: Too many authentication failures [preauth] Feb 20 02:28:01 localhost sshd[24812]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 1791 ssh2 [preauth] Feb 20 02:28:01 localhost sshd[24812]: Disconnecting authenticating user root 185.246.128.171 port 1791: Too many authentication failures [preauth] Feb 20 02:28:09 localhost sshd[24816]: Invalid user claude from 27.112.79.121 port 37702 Feb 20 02:28:09 localhost sshd[24816]: Received disconnect from 27.112.79.121 port 37702:11: Bye Bye [preauth] Feb 20 02:28:09 localhost sshd[24816]: Disconnected from invalid user claude 27.112.79.121 port 37702 [preauth] Feb 20 02:28:11 localhost sshd[24814]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 41253 ssh2 [preauth] Feb 20 02:28:11 localhost sshd[24814]: Disconnecting authenticating user root 185.246.128.171 port 41253: Too many authentication failures [preauth] Feb 20 02:28:17 localhost sshd[24818]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 18278 ssh2 [preauth] Feb 20 02:28:17 localhost sshd[24818]: Disconnecting authenticating user root 185.246.128.171 port 18278: Too many authentication failures [preauth] Feb 20 02:28:25 localhost sshd[24822]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:28:26 localhost sshd[24820]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 48193 ssh2 [preauth] Feb 20 02:28:26 localhost sshd[24820]: Disconnecting authenticating user root 185.246.128.171 port 48193: Too many authentication failures [preauth] Feb 20 02:28:41 localhost sshd[24824]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 30425 ssh2 [preauth] Feb 20 02:28:41 localhost sshd[24824]: Disconnecting authenticating user root 185.246.128.171 port 30425: Too many authentication failures [preauth] Feb 20 02:28:50 localhost sshd[24826]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 33048 ssh2 [preauth] Feb 20 02:28:50 localhost sshd[24826]: Disconnecting authenticating user root 185.246.128.171 port 33048: Too many authentication failures [preauth] Feb 20 02:28:58 localhost sshd[24828]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 6173 ssh2 [preauth] Feb 20 02:28:58 localhost sshd[24828]: Disconnecting authenticating user root 185.246.128.171 port 6173: Too many authentication failures [preauth] Feb 20 02:29:09 localhost sshd[24830]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 35210 ssh2 [preauth] Feb 20 02:29:09 localhost sshd[24830]: Disconnecting authenticating user root 185.246.128.171 port 35210: Too many authentication failures [preauth] Feb 20 02:29:15 localhost sshd[24834]: Invalid user ubuntu from 103.59.94.62 port 50700 Feb 20 02:29:15 localhost sshd[24834]: Received disconnect from 103.59.94.62 port 50700:11: Bye Bye [preauth] Feb 20 02:29:15 localhost sshd[24834]: Disconnected from invalid user ubuntu 103.59.94.62 port 50700 [preauth] Feb 20 02:29:18 localhost sshd[24832]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 25401 ssh2 [preauth] Feb 20 02:29:18 localhost sshd[24832]: Disconnecting authenticating user root 185.246.128.171 port 25401: Too many authentication failures [preauth] Feb 20 02:29:29 localhost sshd[24836]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 63752 ssh2 [preauth] Feb 20 02:29:29 localhost sshd[24836]: Disconnecting authenticating user root 185.246.128.171 port 63752: Too many authentication failures [preauth] Feb 20 02:29:41 localhost sshd[24838]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 55409 ssh2 [preauth] Feb 20 02:29:41 localhost sshd[24838]: Disconnecting authenticating user root 185.246.128.171 port 55409: Too many authentication failures [preauth] Feb 20 02:29:50 localhost sshd[24841]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 36856 ssh2 [preauth] Feb 20 02:29:50 localhost sshd[24841]: Disconnecting authenticating user root 185.246.128.171 port 36856: Too many authentication failures [preauth] Feb 20 02:29:52 localhost sshd[24843]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:30:01 localhost sshd[24844]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 17260 ssh2 [preauth] Feb 20 02:30:01 localhost sshd[24844]: Disconnecting authenticating user root 185.246.128.171 port 17260: Too many authentication failures [preauth] Feb 20 02:30:09 localhost sshd[24847]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 11233 ssh2 [preauth] Feb 20 02:30:09 localhost sshd[24847]: Disconnecting authenticating user root 185.246.128.171 port 11233: Too many authentication failures [preauth] Feb 20 02:30:09 localhost sshd[24849]: error: kex_exchange_identification: Connection closed by remote host Feb 20 02:30:09 localhost sshd[24849]: Connection closed by 142.93.130.138 port 41936 Feb 20 02:30:19 localhost sshd[24850]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 42181 ssh2 [preauth] Feb 20 02:30:19 localhost sshd[24850]: Disconnecting authenticating user root 185.246.128.171 port 42181: Too many authentication failures [preauth] Feb 20 02:30:31 localhost sshd[24853]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 24949 ssh2 [preauth] Feb 20 02:30:31 localhost sshd[24853]: Disconnecting authenticating user root 185.246.128.171 port 24949: Too many authentication failures [preauth] Feb 20 02:30:37 localhost sshd[24857]: Invalid user n8n from 27.112.79.121 port 51686 Feb 20 02:30:37 localhost sshd[24857]: Received disconnect from 27.112.79.121 port 51686:11: Bye Bye [preauth] Feb 20 02:30:37 localhost sshd[24857]: Disconnected from invalid user n8n 27.112.79.121 port 51686 [preauth] Feb 20 02:30:40 localhost sshd[24855]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 18756 ssh2 [preauth] Feb 20 02:30:40 localhost sshd[24855]: Disconnecting authenticating user root 185.246.128.171 port 18756: Too many authentication failures [preauth] Feb 20 02:30:47 localhost sshd[24859]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 62405 ssh2 [preauth] Feb 20 02:30:47 localhost sshd[24859]: Disconnecting authenticating user root 185.246.128.171 port 62405: Too many authentication failures [preauth] Feb 20 02:30:56 localhost sshd[24861]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 27530 ssh2 [preauth] Feb 20 02:30:56 localhost sshd[24861]: Disconnecting authenticating user root 185.246.128.171 port 27530: Too many authentication failures [preauth] Feb 20 02:31:04 localhost sshd[24863]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 4234 ssh2 [preauth] Feb 20 02:31:04 localhost sshd[24863]: Disconnecting authenticating user root 185.246.128.171 port 4234: Too many authentication failures [preauth] Feb 20 02:31:12 localhost sshd[24865]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 39377 ssh2 [preauth] Feb 20 02:31:12 localhost sshd[24865]: Disconnecting authenticating user root 185.246.128.171 port 39377: Too many authentication failures [preauth] Feb 20 02:31:21 localhost sshd[24867]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 7623 ssh2 [preauth] Feb 20 02:31:21 localhost sshd[24867]: Disconnecting authenticating user root 185.246.128.171 port 7623: Too many authentication failures [preauth] Feb 20 02:31:27 localhost sshd[24869]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 50842 ssh2 [preauth] Feb 20 02:31:27 localhost sshd[24869]: Disconnecting authenticating user root 185.246.128.171 port 50842: Too many authentication failures [preauth] Feb 20 02:31:34 localhost sshd[24871]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 13448 ssh2 [preauth] Feb 20 02:31:34 localhost sshd[24871]: Disconnecting authenticating user root 185.246.128.171 port 13448: Too many authentication failures [preauth] Feb 20 02:31:37 localhost sshd[24875]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:31:37 localhost sshd[24873]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 40614 ssh2 [preauth] Feb 20 02:31:37 localhost sshd[24873]: Disconnecting authenticating user root 185.246.128.171 port 40614: Too many authentication failures [preauth] Feb 20 02:31:45 localhost sshd[24877]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 51286 ssh2 [preauth] Feb 20 02:31:45 localhost sshd[24877]: Disconnecting authenticating user root 185.246.128.171 port 51286: Too many authentication failures [preauth] Feb 20 02:31:51 localhost sshd[24879]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 26306 ssh2 [preauth] Feb 20 02:31:51 localhost sshd[24879]: Disconnecting authenticating user root 185.246.128.171 port 26306: Too many authentication failures [preauth] Feb 20 02:32:00 localhost sshd[24881]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 54390 ssh2 [preauth] Feb 20 02:32:00 localhost sshd[24881]: Disconnecting authenticating user root 185.246.128.171 port 54390: Too many authentication failures [preauth] Feb 20 02:32:09 localhost sshd[24884]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 31728 ssh2 [preauth] Feb 20 02:32:09 localhost sshd[24884]: Disconnecting authenticating user root 185.246.128.171 port 31728: Too many authentication failures [preauth] Feb 20 02:32:16 localhost sshd[24888]: error: kex_exchange_identification: Connection closed by remote host Feb 20 02:32:16 localhost sshd[24888]: Connection closed by 46.101.240.14 port 45262 Feb 20 02:32:17 localhost sshd[24886]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 64557 ssh2 [preauth] Feb 20 02:32:17 localhost sshd[24886]: Disconnecting authenticating user root 185.246.128.171 port 64557: Too many authentication failures [preauth] Feb 20 02:32:28 localhost sshd[24889]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 44438 ssh2 [preauth] Feb 20 02:32:28 localhost sshd[24889]: Disconnecting authenticating user root 185.246.128.171 port 44438: Too many authentication failures [preauth] Feb 20 02:32:39 localhost sshd[24891]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 21287 ssh2 [preauth] Feb 20 02:32:39 localhost sshd[24891]: Disconnecting authenticating user root 185.246.128.171 port 21287: Too many authentication failures [preauth] Feb 20 02:32:53 localhost sshd[24893]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 10396 ssh2 [preauth] Feb 20 02:32:53 localhost sshd[24893]: Disconnecting authenticating user root 185.246.128.171 port 10396: Too many authentication failures [preauth] Feb 20 02:32:57 localhost sshd[24895]: Invalid user httpd from 27.112.79.121 port 48624 Feb 20 02:32:57 localhost sshd[24895]: Received disconnect from 27.112.79.121 port 48624:11: Bye Bye [preauth] Feb 20 02:32:57 localhost sshd[24895]: Disconnected from invalid user httpd 27.112.79.121 port 48624 [preauth] Feb 20 02:33:00 localhost sshd[24897]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 8859 ssh2 [preauth] Feb 20 02:33:00 localhost sshd[24897]: Disconnecting authenticating user root 185.246.128.171 port 8859: Too many authentication failures [preauth] Feb 20 02:33:08 localhost sshd[24899]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 28906 ssh2 [preauth] Feb 20 02:33:08 localhost sshd[24899]: Disconnecting authenticating user root 185.246.128.171 port 28906: Too many authentication failures [preauth] Feb 20 02:33:13 localhost sshd[24901]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 60767 ssh2 [preauth] Feb 20 02:33:13 localhost sshd[24901]: Disconnecting authenticating user root 185.246.128.171 port 60767: Too many authentication failures [preauth] Feb 20 02:33:19 localhost sshd[24903]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 31099 ssh2 [preauth] Feb 20 02:33:19 localhost sshd[24903]: Disconnecting authenticating user root 185.246.128.171 port 31099: Too many authentication failures [preauth] Feb 20 02:33:22 localhost sshd[24907]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:33:27 localhost sshd[24909]: Received disconnect from 103.59.94.62 port 40020:11: Bye Bye [preauth] Feb 20 02:33:27 localhost sshd[24909]: Disconnected from authenticating user root 103.59.94.62 port 40020 [preauth] Feb 20 02:33:27 localhost sshd[24905]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 46554 ssh2 [preauth] Feb 20 02:33:27 localhost sshd[24905]: Disconnecting authenticating user root 185.246.128.171 port 46554: Too many authentication failures [preauth] Feb 20 02:33:34 localhost sshd[24913]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:33:39 localhost sshd[24911]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 21391 ssh2 [preauth] Feb 20 02:33:39 localhost sshd[24911]: Disconnecting authenticating user root 185.246.128.171 port 21391: Too many authentication failures [preauth] Feb 20 02:33:49 localhost sshd[24915]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 10688 ssh2 [preauth] Feb 20 02:33:49 localhost sshd[24915]: Disconnecting authenticating user root 185.246.128.171 port 10688: Too many authentication failures [preauth] Feb 20 02:34:03 localhost sshd[24917]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 53148 ssh2 [preauth] Feb 20 02:34:03 localhost sshd[24917]: Disconnecting authenticating user root 185.246.128.171 port 53148: Too many authentication failures [preauth] Feb 20 02:34:12 localhost sshd[24919]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 47786 ssh2 [preauth] Feb 20 02:34:12 localhost sshd[24919]: Disconnecting authenticating user root 185.246.128.171 port 47786: Too many authentication failures [preauth] Feb 20 02:34:20 localhost sshd[24921]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 26358 ssh2 [preauth] Feb 20 02:34:20 localhost sshd[24921]: Disconnecting authenticating user root 185.246.128.171 port 26358: Too many authentication failures [preauth] Feb 20 02:34:32 localhost sshd[24923]: error: maximum authentication attempts exceeded for root from 185.246.128.171 port 64527 ssh2 [preauth] Feb 20 02:34:32 localhost sshd[24923]: Disconnecting authenticating user root 185.246.128.171 port 64527: Too many authentication failures [preauth] Feb 20 02:34:37 localhost sshd[24925]: Disconnecting authenticating user root 185.246.128.171 port 48321: Change of username or service not allowed: (root,ssh-connection) -> (mail,ssh-connection) [preauth] Feb 20 02:34:43 localhost sshd[24927]: Disconnecting authenticating user mail 185.246.128.171 port 13472: Change of username or service not allowed: (mail,ssh-connection) -> (deployer,ssh-connection) [preauth] Feb 20 02:34:47 localhost sshd[24930]: error: kex_exchange_identification: Connection closed by remote host Feb 20 02:34:47 localhost sshd[24930]: Connection closed by 46.101.240.14 port 54858 Feb 20 02:34:47 localhost sshd[24931]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:34:50 localhost sshd[24929]: Invalid user deployer from 185.246.128.171 port 43295 Feb 20 02:34:51 localhost sshd[24929]: Disconnecting invalid user deployer 185.246.128.171 port 43295: Change of username or service not allowed: (deployer,ssh-connection) -> (mit,ssh-connection) [preauth] Feb 20 02:34:54 localhost sshd[24934]: Invalid user mit from 185.246.128.171 port 6305 Feb 20 02:34:54 localhost sshd[24934]: Disconnecting invalid user mit 185.246.128.171 port 6305: Change of username or service not allowed: (mit,ssh-connection) -> (jimmy,ssh-connection) [preauth] Feb 20 02:34:59 localhost sshd[24936]: Invalid user jimmy from 185.246.128.171 port 24382 Feb 20 02:35:00 localhost sshd[24936]: Disconnecting invalid user jimmy 185.246.128.171 port 24382: Change of username or service not allowed: (jimmy,ssh-connection) -> (liuj,ssh-connection) [preauth] Feb 20 02:35:01 localhost sshd[24938]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:35:06 localhost sshd[24940]: Invalid user liuj from 185.246.128.171 port 51999 Feb 20 02:35:06 localhost sshd[24940]: Disconnecting invalid user liuj 185.246.128.171 port 51999: Change of username or service not allowed: (liuj,ssh-connection) -> (vscode,ssh-connection) [preauth] Feb 20 02:35:11 localhost sshd[24942]: Invalid user vscode from 185.246.128.171 port 11883 Feb 20 02:35:11 localhost sshd[24942]: Disconnecting invalid user vscode 185.246.128.171 port 11883: Change of username or service not allowed: (vscode,ssh-connection) -> (jay,ssh-connection) [preauth] Feb 20 02:35:14 localhost sshd[24944]: Invalid user jay from 185.246.128.171 port 36075 Feb 20 02:35:15 localhost sshd[24944]: Disconnecting invalid user jay 185.246.128.171 port 36075: Change of username or service not allowed: (jay,ssh-connection) -> (sol,ssh-connection) [preauth] Feb 20 02:35:23 localhost sshd[24946]: Invalid user sol from 185.246.128.171 port 59120 Feb 20 02:35:24 localhost sshd[24946]: Disconnecting invalid user sol 185.246.128.171 port 59120: Change of username or service not allowed: (sol,ssh-connection) -> (abc,ssh-connection) [preauth] Feb 20 02:35:27 localhost sshd[24950]: Accepted publickey for zuul from 192.168.122.100 port 58220 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:35:27 localhost sshd[24950]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:35:27 localhost sshd[24948]: Invalid user abc from 185.246.128.171 port 32710 Feb 20 02:35:28 localhost sudo[24996]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bslmawvavovhmnpxeyqzmeynhqjnzkyb ; /usr/bin/python3 Feb 20 02:35:28 localhost sudo[24996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:28 localhost sudo[24996]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:29 localhost sshd[24948]: Disconnecting invalid user abc 185.246.128.171 port 32710: Change of username or service not allowed: (abc,ssh-connection) -> (vtiger,ssh-connection) [preauth] Feb 20 02:35:29 localhost sudo[25016]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ikfcjuedqnszlicehuuoqjrxggxxrzwe ; /usr/bin/python3 Feb 20 02:35:29 localhost sudo[25016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:29 localhost sudo[25016]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:31 localhost sudo[25041]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xiwtqpubdciqsvdajpybqogxyoykrxeg ; /usr/bin/python3 Feb 20 02:35:31 localhost sudo[25041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:31 localhost sudo[25041]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:31 localhost sudo[25089]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hwhoegqfpxjofiwghqtfpwxvxweiqyne ; /usr/bin/python3 Feb 20 02:35:31 localhost sudo[25089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:32 localhost sudo[25089]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:32 localhost sshd[25026]: Invalid user vtiger from 185.246.128.171 port 51426 Feb 20 02:35:32 localhost sudo[25119]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hlklgwrasjmpyqkmjioukigokxczkjnh ; /usr/bin/python3 Feb 20 02:35:32 localhost sudo[25119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:32 localhost sudo[25119]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:33 localhost sudo[25135]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yrhfogwvfiwcogcmgmjsvmnmcwbdwwah ; /usr/bin/python3 Feb 20 02:35:33 localhost sudo[25135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:33 localhost sshd[25026]: Disconnecting invalid user vtiger 185.246.128.171 port 51426: Change of username or service not allowed: (vtiger,ssh-connection) -> (popo,ssh-connection) [preauth] Feb 20 02:35:33 localhost sudo[25135]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:33 localhost sudo[25151]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ptrghsoetjlmmdlarihfbxgtbzyynrek ; /usr/bin/python3 Feb 20 02:35:33 localhost sudo[25151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:33 localhost sudo[25151]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:33 localhost sudo[25168]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gjdbzpgkpevzdgiejtuybfhhtygnoydm ; /usr/bin/python3 Feb 20 02:35:33 localhost sudo[25168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:34 localhost sudo[25168]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:36 localhost sudo[25185]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fywlhoqmxczjlllzxqtuhisdzqpzxqii ; /usr/bin/python3 Feb 20 02:35:36 localhost sudo[25185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:36 localhost sudo[25185]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:36 localhost sudo[25204]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sqkyoyeumawfgopmysomedfmnltaeacv ; /usr/bin/python3 Feb 20 02:35:36 localhost sudo[25204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:37 localhost sshd[25171]: Invalid user popo from 185.246.128.171 port 13052 Feb 20 02:35:38 localhost sshd[25171]: Disconnecting invalid user popo 185.246.128.171 port 13052: Change of username or service not allowed: (popo,ssh-connection) -> (ospite,ssh-connection) [preauth] Feb 20 02:35:39 localhost sudo[25204]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:40 localhost sudo[25255]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sxfqrmsyeuzkuhdmjejvtjskccgesjte ; /usr/bin/python3 Feb 20 02:35:40 localhost sudo[25255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:41 localhost sudo[25255]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:41 localhost sudo[25300]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jlnoslwqadnzyzqikxeuyvzcpcqezfos ; /usr/bin/python3 Feb 20 02:35:41 localhost sudo[25300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:41 localhost sudo[25300]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:42 localhost sudo[25330]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fanfenantkndglzxpmwebckhnyilskeo ; /usr/bin/python3 Feb 20 02:35:42 localhost sudo[25330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:42 localhost sshd[25208]: Invalid user ospite from 185.246.128.171 port 35707 Feb 20 02:35:42 localhost sudo[25330]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:43 localhost sudo[25348]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-plpyaekadrauxvxnwbvqxfuiqicujvhk ; /usr/bin/python3 Feb 20 02:35:43 localhost sudo[25348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:43 localhost sudo[25348]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:44 localhost sshd[25208]: Disconnecting invalid user ospite 185.246.128.171 port 35707: Change of username or service not allowed: (ospite,ssh-connection) -> (frappe,ssh-connection) [preauth] Feb 20 02:35:44 localhost sudo[25404]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qnudujjtqlswpijsozzdhdyhptfmxycr ; /usr/bin/python3 Feb 20 02:35:44 localhost sudo[25404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:44 localhost sudo[25404]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:44 localhost sudo[25447]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rzczlqlmrpevdbxxzasmnoljyjwibzvg ; /usr/bin/python3 Feb 20 02:35:44 localhost sudo[25447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:44 localhost sudo[25447]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:44 localhost sudo[25477]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zumvdvaydgehvfstudcutwvxjeiyxwpv ; /usr/bin/python3 Feb 20 02:35:44 localhost sudo[25477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:45 localhost sudo[25477]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:46 localhost sudo[25573]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-atsggqzylyambsasyvwbuhppuxmqzajm ; /usr/bin/python3 Feb 20 02:35:46 localhost sudo[25573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:46 localhost sudo[25573]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:46 localhost sudo[25590]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjqbktxkiuzssumrkcljerupfvbgfbbr ; /usr/bin/python3 Feb 20 02:35:46 localhost sudo[25590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:48 localhost sshd[25558]: Invalid user frappe from 185.246.128.171 port 58847 Feb 20 02:35:50 localhost sshd[25558]: Disconnecting invalid user frappe 185.246.128.171 port 58847: Change of username or service not allowed: (frappe,ssh-connection) -> (gns3,ssh-connection) [preauth] Feb 20 02:35:51 localhost sshd[25594]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:35:54 localhost sshd[25596]: Invalid user gns3 from 185.246.128.171 port 24524 Feb 20 02:35:55 localhost sshd[25596]: Disconnecting invalid user gns3 185.246.128.171 port 24524: Change of username or service not allowed: (gns3,ssh-connection) -> (aman,ssh-connection) [preauth] Feb 20 02:35:56 localhost sudo[25590]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:57 localhost sudo[25612]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cjmecrfksnzdvwprayzajwabpgsfirgf ; /usr/bin/python3 Feb 20 02:35:57 localhost sudo[25612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:57 localhost sudo[25612]: pam_unix(sudo:session): session closed for user root Feb 20 02:35:58 localhost sudo[25633]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-btsoziowjtiplgsenooaqlxtxzfaveuy ; /usr/bin/python3 Feb 20 02:35:58 localhost sudo[25633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:35:58 localhost sudo[25633]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:01 localhost sshd[25598]: Invalid user aman from 185.246.128.171 port 50784 Feb 20 02:36:02 localhost sshd[25598]: Disconnecting invalid user aman 185.246.128.171 port 50784: Change of username or service not allowed: (aman,ssh-connection) -> (www,ssh-connection) [preauth] Feb 20 02:36:07 localhost sudo[25662]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aolrklisbpividjmixcwpeppjzuvzkqe ; /usr/bin/python3 Feb 20 02:36:07 localhost sudo[25662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:07 localhost useradd[25666]: new group: name=ceph-admin, GID=1002 Feb 20 02:36:07 localhost useradd[25666]: new user: name=ceph-admin, UID=1002, GID=1002, home=/home/ceph-admin, shell=/bin/bash, from=none Feb 20 02:36:07 localhost sudo[25662]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:07 localhost sudo[25718]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgulxuvouqwxmrzgmekxgvfcpatfspuk ; /usr/bin/python3 Feb 20 02:36:07 localhost sudo[25718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:07 localhost sudo[25718]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:08 localhost sshd[25647]: Invalid user www from 185.246.128.171 port 25889 Feb 20 02:36:08 localhost sudo[25761]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mlhghytszvasdtdzvpfsjjberigivusj ; /usr/bin/python3 Feb 20 02:36:08 localhost sudo[25761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:08 localhost sudo[25761]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:08 localhost sudo[25791]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-knkbrimudnjwvqcnzvgichurdxvinhgi ; /usr/bin/python3 Feb 20 02:36:08 localhost sudo[25791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:08 localhost sudo[25791]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:09 localhost sudo[25807]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zrxzgvmfrbyxmufdkpwxhphwqghxkmbw ; /usr/bin/python3 Feb 20 02:36:09 localhost sudo[25807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:09 localhost sudo[25807]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:09 localhost sudo[25823]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kxzuylxlmjtmxmxnwvemuuseszjejfur ; /usr/bin/python3 Feb 20 02:36:09 localhost sudo[25823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:09 localhost sudo[25823]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:10 localhost sudo[25839]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-metlrppaxvvbcydtfinkxmkyhwxwiwoy ; /usr/bin/python3 Feb 20 02:36:10 localhost sudo[25839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:10 localhost sudo[25839]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:10 localhost sudo[25887]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-heykiasfcoeqkmaozhioeasxbqeasmuh ; /usr/bin/python3 Feb 20 02:36:10 localhost sudo[25887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:10 localhost sudo[25887]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:10 localhost sshd[25647]: Disconnecting invalid user www 185.246.128.171 port 25889: Change of username or service not allowed: (www,ssh-connection) -> (xandeum,ssh-connection) [preauth] Feb 20 02:36:11 localhost sudo[25930]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hfhvvejujijwdbbakpblchldczoasnue ; /usr/bin/python3 Feb 20 02:36:11 localhost sudo[25930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:11 localhost sudo[25930]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:11 localhost sudo[25992]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wwqlzsavrxtounkcoqncglxxqgopegwd ; /usr/bin/python3 Feb 20 02:36:11 localhost sudo[25992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:11 localhost sudo[25992]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:12 localhost sudo[26035]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uqjztuurangtcdbcofpopiobdfrxexbn ; /usr/bin/python3 Feb 20 02:36:12 localhost sudo[26035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:36:12 localhost sudo[26035]: pam_unix(sudo:session): session closed for user root Feb 20 02:36:15 localhost sshd[26038]: Invalid user xandeum from 185.246.128.171 port 58063 Feb 20 02:36:16 localhost sshd[26038]: Disconnecting invalid user xandeum 185.246.128.171 port 58063: Change of username or service not allowed: (xandeum,ssh-connection) -> (gmod,ssh-connection) [preauth] Feb 20 02:36:22 localhost sshd[26054]: Invalid user gmod from 185.246.128.171 port 30523 Feb 20 02:36:23 localhost sshd[26054]: Disconnecting invalid user gmod 185.246.128.171 port 30523: Change of username or service not allowed: (gmod,ssh-connection) -> (luis,ssh-connection) [preauth] Feb 20 02:36:31 localhost sshd[26056]: Invalid user luis from 185.246.128.171 port 54259 Feb 20 02:36:31 localhost sshd[26056]: Disconnecting invalid user luis 185.246.128.171 port 54259: Change of username or service not allowed: (luis,ssh-connection) -> (wade,ssh-connection) [preauth] Feb 20 02:36:37 localhost sshd[26060]: Invalid user wade from 185.246.128.171 port 37935 Feb 20 02:36:38 localhost sshd[26060]: Disconnecting invalid user wade 185.246.128.171 port 37935: Change of username or service not allowed: (wade,ssh-connection) -> (tempadmin,ssh-connection) [preauth] Feb 20 02:36:39 localhost sshd[26062]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:36:43 localhost sshd[26064]: Invalid user tempadmin from 185.246.128.171 port 1736 Feb 20 02:36:43 localhost sshd[26064]: Disconnecting invalid user tempadmin 185.246.128.171 port 1736: Change of username or service not allowed: (tempadmin,ssh-connection) -> (pablo,ssh-connection) [preauth] Feb 20 02:36:46 localhost sshd[26066]: Invalid user pablo from 185.246.128.171 port 19066 Feb 20 02:36:46 localhost sshd[26066]: Disconnecting invalid user pablo 185.246.128.171 port 19066: Change of username or service not allowed: (pablo,ssh-connection) -> (fa,ssh-connection) [preauth] Feb 20 02:36:49 localhost sshd[26070]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:36:50 localhost sshd[26068]: Invalid user fa from 185.246.128.171 port 37076 Feb 20 02:36:51 localhost sshd[26068]: Disconnecting invalid user fa 185.246.128.171 port 37076: Change of username or service not allowed: (fa,ssh-connection) -> (weewx,ssh-connection) [preauth] Feb 20 02:36:54 localhost sshd[26072]: Invalid user weewx from 185.246.128.171 port 64914 Feb 20 02:36:55 localhost sshd[26072]: Disconnecting invalid user weewx 185.246.128.171 port 64914: Change of username or service not allowed: (weewx,ssh-connection) -> (yesenia,ssh-connection) [preauth] Feb 20 02:36:56 localhost sshd[26074]: Invalid user yesenia from 185.246.128.171 port 9641 Feb 20 02:36:57 localhost sshd[26074]: Disconnecting invalid user yesenia 185.246.128.171 port 9641: Change of username or service not allowed: (yesenia,ssh-connection) -> (jack,ssh-connection) [preauth] Feb 20 02:37:00 localhost sshd[26076]: Invalid user jack from 185.246.128.171 port 22268 Feb 20 02:37:03 localhost sshd[26076]: Disconnecting invalid user jack 185.246.128.171 port 22268: Change of username or service not allowed: (jack,ssh-connection) -> (uucp,ssh-connection) [preauth] Feb 20 02:37:07 localhost sshd[26078]: Invalid user uucp from 185.246.128.171 port 57413 Feb 20 02:37:07 localhost sshd[26078]: Disconnecting invalid user uucp 185.246.128.171 port 57413: Change of username or service not allowed: (uucp,ssh-connection) -> (app,ssh-connection) [preauth] Feb 20 02:37:10 localhost sshd[26080]: Invalid user app from 185.246.128.171 port 5812 Feb 20 02:37:10 localhost sshd[26080]: Disconnecting invalid user app 185.246.128.171 port 5812: Change of username or service not allowed: (app,ssh-connection) -> (intern,ssh-connection) [preauth] Feb 20 02:37:14 localhost sshd[26082]: Invalid user intern from 185.246.128.171 port 26168 Feb 20 02:37:15 localhost sshd[26082]: Disconnecting invalid user intern 185.246.128.171 port 26168: Change of username or service not allowed: (intern,ssh-connection) -> (ionguest,ssh-connection) [preauth] Feb 20 02:37:23 localhost sshd[26084]: Invalid user ionguest from 185.246.128.171 port 54310 Feb 20 02:37:25 localhost sshd[26084]: Disconnecting invalid user ionguest 185.246.128.171 port 54310: Change of username or service not allowed: (ionguest,ssh-connection) -> (ftpuser,ssh-connection) [preauth] Feb 20 02:37:32 localhost sshd[26087]: Invalid user ftpuser from 185.246.128.171 port 42053 Feb 20 02:37:37 localhost sshd[26087]: error: maximum authentication attempts exceeded for invalid user ftpuser from 185.246.128.171 port 42053 ssh2 [preauth] Feb 20 02:37:37 localhost sshd[26087]: Disconnecting invalid user ftpuser 185.246.128.171 port 42053: Too many authentication failures [preauth] Feb 20 02:37:39 localhost sshd[26089]: Invalid user n8n from 103.59.94.62 port 34568 Feb 20 02:37:39 localhost sshd[26089]: Received disconnect from 103.59.94.62 port 34568:11: Bye Bye [preauth] Feb 20 02:37:39 localhost sshd[26089]: Disconnected from invalid user n8n 103.59.94.62 port 34568 [preauth] Feb 20 02:37:43 localhost sshd[26091]: Invalid user ftpuser from 185.246.128.171 port 28778 Feb 20 02:37:43 localhost sshd[26093]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:37:46 localhost sshd[26091]: error: maximum authentication attempts exceeded for invalid user ftpuser from 185.246.128.171 port 28778 ssh2 [preauth] Feb 20 02:37:46 localhost sshd[26091]: Disconnecting invalid user ftpuser 185.246.128.171 port 28778: Too many authentication failures [preauth] Feb 20 02:37:49 localhost sshd[26095]: Invalid user ftpuser from 185.246.128.171 port 6221 Feb 20 02:37:50 localhost sshd[26095]: Disconnecting invalid user ftpuser 185.246.128.171 port 6221: Change of username or service not allowed: (ftpuser,ssh-connection) -> (adib,ssh-connection) [preauth] Feb 20 02:37:51 localhost sshd[26097]: Accepted publickey for ceph-admin from 192.168.122.103 port 50346 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:51 localhost systemd[26101]: pam_unix(systemd-user:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:51 localhost sshd[26097]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:51 localhost sshd[26116]: Accepted publickey for ceph-admin from 192.168.122.103 port 50360 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:51 localhost sshd[26116]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:51 localhost sudo[26121]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:37:51 localhost sudo[26121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:51 localhost sudo[26121]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:51 localhost sshd[26136]: Accepted publickey for ceph-admin from 192.168.122.103 port 50366 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:51 localhost sshd[26136]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:52 localhost sudo[26140]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host --expect-hostname np0005625201.localdomain Feb 20 02:37:52 localhost sudo[26140]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:52 localhost sudo[26140]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:52 localhost sshd[26155]: Accepted publickey for ceph-admin from 192.168.122.103 port 50372 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:52 localhost sshd[26155]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:52 localhost sudo[26159]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f Feb 20 02:37:52 localhost sudo[26159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:52 localhost sudo[26159]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:52 localhost sshd[26175]: Accepted publickey for ceph-admin from 192.168.122.103 port 50380 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:52 localhost sshd[26175]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:52 localhost sudo[26179]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:37:52 localhost sudo[26179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:52 localhost sudo[26179]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:53 localhost sshd[26194]: Accepted publickey for ceph-admin from 192.168.122.103 port 50392 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:53 localhost sshd[26194]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:53 localhost sudo[26198]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:37:53 localhost sudo[26198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:53 localhost sudo[26198]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:53 localhost sshd[26213]: Accepted publickey for ceph-admin from 192.168.122.103 port 50398 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:53 localhost sshd[26213]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:53 localhost sudo[26218]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f.new Feb 20 02:37:53 localhost sudo[26218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:53 localhost sudo[26218]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:53 localhost sshd[26233]: Accepted publickey for ceph-admin from 192.168.122.103 port 50408 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:53 localhost sshd[26233]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:53 localhost sudo[26237]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:37:53 localhost sudo[26237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:53 localhost sudo[26237]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:54 localhost sshd[26252]: Accepted publickey for ceph-admin from 192.168.122.103 port 50410 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:54 localhost sshd[26252]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:54 localhost sudo[26256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f.new Feb 20 02:37:54 localhost sudo[26256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:54 localhost sudo[26256]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:54 localhost sshd[26271]: Accepted publickey for ceph-admin from 192.168.122.103 port 50422 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:54 localhost sshd[26271]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:54 localhost sshd[26275]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:37:54 localhost sshd[26170]: Invalid user adib from 185.246.128.171 port 32358 Feb 20 02:37:55 localhost sshd[26290]: Accepted publickey for ceph-admin from 192.168.122.103 port 50432 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:55 localhost sshd[26290]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:55 localhost sudo[26294]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f Feb 20 02:37:55 localhost sudo[26294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:55 localhost sudo[26294]: pam_unix(sudo:session): session closed for user root Feb 20 02:37:55 localhost sshd[26309]: Accepted publickey for ceph-admin from 192.168.122.103 port 50440 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 02:37:55 localhost sshd[26309]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 02:37:55 localhost sshd[26170]: Disconnecting invalid user adib 185.246.128.171 port 32358: Change of username or service not allowed: (adib,ssh-connection) -> (esadmin,ssh-connection) [preauth] Feb 20 02:37:55 localhost sudo[26313]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host --expect-hostname np0005625201.localdomain Feb 20 02:37:55 localhost sudo[26313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:37:56 localhost sudo[26313]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:01 localhost sshd[26348]: Invalid user esadmin from 185.246.128.171 port 53453 Feb 20 02:38:03 localhost sshd[26348]: Disconnecting invalid user esadmin 185.246.128.171 port 53453: Change of username or service not allowed: (esadmin,ssh-connection) -> (manager,ssh-connection) [preauth] Feb 20 02:38:05 localhost sshd[26350]: Invalid user manager from 185.246.128.171 port 26983 Feb 20 02:38:07 localhost sshd[26350]: Disconnecting invalid user manager 185.246.128.171 port 26983: Change of username or service not allowed: (manager,ssh-connection) -> (stack,ssh-connection) [preauth] Feb 20 02:38:14 localhost sshd[26354]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:38:14 localhost sshd[26352]: Invalid user stack from 185.246.128.171 port 48590 Feb 20 02:38:15 localhost sshd[26352]: Disconnecting invalid user stack 185.246.128.171 port 48590: Change of username or service not allowed: (stack,ssh-connection) -> (invite,ssh-connection) [preauth] Feb 20 02:38:19 localhost sshd[26356]: Invalid user invite from 185.246.128.171 port 25356 Feb 20 02:38:20 localhost sshd[26356]: Disconnecting invalid user invite 185.246.128.171 port 25356: Change of username or service not allowed: (invite,ssh-connection) -> (pritchard,ssh-connection) [preauth] Feb 20 02:38:24 localhost sudo[26360]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:38:24 localhost sudo[26360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:24 localhost sudo[26360]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:24 localhost sudo[26375]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:24 localhost sudo[26375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:24 localhost sudo[26375]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:24 localhost sudo[26390]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 02:38:24 localhost sudo[26390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:25 localhost sshd[26358]: Invalid user pritchard from 185.246.128.171 port 50994 Feb 20 02:38:25 localhost sudo[26390]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:25 localhost sudo[26426]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:25 localhost sudo[26426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:25 localhost sudo[26426]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:25 localhost sudo[26441]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 02:38:25 localhost sudo[26441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:26 localhost sudo[26441]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:26 localhost sshd[26358]: Disconnecting invalid user pritchard 185.246.128.171 port 50994: Change of username or service not allowed: (pritchard,ssh-connection) -> (postgres,ssh-connection) [preauth] Feb 20 02:38:26 localhost sudo[26492]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:26 localhost sudo[26492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:26 localhost sudo[26492]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:26 localhost sudo[26507]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:38:26 localhost sudo[26507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:27 localhost sudo[26507]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:27 localhost sudo[26556]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:27 localhost sudo[26556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:27 localhost sudo[26556]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:27 localhost sudo[26571]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 02:38:27 localhost sudo[26571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:28 localhost sudo[26571]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:28 localhost sudo[26605]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:28 localhost sudo[26605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:28 localhost sudo[26605]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:28 localhost sudo[26620]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 -- inventory --format=json-pretty --filter-for-batch Feb 20 02:38:28 localhost sudo[26620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:31 localhost sshd[26688]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:38:32 localhost sshd[26635]: Invalid user postgres from 185.246.128.171 port 18752 Feb 20 02:38:35 localhost sshd[26635]: error: maximum authentication attempts exceeded for invalid user postgres from 185.246.128.171 port 18752 ssh2 [preauth] Feb 20 02:38:35 localhost sshd[26635]: Disconnecting invalid user postgres 185.246.128.171 port 18752: Too many authentication failures [preauth] Feb 20 02:38:39 localhost sshd[26788]: Invalid user postgres from 185.246.128.171 port 60789 Feb 20 02:38:40 localhost sshd[26788]: Disconnecting invalid user postgres 185.246.128.171 port 60789: Change of username or service not allowed: (postgres,ssh-connection) -> (pwrchute,ssh-connection) [preauth] Feb 20 02:38:45 localhost sshd[26791]: Invalid user pwrchute from 185.246.128.171 port 18829 Feb 20 02:38:45 localhost sshd[26806]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:38:46 localhost sshd[26791]: Disconnecting invalid user pwrchute 185.246.128.171 port 18829: Change of username or service not allowed: (pwrchute,ssh-connection) -> (core,ssh-connection) [preauth] Feb 20 02:38:49 localhost sshd[26809]: Invalid user core from 185.246.128.171 port 49484 Feb 20 02:38:49 localhost sshd[26809]: Disconnecting invalid user core 185.246.128.171 port 49484: Change of username or service not allowed: (core,ssh-connection) -> (sshd,ssh-connection) [preauth] Feb 20 02:38:53 localhost sudo[26620]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:53 localhost sudo[27453]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:53 localhost sudo[27453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:53 localhost sudo[27453]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:53 localhost sudo[27468]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 _orch set-coredump-overrides --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 --coredump-max-size=32G Feb 20 02:38:53 localhost sudo[27468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:54 localhost sudo[27468]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:54 localhost sshd[26811]: Disconnecting authenticating user sshd 185.246.128.171 port 1689: Change of username or service not allowed: (sshd,ssh-connection) -> (nemo,ssh-connection) [preauth] Feb 20 02:38:57 localhost sudo[27573]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 02:38:57 localhost sudo[27573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27573]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27588]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 02:38:57 localhost sudo[27588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27588]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27603]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:38:57 localhost sudo[27603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27603]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27618]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:38:57 localhost sudo[27618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27618]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27633]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:38:57 localhost sudo[27633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27633]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27661]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:38:57 localhost sudo[27661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27661]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27676]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:38:57 localhost sudo[27676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27676]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sudo[27691]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 02:38:57 localhost sudo[27691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27691]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:57 localhost sshd[27571]: Invalid user nemo from 185.246.128.171 port 25921 Feb 20 02:38:57 localhost sudo[27706]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:38:57 localhost sudo[27706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:57 localhost sudo[27706]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27721]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:38:58 localhost sudo[27721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27721]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27736]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:38:58 localhost sudo[27736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27736]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27751]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:38:58 localhost sudo[27751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27751]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27766]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:38:58 localhost sudo[27766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27766]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27794]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:38:58 localhost sudo[27794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27794]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27809]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:38:58 localhost sudo[27809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27809]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27824]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 02:38:58 localhost sudo[27824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27824]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27839]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 02:38:58 localhost sudo[27839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27839]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27854]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 02:38:58 localhost sudo[27854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27854]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27869]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 02:38:58 localhost sudo[27869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27869]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27884]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:38:58 localhost sudo[27884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27884]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:58 localhost sudo[27899]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 02:38:58 localhost sudo[27899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:58 localhost sudo[27899]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[27927]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[27927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[27927]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sshd[27571]: Disconnecting invalid user nemo 185.246.128.171 port 25921: Change of username or service not allowed: (nemo,ssh-connection) -> (secret,ssh-connection) [preauth] Feb 20 02:38:59 localhost sudo[27942]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[27942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[27942]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[27957]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring Feb 20 02:38:59 localhost sudo[27957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[27957]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[27972]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:38:59 localhost sudo[27972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[27972]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[27987]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:38:59 localhost sudo[27987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[27987]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28002]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[28002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28002]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28017]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:38:59 localhost sudo[28017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28017]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28032]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[28032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28032]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28060]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[28060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28060]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28075]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 02:38:59 localhost sudo[28075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28075]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28090]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 02:38:59 localhost sudo[28090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28090]: pam_unix(sudo:session): session closed for user root Feb 20 02:38:59 localhost sudo[28105]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:38:59 localhost sudo[28105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:38:59 localhost sudo[28105]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:00 localhost sudo[28120]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:39:00 localhost sudo[28120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:02 localhost sshd[28135]: Invalid user secret from 185.246.128.171 port 48174 Feb 20 02:39:02 localhost sudo[28120]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:04 localhost sshd[28135]: Disconnecting invalid user secret 185.246.128.171 port 48174: Change of username or service not allowed: (secret,ssh-connection) -> (wiki,ssh-connection) [preauth] Feb 20 02:39:08 localhost sudo[28575]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:39:08 localhost sudo[28575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:08 localhost sudo[28575]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:08 localhost sudo[28590]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:39:08 localhost sudo[28590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:09 localhost sshd[28574]: Invalid user wiki from 185.246.128.171 port 22691 Feb 20 02:39:09 localhost sshd[28574]: Disconnecting invalid user wiki 185.246.128.171 port 22691: Change of username or service not allowed: (wiki,ssh-connection) -> (andy,ssh-connection) [preauth] Feb 20 02:39:10 localhost sudo[28590]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:13 localhost sshd[28840]: Invalid user andy from 185.246.128.171 port 36915 Feb 20 02:39:13 localhost sshd[28840]: Disconnecting invalid user andy 185.246.128.171 port 36915: Change of username or service not allowed: (andy,ssh-connection) -> (ruoyi,ssh-connection) [preauth] Feb 20 02:39:16 localhost sshd[29118]: Invalid user ruoyi from 185.246.128.171 port 59779 Feb 20 02:39:16 localhost sshd[29118]: Disconnecting invalid user ruoyi 185.246.128.171 port 59779: Change of username or service not allowed: (ruoyi,ssh-connection) -> (casaos,ssh-connection) [preauth] Feb 20 02:39:18 localhost sshd[29122]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:39:21 localhost sshd[29124]: Invalid user casaos from 185.246.128.171 port 10947 Feb 20 02:39:22 localhost sshd[29124]: Disconnecting invalid user casaos 185.246.128.171 port 10947: Change of username or service not allowed: (casaos,ssh-connection) -> (uploader,ssh-connection) [preauth] Feb 20 02:39:23 localhost sudo[29126]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:39:23 localhost sudo[29126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:23 localhost sudo[29126]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:23 localhost sudo[29141]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:39:23 localhost sudo[29141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:25 localhost sudo[29141]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:28 localhost sshd[29232]: Invalid user uploader from 185.246.128.171 port 38522 Feb 20 02:39:30 localhost sshd[29232]: Disconnecting invalid user uploader 185.246.128.171 port 38522: Change of username or service not allowed: (uploader,ssh-connection) -> (william,ssh-connection) [preauth] Feb 20 02:39:35 localhost sshd[29414]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:39:37 localhost sshd[29412]: Invalid user william from 185.246.128.171 port 22751 Feb 20 02:39:39 localhost sshd[29416]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:39:39 localhost sshd[29412]: Disconnecting invalid user william 185.246.128.171 port 22751: Change of username or service not allowed: (william,ssh-connection) -> (supervisor,ssh-connection) [preauth] Feb 20 02:39:42 localhost sshd[29418]: Invalid user supervisor from 185.246.128.171 port 56715 Feb 20 02:39:42 localhost sshd[29418]: Disconnecting invalid user supervisor 185.246.128.171 port 56715: Change of username or service not allowed: (supervisor,ssh-connection) -> (amits,ssh-connection) [preauth] Feb 20 02:39:45 localhost sshd[29420]: Invalid user amits from 185.246.128.171 port 9195 Feb 20 02:39:45 localhost sshd[29420]: Disconnecting invalid user amits 185.246.128.171 port 9195: Change of username or service not allowed: (amits,ssh-connection) -> (db2admin,ssh-connection) [preauth] Feb 20 02:39:50 localhost sshd[29422]: Invalid user db2admin from 185.246.128.171 port 23146 Feb 20 02:39:51 localhost sshd[29422]: Disconnecting invalid user db2admin 185.246.128.171 port 23146: Change of username or service not allowed: (db2admin,ssh-connection) -> (csgo,ssh-connection) [preauth] Feb 20 02:39:52 localhost sudo[29426]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:39:52 localhost sudo[29426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:52 localhost sudo[29426]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:53 localhost sudo[29441]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:39:53 localhost sudo[29441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:53 localhost sudo[29441]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:53 localhost sudo[29456]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 02:39:53 localhost sudo[29456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:54 localhost sshd[29424]: Invalid user csgo from 185.246.128.171 port 52610 Feb 20 02:39:54 localhost sudo[29456]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:54 localhost sshd[29424]: Disconnecting invalid user csgo 185.246.128.171 port 52610: Change of username or service not allowed: (csgo,ssh-connection) -> (ftpusr,ssh-connection) [preauth] Feb 20 02:39:54 localhost sudo[29604]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:39:54 localhost sudo[29604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:54 localhost sudo[29604]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:54 localhost sudo[29619]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:39:54 localhost sudo[29619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:55 localhost sudo[29619]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:57 localhost sudo[29668]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 02:39:57 localhost sudo[29668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:57 localhost sudo[29668]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:57 localhost sudo[29683]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 02:39:57 localhost sudo[29683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:57 localhost sudo[29683]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:57 localhost sudo[29698]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:39:57 localhost sudo[29698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:57 localhost sudo[29698]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:57 localhost sudo[29713]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:39:57 localhost sudo[29713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:57 localhost sudo[29713]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29728]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:39:58 localhost sudo[29728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29728]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29756]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:39:58 localhost sudo[29756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29756]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29772]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 02:39:58 localhost sudo[29772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29772]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29787]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 02:39:58 localhost sudo[29787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29787]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29802]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:39:58 localhost sudo[29802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29802]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29816]: ceph : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -x --json=o /dev/vda Feb 20 02:39:58 localhost sudo[29816]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory Feb 20 02:39:58 localhost sudo[29816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=167) Feb 20 02:39:58 localhost sudo[29816]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29818]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 02:39:58 localhost sudo[29818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29818]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29835]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:39:58 localhost sudo[29835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29835]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29850]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:39:58 localhost sudo[29850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29850]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29865]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:39:58 localhost sudo[29865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29865]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29893]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:39:58 localhost sudo[29893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29893]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sshd[29666]: Invalid user ftpusr from 185.246.128.171 port 4707 Feb 20 02:39:58 localhost sudo[29908]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 02:39:58 localhost sudo[29908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29908]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:58 localhost sudo[29923]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 02:39:58 localhost sudo[29923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:58 localhost sudo[29923]: pam_unix(sudo:session): session closed for user root Feb 20 02:39:59 localhost sudo[29938]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:39:59 localhost sudo[29938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:39:59 localhost sudo[29938]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:00 localhost sshd[29666]: Disconnecting invalid user ftpusr 185.246.128.171 port 4707: Change of username or service not allowed: (ftpusr,ssh-connection) -> (iman,ssh-connection) [preauth] Feb 20 02:40:02 localhost sshd[29953]: Invalid user iman from 185.246.128.171 port 30724 Feb 20 02:40:02 localhost sshd[29953]: Disconnecting invalid user iman 185.246.128.171 port 30724: Change of username or service not allowed: (iman,ssh-connection) -> (username,ssh-connection) [preauth] Feb 20 02:40:03 localhost sudo[29955]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:40:03 localhost sudo[29955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:03 localhost sudo[29955]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:03 localhost sudo[29970]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:40:03 localhost sudo[29970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:04 localhost sudo[29970]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:04 localhost sudo[30040]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:40:04 localhost sudo[30040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:04 localhost sudo[30040]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:04 localhost sudo[30055]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 02:40:04 localhost sudo[30055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:05 localhost sudo[30055]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:05 localhost sudo[30121]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:40:05 localhost sudo[30121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:05 localhost sudo[30121]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:05 localhost sudo[30136]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 02:40:05 localhost sudo[30136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:06 localhost sshd[30151]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:40:06 localhost sudo[30136]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:07 localhost sudo[30289]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:40:07 localhost sudo[30289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:40:07 localhost sudo[30289]: pam_unix(sudo:session): session closed for user root Feb 20 02:40:07 localhost sshd[29992]: Invalid user username from 185.246.128.171 port 47142 Feb 20 02:40:10 localhost sshd[29992]: Disconnecting invalid user username 185.246.128.171 port 47142: Change of username or service not allowed: (username,ssh-connection) -> (user4,ssh-connection) [preauth] Feb 20 02:40:14 localhost sshd[30304]: Invalid user user4 from 185.246.128.171 port 24080 Feb 20 02:40:17 localhost sshd[30304]: Disconnecting invalid user user4 185.246.128.171 port 24080: Change of username or service not allowed: (user4,ssh-connection) -> (dev,ssh-connection) [preauth] Feb 20 02:40:20 localhost sshd[30306]: Invalid user dev from 185.246.128.171 port 56370 Feb 20 02:40:22 localhost sshd[30306]: Disconnecting invalid user dev 185.246.128.171 port 56370: Change of username or service not allowed: (dev,ssh-connection) -> (engineer,ssh-connection) [preauth] Feb 20 02:40:25 localhost sshd[30310]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:40:27 localhost sshd[30308]: Invalid user engineer from 185.246.128.171 port 20998 Feb 20 02:40:28 localhost sshd[30308]: Disconnecting invalid user engineer 185.246.128.171 port 20998: Change of username or service not allowed: (engineer,ssh-connection) -> (lixiang,ssh-connection) [preauth] Feb 20 02:40:34 localhost sshd[30312]: Invalid user lixiang from 185.246.128.171 port 53881 Feb 20 02:40:34 localhost sshd[30312]: Disconnecting invalid user lixiang 185.246.128.171 port 53881: Change of username or service not allowed: (lixiang,ssh-connection) -> (chain,ssh-connection) [preauth] Feb 20 02:40:40 localhost sshd[30314]: Invalid user chain from 185.246.128.171 port 17483 Feb 20 02:40:40 localhost sshd[30314]: Disconnecting invalid user chain 185.246.128.171 port 17483: Change of username or service not allowed: (chain,ssh-connection) -> (finance,ssh-connection) [preauth] Feb 20 02:40:43 localhost sshd[30316]: Invalid user finance from 185.246.128.171 port 43604 Feb 20 02:40:44 localhost sshd[30316]: Disconnecting invalid user finance 185.246.128.171 port 43604: Change of username or service not allowed: (finance,ssh-connection) -> (aaa,ssh-connection) [preauth] Feb 20 02:40:49 localhost sshd[30318]: Invalid user aaa from 185.246.128.171 port 1236 Feb 20 02:40:50 localhost sshd[30318]: Disconnecting invalid user aaa 185.246.128.171 port 1236: Change of username or service not allowed: (aaa,ssh-connection) -> (fedora,ssh-connection) [preauth] Feb 20 02:40:54 localhost sshd[30322]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:40:55 localhost sshd[30324]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:40:56 localhost sshd[30320]: Invalid user fedora from 185.246.128.171 port 32909 Feb 20 02:40:57 localhost sshd[30320]: Disconnecting invalid user fedora 185.246.128.171 port 32909: Change of username or service not allowed: (fedora,ssh-connection) -> (vendas,ssh-connection) [preauth] Feb 20 02:41:01 localhost sshd[30326]: Invalid user vendas from 185.246.128.171 port 8620 Feb 20 02:41:01 localhost sshd[30326]: Disconnecting invalid user vendas 185.246.128.171 port 8620: Change of username or service not allowed: (vendas,ssh-connection) -> (alex,ssh-connection) [preauth] Feb 20 02:41:03 localhost sshd[30328]: Invalid user alex from 185.246.128.171 port 22504 Feb 20 02:41:04 localhost sshd[30328]: Disconnecting invalid user alex 185.246.128.171 port 22504: Change of username or service not allowed: (alex,ssh-connection) -> (user123,ssh-connection) [preauth] Feb 20 02:41:07 localhost sudo[30332]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:41:07 localhost sudo[30332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:41:07 localhost sudo[30332]: pam_unix(sudo:session): session closed for user root Feb 20 02:41:07 localhost sudo[30347]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 02:41:07 localhost sudo[30347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:41:08 localhost sshd[30330]: Invalid user user123 from 185.246.128.171 port 38714 Feb 20 02:41:08 localhost sudo[30347]: pam_unix(sudo:session): session closed for user root Feb 20 02:41:08 localhost sudo[30494]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:41:08 localhost sudo[30494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:41:08 localhost sudo[30494]: pam_unix(sudo:session): session closed for user root Feb 20 02:41:08 localhost sudo[30509]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:41:08 localhost sudo[30509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:41:09 localhost sudo[30509]: pam_unix(sudo:session): session closed for user root Feb 20 02:41:09 localhost sudo[30555]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:41:09 localhost sudo[30555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:41:09 localhost sudo[30555]: pam_unix(sudo:session): session closed for user root Feb 20 02:41:10 localhost sshd[30330]: Disconnecting invalid user user123 185.246.128.171 port 38714: Change of username or service not allowed: (user123,ssh-connection) -> (factorio,ssh-connection) [preauth] Feb 20 02:41:15 localhost sshd[30572]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:41:15 localhost sshd[30570]: Invalid user factorio from 185.246.128.171 port 15999 Feb 20 02:41:15 localhost sshd[30570]: Disconnecting invalid user factorio 185.246.128.171 port 15999: Change of username or service not allowed: (factorio,ssh-connection) -> (omar,ssh-connection) [preauth] Feb 20 02:41:20 localhost sshd[30574]: Invalid user omar from 185.246.128.171 port 35677 Feb 20 02:41:21 localhost sshd[30574]: Disconnecting invalid user omar 185.246.128.171 port 35677: Change of username or service not allowed: (omar,ssh-connection) -> (vhserver,ssh-connection) [preauth] Feb 20 02:41:25 localhost sshd[30576]: Invalid user vhserver from 185.246.128.171 port 64790 Feb 20 02:41:28 localhost sshd[30576]: Disconnecting invalid user vhserver 185.246.128.171 port 64790: Change of username or service not allowed: (vhserver,ssh-connection) -> (cloudera,ssh-connection) [preauth] Feb 20 02:41:34 localhost sshd[30578]: Invalid user cloudera from 185.246.128.171 port 45928 Feb 20 02:41:37 localhost sshd[30578]: Disconnecting invalid user cloudera 185.246.128.171 port 45928: Change of username or service not allowed: (cloudera,ssh-connection) -> (morteza,ssh-connection) [preauth] Feb 20 02:41:40 localhost sshd[30581]: Invalid user andrew from 103.59.94.62 port 54014 Feb 20 02:41:40 localhost sshd[30581]: Received disconnect from 103.59.94.62 port 54014:11: Bye Bye [preauth] Feb 20 02:41:40 localhost sshd[30581]: Disconnected from invalid user andrew 103.59.94.62 port 54014 [preauth] Feb 20 02:41:41 localhost sshd[30580]: Invalid user morteza from 185.246.128.171 port 15458 Feb 20 02:41:41 localhost sshd[30580]: Disconnecting invalid user morteza 185.246.128.171 port 15458: Change of username or service not allowed: (morteza,ssh-connection) -> (fran,ssh-connection) [preauth] Feb 20 02:41:44 localhost sshd[30586]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:41:44 localhost sshd[30584]: Invalid user fran from 185.246.128.171 port 41273 Feb 20 02:41:46 localhost sshd[30584]: Disconnecting invalid user fran 185.246.128.171 port 41273: Change of username or service not allowed: (fran,ssh-connection) -> (router,ssh-connection) [preauth] Feb 20 02:41:51 localhost sshd[30588]: Invalid user router from 185.246.128.171 port 2465 Feb 20 02:41:51 localhost sshd[30588]: Disconnecting invalid user router 185.246.128.171 port 2465: Change of username or service not allowed: (router,ssh-connection) -> (satya,ssh-connection) [preauth] Feb 20 02:41:54 localhost sshd[30590]: Invalid user satya from 185.246.128.171 port 32548 Feb 20 02:41:55 localhost sshd[30590]: Disconnecting invalid user satya 185.246.128.171 port 32548: Change of username or service not allowed: (satya,ssh-connection) -> (adam,ssh-connection) [preauth] Feb 20 02:42:01 localhost sshd[30592]: Invalid user adam from 185.246.128.171 port 56800 Feb 20 02:42:01 localhost sshd[30592]: Disconnecting invalid user adam 185.246.128.171 port 56800: Change of username or service not allowed: (adam,ssh-connection) -> (eagle,ssh-connection) [preauth] Feb 20 02:42:05 localhost sshd[30594]: Invalid user eagle from 185.246.128.171 port 30416 Feb 20 02:42:06 localhost sshd[30594]: Disconnecting invalid user eagle 185.246.128.171 port 30416: Change of username or service not allowed: (eagle,ssh-connection) -> (theta,ssh-connection) [preauth] Feb 20 02:42:06 localhost sshd[30596]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:42:08 localhost sshd[30598]: Invalid user theta from 185.246.128.171 port 44824 Feb 20 02:42:09 localhost sshd[30598]: Disconnecting invalid user theta 185.246.128.171 port 44824: Change of username or service not allowed: (theta,ssh-connection) -> (healthnet,ssh-connection) [preauth] Feb 20 02:42:09 localhost sshd[30600]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:42:10 localhost sudo[30602]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:42:10 localhost sudo[30602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:42:10 localhost sudo[30602]: pam_unix(sudo:session): session closed for user root Feb 20 02:42:10 localhost sudo[30617]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:42:10 localhost sudo[30617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:42:10 localhost sudo[30617]: pam_unix(sudo:session): session closed for user root Feb 20 02:42:11 localhost sudo[30665]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:42:11 localhost sudo[30665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:42:11 localhost sudo[30665]: pam_unix(sudo:session): session closed for user root Feb 20 02:42:16 localhost sshd[30646]: Invalid user healthnet from 185.246.128.171 port 3099 Feb 20 02:42:16 localhost sshd[30646]: Disconnecting invalid user healthnet 185.246.128.171 port 3099: Change of username or service not allowed: (healthnet,ssh-connection) -> (caja,ssh-connection) [preauth] Feb 20 02:42:22 localhost sshd[30680]: Invalid user caja from 185.246.128.171 port 47286 Feb 20 02:42:24 localhost sshd[30680]: Disconnecting invalid user caja 185.246.128.171 port 47286: Change of username or service not allowed: (caja,ssh-connection) -> (ceshi,ssh-connection) [preauth] Feb 20 02:42:32 localhost sshd[30682]: Invalid user ceshi from 185.246.128.171 port 31176 Feb 20 02:42:33 localhost sshd[30682]: Disconnecting invalid user ceshi 185.246.128.171 port 31176: Change of username or service not allowed: (ceshi,ssh-connection) -> (vpnuser,ssh-connection) [preauth] Feb 20 02:42:34 localhost sshd[30684]: Invalid user vpnuser from 185.246.128.171 port 6154 Feb 20 02:42:35 localhost sshd[30684]: Disconnecting invalid user vpnuser 185.246.128.171 port 6154: Change of username or service not allowed: (vpnuser,ssh-connection) -> (debian,ssh-connection) [preauth] Feb 20 02:42:35 localhost sshd[30686]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:42:39 localhost sshd[30688]: Invalid user debian from 185.246.128.171 port 20287 Feb 20 02:42:43 localhost sshd[30688]: error: maximum authentication attempts exceeded for invalid user debian from 185.246.128.171 port 20287 ssh2 [preauth] Feb 20 02:42:43 localhost sshd[30688]: Disconnecting invalid user debian 185.246.128.171 port 20287: Too many authentication failures [preauth] Feb 20 02:42:45 localhost sshd[30690]: Invalid user debian from 185.246.128.171 port 2340 Feb 20 02:42:45 localhost sshd[30690]: Disconnecting invalid user debian 185.246.128.171 port 2340: Change of username or service not allowed: (debian,ssh-connection) -> (abe,ssh-connection) [preauth] Feb 20 02:42:46 localhost sshd[30692]: Invalid user abe from 185.246.128.171 port 10358 Feb 20 02:42:46 localhost sshd[30692]: Disconnecting invalid user abe 185.246.128.171 port 10358: Change of username or service not allowed: (abe,ssh-connection) -> (itadmin,ssh-connection) [preauth] Feb 20 02:42:52 localhost sshd[30694]: Invalid user itadmin from 185.246.128.171 port 26806 Feb 20 02:42:53 localhost sshd[30694]: Disconnecting invalid user itadmin 185.246.128.171 port 26806: Change of username or service not allowed: (itadmin,ssh-connection) -> (username1,ssh-connection) [preauth] Feb 20 02:42:54 localhost sshd[30697]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:42:56 localhost sshd[30696]: Invalid user username1 from 185.246.128.171 port 62496 Feb 20 02:42:56 localhost sshd[30696]: Disconnecting invalid user username1 185.246.128.171 port 62496: Change of username or service not allowed: (username1,ssh-connection) -> (alberto,ssh-connection) [preauth] Feb 20 02:42:58 localhost sshd[30700]: Invalid user alberto from 185.246.128.171 port 11720 Feb 20 02:42:59 localhost sshd[30700]: Disconnecting invalid user alberto 185.246.128.171 port 11720: Change of username or service not allowed: (alberto,ssh-connection) -> (testuser,ssh-connection) [preauth] Feb 20 02:43:02 localhost sshd[30702]: Invalid user testuser from 185.246.128.171 port 30131 Feb 20 02:43:04 localhost sshd[30702]: error: maximum authentication attempts exceeded for invalid user testuser from 185.246.128.171 port 30131 ssh2 [preauth] Feb 20 02:43:04 localhost sshd[30702]: Disconnecting invalid user testuser 185.246.128.171 port 30131: Too many authentication failures [preauth] Feb 20 02:43:08 localhost sshd[30705]: Invalid user testuser from 185.246.128.171 port 63074 Feb 20 02:43:09 localhost sshd[30705]: Disconnecting invalid user testuser 185.246.128.171 port 63074: Change of username or service not allowed: (testuser,ssh-connection) -> (minecraft,ssh-connection) [preauth] Feb 20 02:43:11 localhost sudo[30710]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:43:11 localhost sudo[30710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:43:11 localhost sudo[30710]: pam_unix(sudo:session): session closed for user root Feb 20 02:43:11 localhost sudo[30725]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:43:11 localhost sudo[30725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:43:12 localhost sudo[30725]: pam_unix(sudo:session): session closed for user root Feb 20 02:43:12 localhost sudo[30771]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:43:12 localhost sudo[30771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:43:12 localhost sudo[30771]: pam_unix(sudo:session): session closed for user root Feb 20 02:43:14 localhost sshd[30708]: Invalid user minecraft from 185.246.128.171 port 24166 Feb 20 02:43:15 localhost sshd[30708]: Disconnecting invalid user minecraft 185.246.128.171 port 24166: Change of username or service not allowed: (minecraft,ssh-connection) -> (api,ssh-connection) [preauth] Feb 20 02:43:20 localhost sshd[30786]: Invalid user api from 185.246.128.171 port 61662 Feb 20 02:43:20 localhost sshd[30786]: Disconnecting invalid user api 185.246.128.171 port 61662: Change of username or service not allowed: (api,ssh-connection) -> (sshadmin,ssh-connection) [preauth] Feb 20 02:43:23 localhost sshd[30788]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:43:24 localhost sshd[30790]: Invalid user sshadmin from 185.246.128.171 port 35006 Feb 20 02:43:25 localhost sshd[30790]: Disconnecting invalid user sshadmin 185.246.128.171 port 35006: Change of username or service not allowed: (sshadmin,ssh-connection) -> (gitlab,ssh-connection) [preauth] Feb 20 02:43:25 localhost sshd[30792]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:43:27 localhost sshd[30793]: Invalid user gitlab from 185.246.128.171 port 46073 Feb 20 02:43:27 localhost sshd[30793]: Disconnecting invalid user gitlab 185.246.128.171 port 46073: Change of username or service not allowed: (gitlab,ssh-connection) -> (charles,ssh-connection) [preauth] Feb 20 02:43:29 localhost sshd[30796]: Invalid user charles from 185.246.128.171 port 62645 Feb 20 02:43:29 localhost sshd[30796]: Disconnecting invalid user charles 185.246.128.171 port 62645: Change of username or service not allowed: (charles,ssh-connection) -> (log,ssh-connection) [preauth] Feb 20 02:43:30 localhost sshd[30798]: Invalid user log from 185.246.128.171 port 8749 Feb 20 02:43:31 localhost sshd[30798]: Disconnecting invalid user log 185.246.128.171 port 8749: Change of username or service not allowed: (log,ssh-connection) -> (Lucas,ssh-connection) [preauth] Feb 20 02:43:35 localhost sshd[30800]: Invalid user Lucas from 185.246.128.171 port 24749 Feb 20 02:43:37 localhost sshd[30800]: Disconnecting invalid user Lucas 185.246.128.171 port 24749: Change of username or service not allowed: (Lucas,ssh-connection) -> (dlinares,ssh-connection) [preauth] Feb 20 02:43:39 localhost sshd[30802]: Invalid user dlinares from 185.246.128.171 port 55290 Feb 20 02:43:40 localhost sshd[30802]: Disconnecting invalid user dlinares 185.246.128.171 port 55290: Change of username or service not allowed: (dlinares,ssh-connection) -> (vpn,ssh-connection) [preauth] Feb 20 02:43:43 localhost sshd[30804]: Invalid user vpn from 185.246.128.171 port 8469 Feb 20 02:43:43 localhost sshd[30806]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:43:43 localhost sshd[30804]: Disconnecting invalid user vpn 185.246.128.171 port 8469: Change of username or service not allowed: (vpn,ssh-connection) -> (tester,ssh-connection) [preauth] Feb 20 02:43:46 localhost sshd[30808]: Invalid user tester from 185.246.128.171 port 26442 Feb 20 02:43:48 localhost sshd[30808]: Disconnecting invalid user tester 185.246.128.171 port 26442: Change of username or service not allowed: (tester,ssh-connection) -> (bao,ssh-connection) [preauth] Feb 20 02:43:52 localhost sshd[30810]: Invalid user bao from 185.246.128.171 port 57890 Feb 20 02:43:53 localhost sshd[30810]: Disconnecting invalid user bao 185.246.128.171 port 57890: Change of username or service not allowed: (bao,ssh-connection) -> (data,ssh-connection) [preauth] Feb 20 02:43:57 localhost sshd[30812]: Invalid user data from 185.246.128.171 port 27710 Feb 20 02:43:58 localhost sshd[30812]: Disconnecting invalid user data 185.246.128.171 port 27710: Change of username or service not allowed: (data,ssh-connection) -> (odoo18,ssh-connection) [preauth] Feb 20 02:44:01 localhost sshd[30815]: Invalid user odoo18 from 185.246.128.171 port 46919 Feb 20 02:44:01 localhost sshd[30815]: Disconnecting invalid user odoo18 185.246.128.171 port 46919: Change of username or service not allowed: (odoo18,ssh-connection) -> (openvpn,ssh-connection) [preauth] Feb 20 02:44:04 localhost sshd[30818]: Invalid user openvpn from 185.246.128.171 port 5529 Feb 20 02:44:04 localhost sshd[30818]: Disconnecting invalid user openvpn 185.246.128.171 port 5529: Change of username or service not allowed: (openvpn,ssh-connection) -> (fastuser,ssh-connection) [preauth] Feb 20 02:44:06 localhost sshd[30820]: Invalid user fastuser from 185.246.128.171 port 19050 Feb 20 02:44:07 localhost sshd[30820]: Disconnecting invalid user fastuser 185.246.128.171 port 19050: Change of username or service not allowed: (fastuser,ssh-connection) -> (steam,ssh-connection) [preauth] Feb 20 02:44:11 localhost sshd[30822]: Invalid user steam from 185.246.128.171 port 38870 Feb 20 02:44:12 localhost sshd[30822]: Disconnecting invalid user steam 185.246.128.171 port 38870: Change of username or service not allowed: (steam,ssh-connection) -> (ui,ssh-connection) [preauth] Feb 20 02:44:13 localhost sudo[30824]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:44:13 localhost sudo[30824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:44:13 localhost sudo[30824]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:13 localhost sudo[30839]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:44:13 localhost sudo[30839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:44:13 localhost sudo[30839]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:14 localhost sshd[30852]: Invalid user ui from 185.246.128.171 port 60357 Feb 20 02:44:14 localhost sudo[30888]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:44:14 localhost sudo[30888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:44:14 localhost sudo[30888]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:14 localhost sshd[30886]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:44:14 localhost sshd[30852]: Disconnecting invalid user ui 185.246.128.171 port 60357: Change of username or service not allowed: (ui,ssh-connection) -> (webapp,ssh-connection) [preauth] Feb 20 02:44:17 localhost sshd[30903]: Invalid user webapp from 185.246.128.171 port 6949 Feb 20 02:44:18 localhost sshd[30903]: Disconnecting invalid user webapp 185.246.128.171 port 6949: Change of username or service not allowed: (webapp,ssh-connection) -> (test4,ssh-connection) [preauth] Feb 20 02:44:21 localhost sshd[30905]: Invalid user test4 from 185.246.128.171 port 27701 Feb 20 02:44:21 localhost sshd[30905]: Disconnecting invalid user test4 185.246.128.171 port 27701: Change of username or service not allowed: (test4,ssh-connection) -> (mohammad,ssh-connection) [preauth] Feb 20 02:44:25 localhost sshd[30907]: Invalid user mohammad from 185.246.128.171 port 53296 Feb 20 02:44:25 localhost sshd[30907]: Disconnecting invalid user mohammad 185.246.128.171 port 53296: Change of username or service not allowed: (mohammad,ssh-connection) -> (testftp,ssh-connection) [preauth] Feb 20 02:44:27 localhost sshd[30909]: Invalid user testftp from 185.246.128.171 port 3847 Feb 20 02:44:28 localhost sshd[30909]: Disconnecting invalid user testftp 185.246.128.171 port 3847: Change of username or service not allowed: (testftp,ssh-connection) -> (hamed,ssh-connection) [preauth] Feb 20 02:44:30 localhost sshd[30911]: Invalid user hamed from 185.246.128.171 port 25249 Feb 20 02:44:30 localhost sshd[30911]: Disconnecting invalid user hamed 185.246.128.171 port 25249: Change of username or service not allowed: (hamed,ssh-connection) -> (ansible,ssh-connection) [preauth] Feb 20 02:44:31 localhost sshd[30913]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:44:35 localhost sshd[30915]: Invalid user ansible from 185.246.128.171 port 37935 Feb 20 02:44:37 localhost sshd[30917]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:44:38 localhost sshd[30915]: Disconnecting invalid user ansible 185.246.128.171 port 37935: Change of username or service not allowed: (ansible,ssh-connection) -> (hugo,ssh-connection) [preauth] Feb 20 02:44:42 localhost sshd[30919]: Invalid user hugo from 185.246.128.171 port 16593 Feb 20 02:44:42 localhost sshd[30919]: Disconnecting invalid user hugo 185.246.128.171 port 16593: Change of username or service not allowed: (hugo,ssh-connection) -> (cq,ssh-connection) [preauth] Feb 20 02:44:45 localhost sshd[30921]: Invalid user cq from 185.246.128.171 port 37929 Feb 20 02:44:45 localhost sshd[30921]: Disconnecting invalid user cq 185.246.128.171 port 37929: Change of username or service not allowed: (cq,ssh-connection) -> (max,ssh-connection) [preauth] Feb 20 02:44:49 localhost sshd[24953]: Received disconnect from 192.168.122.100 port 58220:11: disconnected by user Feb 20 02:44:49 localhost sshd[24953]: Disconnected from user zuul 192.168.122.100 port 58220 Feb 20 02:44:49 localhost sshd[24950]: pam_unix(sshd:session): session closed for user zuul Feb 20 02:44:49 localhost sshd[30926]: Accepted publickey for zuul from 192.168.122.100 port 51756 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:44:49 localhost sshd[30926]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 02:44:50 localhost sudo[30973]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-urpckpkqllrtcevtbxisjgdxthbojuhj ; /usr/bin/python3 Feb 20 02:44:50 localhost sudo[30973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:50 localhost sudo[30973]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:50 localhost sudo[31018]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymhuhogiueuhowuqngaxnjcyuvaenbnr ; /usr/bin/python3 Feb 20 02:44:50 localhost sudo[31018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:51 localhost sudo[31018]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:51 localhost sudo[31038]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jxkpzkdsqetzqkyqhrusghjbaaybcqkw ; /usr/bin/python3 Feb 20 02:44:51 localhost sudo[31038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:51 localhost useradd[31042]: new group: name=tripleo-admin, GID=1003 Feb 20 02:44:51 localhost useradd[31042]: new user: name=tripleo-admin, UID=1003, GID=1003, home=/home/tripleo-admin, shell=/bin/bash, from=none Feb 20 02:44:51 localhost sudo[31038]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:51 localhost sudo[31094]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fflavufsgbxttzgudtvnsdczazbgvhrd ; /usr/bin/python3 Feb 20 02:44:51 localhost sudo[31094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:52 localhost sudo[31094]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:52 localhost sudo[31137]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-akfuabqqkxsqkqeknogzbudbnxtxqbyo ; /usr/bin/python3 Feb 20 02:44:52 localhost sudo[31137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:52 localhost sudo[31137]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:52 localhost sudo[31167]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yleopznilakouhemscgqaebokusssyhd ; /usr/bin/python3 Feb 20 02:44:52 localhost sudo[31167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:52 localhost sudo[31167]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:53 localhost sudo[31183]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ziniemhuyykqdbtccsvdbzvtlsfmryxp ; /usr/bin/python3 Feb 20 02:44:53 localhost sudo[31183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:53 localhost sudo[31183]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:53 localhost sudo[31199]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uhafrboeviiopsisnazwddlwqalkrrbl ; /usr/bin/python3 Feb 20 02:44:53 localhost sudo[31199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:53 localhost sshd[30923]: Invalid user max from 185.246.128.171 port 61083 Feb 20 02:44:53 localhost sudo[31199]: pam_unix(sudo:session): session closed for user root Feb 20 02:44:53 localhost sshd[30923]: Disconnecting invalid user max 185.246.128.171 port 61083: Change of username or service not allowed: (max,ssh-connection) -> (alma,ssh-connection) [preauth] Feb 20 02:44:54 localhost sudo[31215]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnrekdprfkolcyprtbilagfbhgfjryve ; /usr/bin/python3 Feb 20 02:44:54 localhost sudo[31215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 02:44:54 localhost sudo[31215]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:01 localhost sshd[31232]: Invalid user alma from 185.246.128.171 port 44956 Feb 20 02:45:03 localhost sshd[31234]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:45:05 localhost sshd[31232]: Disconnecting invalid user alma 185.246.128.171 port 44956: Change of username or service not allowed: (alma,ssh-connection) -> (usuario,ssh-connection) [preauth] Feb 20 02:45:06 localhost sshd[31236]: Accepted publickey for tripleo-admin from 192.168.122.100 port 33292 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 02:45:06 localhost systemd[31240]: pam_unix(systemd-user:session): session opened for user tripleo-admin(uid=1003) by (uid=0) Feb 20 02:45:06 localhost sshd[31236]: pam_unix(sshd:session): session opened for user tripleo-admin(uid=1003) by (uid=0) Feb 20 02:45:06 localhost sudo[31301]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xhkoidycrzdgxadbbxhwhjxxgymmdrcd ; /usr/bin/python3 Feb 20 02:45:06 localhost sudo[31301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:07 localhost sudo[31301]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:10 localhost sshd[31273]: Invalid user usuario from 185.246.128.171 port 33774 Feb 20 02:45:11 localhost sudo[31322]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xesgqxmureepimbwujabazydsefdrzrj ; /usr/bin/python3 Feb 20 02:45:11 localhost sudo[31322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:12 localhost sudo[31322]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:12 localhost sudo[31338]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jylaiqlrvppqcjhobqmfimzbkgjuputj ; /usr/bin/python3 Feb 20 02:45:12 localhost sudo[31338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:12 localhost sudo[31338]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:13 localhost sshd[31273]: Disconnecting invalid user usuario 185.246.128.171 port 33774: Change of username or service not allowed: (usuario,ssh-connection) -> (nutanix,ssh-connection) [preauth] Feb 20 02:45:13 localhost sudo[31386]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrjcirhilcqomiknbkesjklfqdjlewou ; /usr/bin/python3 Feb 20 02:45:13 localhost sudo[31386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:13 localhost sudo[31386]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:13 localhost sudo[31416]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsgztvdrdjoxtkigavngxjrzgblldsvb ; /usr/bin/python3 Feb 20 02:45:13 localhost sudo[31416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:13 localhost sudo[31416]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:14 localhost sudo[31419]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:45:14 localhost sudo[31419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:45:14 localhost sudo[31419]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:14 localhost sudo[31434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:45:14 localhost sudo[31434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:45:14 localhost sudo[31462]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-evhnubrfqpugsbcumupiyonqxzxfbpmn ; /usr/bin/python3 Feb 20 02:45:14 localhost sudo[31462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:14 localhost sudo[31462]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:15 localhost sudo[31503]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lyzzbugcidlntsvzhlqhtewfytgmogoh ; /usr/bin/python3 Feb 20 02:45:15 localhost sudo[31503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:15 localhost sudo[31434]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:15 localhost sudo[31503]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:15 localhost sudo[31514]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:45:15 localhost sudo[31514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:45:15 localhost sudo[31514]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:15 localhost sudo[31541]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgzepcbeatcchepkiqfocihhdyichmiq ; /usr/bin/python3 Feb 20 02:45:15 localhost sudo[31541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:15 localhost sudo[31541]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:16 localhost sudo[31559]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cbswvlwdejryajguiduprlknxfwqsakh ; /usr/bin/python3 Feb 20 02:45:16 localhost sudo[31559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:16 localhost sudo[31559]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:17 localhost sudo[31577]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hubzlbltidneymttpnvqdnxgwawlibpi ; /usr/bin/python3 Feb 20 02:45:17 localhost sudo[31577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:17 localhost sshd[31580]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:45:20 localhost sshd[31545]: Invalid user nutanix from 185.246.128.171 port 18925 Feb 20 02:45:20 localhost sshd[31545]: Disconnecting invalid user nutanix 185.246.128.171 port 18925: Change of username or service not allowed: (nutanix,ssh-connection) -> (zhongwen,ssh-connection) [preauth] Feb 20 02:45:21 localhost sudo[31577]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:21 localhost sudo[31599]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pqfzkwvvrnljfnpbcfvhnsdwqrpigeam ; /usr/bin/python3 Feb 20 02:45:21 localhost sudo[31599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:22 localhost sudo[31599]: pam_unix(sudo:session): session closed for user root Feb 20 02:45:22 localhost sudo[31617]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qeajdflbqquoximlhciaomnitdxqckjq ; /usr/bin/python3 Feb 20 02:45:22 localhost sudo[31617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:45:23 localhost sshd[31585]: Invalid user zhongwen from 185.246.128.171 port 46175 Feb 20 02:45:23 localhost sshd[31585]: Disconnecting invalid user zhongwen 185.246.128.171 port 46175: Change of username or service not allowed: (zhongwen,ssh-connection) -> (user01,ssh-connection) [preauth] Feb 20 02:45:26 localhost sshd[31621]: Invalid user user01 from 185.246.128.171 port 58855 Feb 20 02:45:26 localhost sshd[31621]: Disconnecting invalid user user01 185.246.128.171 port 58855: Change of username or service not allowed: (user01,ssh-connection) -> (diego,ssh-connection) [preauth] Feb 20 02:45:30 localhost sshd[31626]: Invalid user diego from 185.246.128.171 port 13138 Feb 20 02:45:30 localhost sshd[31626]: Disconnecting invalid user diego 185.246.128.171 port 13138: Change of username or service not allowed: (diego,ssh-connection) -> (scan,ssh-connection) [preauth] Feb 20 02:45:34 localhost sshd[31785]: Invalid user scan from 185.246.128.171 port 38635 Feb 20 02:45:35 localhost sshd[31785]: Disconnecting invalid user scan 185.246.128.171 port 38635: Change of username or service not allowed: (scan,ssh-connection) -> (sophia,ssh-connection) [preauth] Feb 20 02:45:37 localhost groupadd[31798]: group added to /etc/group: name=puppet, GID=52 Feb 20 02:45:37 localhost groupadd[31798]: group added to /etc/gshadow: name=puppet Feb 20 02:45:37 localhost groupadd[31798]: new group: name=puppet, GID=52 Feb 20 02:45:37 localhost useradd[31805]: new user: name=puppet, UID=52, GID=52, home=/var/lib/puppet, shell=/sbin/nologin, from=none Feb 20 02:45:39 localhost sshd[31788]: Invalid user sophia from 185.246.128.171 port 63136 Feb 20 02:45:40 localhost sshd[31788]: Disconnecting invalid user sophia 185.246.128.171 port 63136: Change of username or service not allowed: (sophia,ssh-connection) -> (user11,ssh-connection) [preauth] Feb 20 02:45:42 localhost sshd[31816]: Invalid user vpn from 103.59.94.62 port 35188 Feb 20 02:45:42 localhost sshd[31818]: Invalid user user11 from 185.246.128.171 port 21612 Feb 20 02:45:42 localhost sshd[31816]: Received disconnect from 103.59.94.62 port 35188:11: Bye Bye [preauth] Feb 20 02:45:42 localhost sshd[31816]: Disconnected from invalid user vpn 103.59.94.62 port 35188 [preauth] Feb 20 02:45:43 localhost sshd[31818]: Disconnecting invalid user user11 185.246.128.171 port 21612: Change of username or service not allowed: (user11,ssh-connection) -> (jenkins,ssh-connection) [preauth] Feb 20 02:45:49 localhost sshd[32090]: Invalid user jenkins from 185.246.128.171 port 47161 Feb 20 02:45:50 localhost sshd[32090]: Disconnecting invalid user jenkins 185.246.128.171 port 47161: Change of username or service not allowed: (jenkins,ssh-connection) -> (localadmin,ssh-connection) [preauth] Feb 20 02:45:50 localhost sshd[32114]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:45:52 localhost sshd[32119]: Invalid user localadmin from 185.246.128.171 port 15257 Feb 20 02:45:53 localhost sshd[32119]: Disconnecting invalid user localadmin 185.246.128.171 port 15257: Change of username or service not allowed: (localadmin,ssh-connection) -> (Nova,ssh-connection) [preauth] Feb 20 02:45:57 localhost sshd[32148]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:46:00 localhost sshd[32142]: Invalid user Nova from 185.246.128.171 port 41521 Feb 20 02:46:02 localhost sshd[32142]: Disconnecting invalid user Nova 185.246.128.171 port 41521: Change of username or service not allowed: (Nova,ssh-connection) -> (loginuser,ssh-connection) [preauth] Feb 20 02:46:04 localhost sshd[32209]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:46:04 localhost sshd[32198]: Invalid user loginuser from 185.246.128.171 port 16428 Feb 20 02:46:05 localhost sshd[32198]: Disconnecting invalid user loginuser 185.246.128.171 port 16428: Change of username or service not allowed: (loginuser,ssh-connection) -> (visitors,ssh-connection) [preauth] Feb 20 02:46:08 localhost sshd[32223]: Invalid user visitors from 185.246.128.171 port 39302 Feb 20 02:46:08 localhost sshd[32223]: Disconnecting invalid user visitors 185.246.128.171 port 39302: Change of username or service not allowed: (visitors,ssh-connection) -> (auditadm,ssh-connection) [preauth] Feb 20 02:46:15 localhost sshd[32239]: Invalid user auditadm from 185.246.128.171 port 54884 Feb 20 02:46:16 localhost sshd[32239]: Disconnecting invalid user auditadm 185.246.128.171 port 54884: Change of username or service not allowed: (auditadm,ssh-connection) -> (dspace,ssh-connection) [preauth] Feb 20 02:46:16 localhost sudo[32254]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:46:16 localhost sudo[32254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:46:16 localhost sudo[32254]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:16 localhost sudo[32269]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:46:16 localhost sudo[32269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:46:16 localhost sudo[32269]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:17 localhost sudo[32317]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:46:17 localhost sudo[32317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:46:17 localhost sudo[32317]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:20 localhost sshd[32332]: Invalid user dspace from 185.246.128.171 port 35459 Feb 20 02:46:21 localhost sshd[32332]: Disconnecting invalid user dspace 185.246.128.171 port 35459: Change of username or service not allowed: (dspace,ssh-connection) -> (user20,ssh-connection) [preauth] Feb 20 02:46:27 localhost sshd[32365]: Invalid user user20 from 185.246.128.171 port 60192 Feb 20 02:46:29 localhost sshd[32365]: Disconnecting invalid user user20 185.246.128.171 port 60192: Change of username or service not allowed: (user20,ssh-connection) -> (gang,ssh-connection) [preauth] Feb 20 02:46:32 localhost sudo[31617]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:33 localhost sudo[32939]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zjwugvtlrmhthewxoxijxaxfingaxcjo ; /usr/bin/python3 Feb 20 02:46:33 localhost sudo[32939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:34 localhost sudo[32939]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:35 localhost sudo[33078]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ztuvhajuygheqpfjueqqgyiahohtuspu ; /usr/bin/python3 Feb 20 02:46:35 localhost sudo[33078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:35 localhost sshd[32924]: Invalid user gang from 185.246.128.171 port 49386 Feb 20 02:46:35 localhost sshd[32924]: Disconnecting invalid user gang 185.246.128.171 port 49386: Change of username or service not allowed: (gang,ssh-connection) -> (sys,ssh-connection) [preauth] Feb 20 02:46:36 localhost sudo[33078]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:36 localhost sudo[33134]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pvvypfbayclkuvtyxmyhazgxccpeiqdx ; /usr/bin/python3 Feb 20 02:46:36 localhost sudo[33134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:37 localhost sudo[33134]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:37 localhost sudo[33150]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ramvtjqpcutktageotklpmvjpkmfmvdy ; /usr/bin/python3 Feb 20 02:46:37 localhost sudo[33150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:37 localhost sudo[33150]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:37 localhost sudo[33167]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fdlpjguuiibgvmsxeonzvwklkxzgjnpc ; /usr/bin/python3 Feb 20 02:46:37 localhost sudo[33167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:38 localhost sudo[33167]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:38 localhost sudo[33185]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdpqactffgngfnmkxnhrlzksoqjklkwb ; /usr/bin/python3 Feb 20 02:46:38 localhost sudo[33185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:38 localhost sshd[33082]: Invalid user sys from 185.246.128.171 port 7174 Feb 20 02:46:38 localhost sudo[33185]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:39 localhost sudo[33203]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pukuycwmeinxrrtojpdgtbozqvfhbcke ; /usr/bin/python3 Feb 20 02:46:39 localhost sudo[33203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:39 localhost sudo[33203]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:39 localhost sudo[33221]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rnkgwxxqhcjhnfdggettkbkbkukqdqxi ; /usr/bin/python3 Feb 20 02:46:39 localhost sudo[33221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:39 localhost sshd[33082]: Disconnecting invalid user sys 185.246.128.171 port 7174: Change of username or service not allowed: (sys,ssh-connection) -> (siapbot,ssh-connection) [preauth] Feb 20 02:46:39 localhost sudo[33221]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:40 localhost sudo[33240]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sissvllacppoqpanqlcihbbecssipspd ; /usr/bin/python3 Feb 20 02:46:40 localhost sudo[33240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:40 localhost sudo[33240]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:40 localhost sudo[33257]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qlmrornxapkotsxfhxcifsfsweqitdgc ; /usr/bin/python3 Feb 20 02:46:40 localhost sudo[33257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:40 localhost sudo[33257]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:40 localhost sudo[33275]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dnrlwcfxdlqctlxagtmblbgwjktgxhlo ; /usr/bin/python3 Feb 20 02:46:40 localhost sudo[33275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:41 localhost sudo[33275]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:41 localhost sudo[33292]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ybetculkqczznwbnsrvnxaddfxhcibcm ; /usr/bin/python3 Feb 20 02:46:41 localhost sudo[33292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:41 localhost sudo[33292]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:42 localhost sudo[33309]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agjrufyurrgkevdnwxgxrohllfuygdwb ; /usr/bin/python3 Feb 20 02:46:42 localhost sudo[33309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:42 localhost sudo[33309]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:42 localhost sudo[33325]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wiaexkdmmznqdxtnavfcqlhhtublykup ; /usr/bin/python3 Feb 20 02:46:42 localhost sudo[33325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:42 localhost sudo[33325]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:43 localhost sudo[33341]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qncqhiybcqfmbldtliduagakhrolxjwq ; /usr/bin/python3 Feb 20 02:46:43 localhost sudo[33341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:43 localhost sudo[33341]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:43 localhost sudo[33357]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rkgeysndbhezgcatwicisiwydpwgupoz ; /usr/bin/python3 Feb 20 02:46:43 localhost sudo[33357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:43 localhost sudo[33357]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:44 localhost sudo[33375]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdwaiolhrgqwlpdzeqinizipmyzqogbn ; /usr/bin/python3 Feb 20 02:46:44 localhost sudo[33375]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:44 localhost sudo[33375]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:44 localhost sudo[33391]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgljgsznokzmdrxgenmmntexqlvhtmbv ; /usr/bin/python3 Feb 20 02:46:44 localhost sudo[33391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:45 localhost sudo[33391]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:45 localhost sudo[33407]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wbguoxgqmfvdcsadinzagguwnvmhjgak ; /usr/bin/python3 Feb 20 02:46:45 localhost sudo[33407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:45 localhost sudo[33407]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:45 localhost sudo[33425]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qfdxzcqdnbmbfvbwmdiplxdqbxrhnnhq ; /usr/bin/python3 Feb 20 02:46:45 localhost sudo[33425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:45 localhost sudo[33425]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:46 localhost sudo[33444]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bskmubfufxdkcndhrreaeadygypttfyv ; /usr/bin/python3 Feb 20 02:46:46 localhost sudo[33444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:46 localhost sudo[33444]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:46 localhost sudo[33460]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oacyjsclqqshwnjaheggdxmzcaonjwvf ; /usr/bin/python3 Feb 20 02:46:46 localhost sudo[33460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:46 localhost sudo[33460]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:46 localhost sshd[33286]: Invalid user siapbot from 185.246.128.171 port 36002 Feb 20 02:46:46 localhost sshd[33286]: Disconnecting invalid user siapbot 185.246.128.171 port 36002: Change of username or service not allowed: (siapbot,ssh-connection) -> (sync,ssh-connection) [preauth] Feb 20 02:46:46 localhost sudo[33508]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkwluekqvafzbysneyprsmghyafwtvxp ; /usr/bin/python3 Feb 20 02:46:46 localhost sudo[33508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:47 localhost sudo[33508]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:47 localhost sudo[33551]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-florkxuhqglqdjsqshiascwpxmvfkovm ; /usr/bin/python3 Feb 20 02:46:47 localhost sudo[33551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:47 localhost sudo[33551]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:48 localhost sudo[33581]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkdkvlhwkdazvymoyahxuoxwizcywaro ; /usr/bin/python3 Feb 20 02:46:48 localhost sudo[33581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:48 localhost sudo[33581]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:48 localhost sudo[33598]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sqccsplmxfpmltihpqlyuoxskuaoiefu ; /usr/bin/python3 Feb 20 02:46:48 localhost sudo[33598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:52 localhost sshd[33608]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:46:52 localhost sshd[33617]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:46:55 localhost sshd[33602]: Disconnecting authenticating user sync 185.246.128.171 port 14490: Change of username or service not allowed: (sync,ssh-connection) -> (p,ssh-connection) [preauth] Feb 20 02:46:55 localhost sudo[33598]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:55 localhost sudo[34042]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxmtyinuxtndnhgaokhncmlkgkgsfaha ; /usr/bin/python3 Feb 20 02:46:55 localhost sudo[34042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:58 localhost sudo[34042]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:58 localhost sudo[34238]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-artzrpypihdcihiwctluktxhdhwnsezs ; PATH=/bin:/usr/bin:/sbin:/usr/sbin /usr/bin/python3 Feb 20 02:46:58 localhost sudo[34238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:58 localhost sudo[34238]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:58 localhost sudo[34256]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bfplhhsfbmkjatdxckpajszenitkzits ; /usr/bin/python3 Feb 20 02:46:58 localhost sudo[34256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:59 localhost sudo[34256]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:59 localhost sudo[34272]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oztgprkxvbmqyvtyfygydwbyrwntdkcw ; /usr/bin/python3 Feb 20 02:46:59 localhost sudo[34272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:46:59 localhost sudo[34272]: pam_unix(sudo:session): session closed for user root Feb 20 02:46:59 localhost sudo[34288]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmpkojmebbvkvzfacqbuztwdnikgvrbv ; PATH=/bin:/usr/bin:/sbin:/usr/sbin /usr/bin/python3 Feb 20 02:46:59 localhost sudo[34288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:00 localhost sshd[34221]: Invalid user p from 185.246.128.171 port 58783 Feb 20 02:47:01 localhost sudo[34288]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:01 localhost sshd[34221]: Disconnecting invalid user p 185.246.128.171 port 58783: Change of username or service not allowed: (p,ssh-connection) -> (omsagent,ssh-connection) [preauth] Feb 20 02:47:01 localhost sudo[34310]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bvdbdwyrfxkpicsmzricbzxumuovfmcg ; /usr/bin/python3 Feb 20 02:47:01 localhost sudo[34310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:01 localhost sudo[34310]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:01 localhost sudo[34328]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ozfpzcytspmouuznqcnnotbkukrmsxwi ; /usr/bin/python3 Feb 20 02:47:01 localhost sudo[34328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:01 localhost sudo[34328]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:03 localhost sshd[34314]: Invalid user omsagent from 185.246.128.171 port 16667 Feb 20 02:47:03 localhost sudo[34347]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ppxbgorougcoikdaoswamyuungrswxkb ; /usr/bin/python3 Feb 20 02:47:03 localhost sudo[34347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:04 localhost sshd[34332]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:47:04 localhost sudo[34347]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:04 localhost sshd[34314]: Disconnecting invalid user omsagent 185.246.128.171 port 16667: Change of username or service not allowed: (omsagent,ssh-connection) -> (www-data,ssh-connection) [preauth] Feb 20 02:47:09 localhost sudo[34365]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cofxizysssejsijexohfcucxslssspuk ; /usr/bin/python3 Feb 20 02:47:09 localhost sudo[34365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:09 localhost sudo[34365]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:09 localhost sshd[34350]: Invalid user www-data from 185.246.128.171 port 43382 Feb 20 02:47:09 localhost sudo[34413]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-swxbffadhpvtrfjsvmppifmaxizczqoj ; /usr/bin/python3 Feb 20 02:47:09 localhost sudo[34413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:09 localhost sudo[34413]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:09 localhost sudo[34458]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nawbwsblhwbtiehojfjbrcsnkxfgltyd ; /usr/bin/python3 Feb 20 02:47:09 localhost sudo[34458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:10 localhost sudo[34458]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:10 localhost sudo[34489]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qedgymvlfmbuvhgjxifrigkmjrdkvvha ; /usr/bin/python3 Feb 20 02:47:10 localhost sudo[34489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:10 localhost sudo[34489]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:10 localhost sshd[34350]: Disconnecting invalid user www-data 185.246.128.171 port 43382: Change of username or service not allowed: (www-data,ssh-connection) -> (delegate,ssh-connection) [preauth] Feb 20 02:47:11 localhost sudo[34539]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rzvxjkyshaubahlujmsdozswmresuscj ; /usr/bin/python3 Feb 20 02:47:11 localhost sudo[34539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:11 localhost sudo[34539]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:11 localhost sudo[34582]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-korobnbkreahtvmnydvhozrmaxkirvet ; /usr/bin/python3 Feb 20 02:47:11 localhost sudo[34582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:11 localhost sudo[34582]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:12 localhost sudo[34644]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdwzhglmgnckpxxsodlfhkcvwsrzdmng ; /usr/bin/python3 Feb 20 02:47:12 localhost sudo[34644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:12 localhost sudo[34644]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:12 localhost sudo[34687]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xjvimlkhzhsefaovkuvuvtatcmiitqag ; /usr/bin/python3 Feb 20 02:47:12 localhost sudo[34687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:12 localhost sudo[34687]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:12 localhost sudo[34749]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wpmogewzcbpxeqqzeqszbfwjzsbqzpou ; /usr/bin/python3 Feb 20 02:47:12 localhost sshd[34519]: Invalid user delegate from 185.246.128.171 port 3447 Feb 20 02:47:12 localhost sudo[34749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:13 localhost sudo[34749]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:13 localhost sshd[34519]: Disconnecting invalid user delegate 185.246.128.171 port 3447: Change of username or service not allowed: (delegate,ssh-connection) -> (nobody,ssh-connection) [preauth] Feb 20 02:47:13 localhost sudo[34792]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lqviymmbvyawrujhjqaqjcsamfrubpja ; /usr/bin/python3 Feb 20 02:47:13 localhost sudo[34792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:13 localhost sudo[34792]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:13 localhost sudo[34854]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyaonjznzxrroruimygtdebwbqlsvnzo ; /usr/bin/python3 Feb 20 02:47:13 localhost sudo[34854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:14 localhost sudo[34854]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:14 localhost sudo[34897]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rymzyqyynonmqpxxjxsvthrjstqqvvqg ; /usr/bin/python3 Feb 20 02:47:14 localhost sudo[34897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:14 localhost sudo[34897]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:14 localhost sudo[34960]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ytevjsmtkbnaojrmfqzqfxxjiwkpfoql ; /usr/bin/python3 Feb 20 02:47:14 localhost sudo[34960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:14 localhost sudo[34960]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:15 localhost sudo[35003]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dciaepfqnmfzmdtoqhwswpympuhnvlrk ; /usr/bin/python3 Feb 20 02:47:15 localhost sudo[35003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:15 localhost sudo[35003]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:15 localhost sudo[35066]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqufnfnzybolcfvjpfhbvgkhwnosgxhd ; /usr/bin/python3 Feb 20 02:47:15 localhost sudo[35066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:15 localhost sudo[35066]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:16 localhost sudo[35109]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mbpreyybhtopwpjwjnvxngpjcxbnzbmq ; /usr/bin/python3 Feb 20 02:47:16 localhost sudo[35109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:16 localhost sudo[35109]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:16 localhost sudo[35171]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnrpyrhheczgzrqfqygnixphjmxmxpeh ; /usr/bin/python3 Feb 20 02:47:16 localhost sudo[35171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:16 localhost sudo[35171]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:16 localhost sudo[35214]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dixzintpkmysvtbvyblckikzkqsbeyhz ; /usr/bin/python3 Feb 20 02:47:16 localhost sudo[35214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:17 localhost sudo[35214]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:17 localhost sudo[35276]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mrvxminovhwwcswbeueqrasgiaboyeqw ; /usr/bin/python3 Feb 20 02:47:17 localhost sudo[35276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:17 localhost sudo[35279]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:47:17 localhost sudo[35279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:47:17 localhost sudo[35279]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:17 localhost sudo[35276]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:17 localhost sudo[35294]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:47:17 localhost sudo[35294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:47:17 localhost sudo[35349]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nhwsxdwjwvexrxmgpkpcvdmkrxdbefhc ; /usr/bin/python3 Feb 20 02:47:17 localhost sudo[35349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:17 localhost sudo[35349]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:18 localhost sudo[35429]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hckaeudjsriugdyeqmsljgnzqwscgpgo ; /usr/bin/python3 Feb 20 02:47:18 localhost sudo[35429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:18 localhost sudo[35294]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:18 localhost sudo[35429]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:18 localhost sudo[35484]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ykepakppncpuogiqigqpcazxhmwopyrf ; /usr/bin/python3 Feb 20 02:47:18 localhost sudo[35484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:18 localhost sudo[35487]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:47:18 localhost sudo[35487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:47:18 localhost sudo[35487]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:18 localhost sudo[35484]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:19 localhost sudo[35561]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jpucwyvwfmvihmfzjirideltikbjsbat ; /usr/bin/python3 Feb 20 02:47:19 localhost sudo[35561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:19 localhost sudo[35561]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:19 localhost sudo[35604]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-apycgbqcfnfgvwxhsfoenisakyoogkak ; /usr/bin/python3 Feb 20 02:47:19 localhost sudo[35604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:19 localhost sudo[35604]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:19 localhost sudo[35666]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tikcwvhrettsvzqxdusjxndoxeijcnmy ; /usr/bin/python3 Feb 20 02:47:19 localhost sudo[35666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:20 localhost sudo[35666]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:20 localhost sudo[35709]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nwxxkvvfxxjfvxrskhxwsawfsvwqsckf ; /usr/bin/python3 Feb 20 02:47:20 localhost sudo[35709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:20 localhost sudo[35709]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:21 localhost sudo[35739]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rdtvvuwffbhmmqatfhvnobaojgmpburp ; /usr/bin/python3 Feb 20 02:47:21 localhost sudo[35739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:21 localhost sudo[35739]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:21 localhost sudo[35787]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gafsqvvyjvmakphhephogylesztmhugt ; /usr/bin/python3 Feb 20 02:47:21 localhost sudo[35787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:21 localhost sshd[34900]: Disconnecting authenticating user nobody 185.246.128.171 port 20192: Change of username or service not allowed: (nobody,ssh-connection) -> (,ssh-connection) [preauth] Feb 20 02:47:22 localhost sudo[35787]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:22 localhost sudo[35830]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mhhlvafcbvswsdkbuvhbzwzqcdfdjvqv ; /usr/bin/python3 Feb 20 02:47:22 localhost sudo[35830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:22 localhost sudo[35830]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:26 localhost sudo[35862]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrtpwiwbqtlyjrzebriwuqncqyihgzbk ; /usr/bin/python3 Feb 20 02:47:26 localhost sudo[35862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:27 localhost sshd[35847]: Invalid user from 185.246.128.171 port 5976 Feb 20 02:47:27 localhost sudo[35862]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:27 localhost sudo[35923]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chxwymjdosikdgjnjegjwslbvultihtv ; /usr/bin/python3 Feb 20 02:47:27 localhost sudo[35923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:29 localhost sshd[35847]: Disconnecting invalid user 185.246.128.171 port 5976: Change of username or service not allowed: (,ssh-connection) -> (vr,ssh-connection) [preauth] Feb 20 02:47:31 localhost sudo[35923]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:31 localhost sudo[35942]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bscfhetxqqjuwvcbxfjhzcntmneokjdh ; /usr/bin/python3 Feb 20 02:47:31 localhost sudo[35942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:34 localhost sshd[35927]: Invalid user vr from 185.246.128.171 port 39053 Feb 20 02:47:35 localhost sudo[35942]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:36 localhost sshd[35927]: Disconnecting invalid user vr 185.246.128.171 port 39053: Change of username or service not allowed: (vr,ssh-connection) -> (kafka,ssh-connection) [preauth] Feb 20 02:47:36 localhost sudo[35959]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rekypjdeonfyakjhnkamovxgggplgnkp ; /usr/bin/python3 Feb 20 02:47:36 localhost sudo[35959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:37 localhost sudo[35959]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:37 localhost sudo[35982]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rtbipecxjeliksmrhrvganvisbowdysh ; /usr/bin/python3 Feb 20 02:47:37 localhost sudo[35982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:40 localhost sshd[35986]: Invalid user kafka from 185.246.128.171 port 9969 Feb 20 02:47:41 localhost sshd[35986]: Disconnecting invalid user kafka 185.246.128.171 port 9969: Change of username or service not allowed: (kafka,ssh-connection) -> (redmine,ssh-connection) [preauth] Feb 20 02:47:41 localhost sudo[35982]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:41 localhost sudo[36003]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-honykqoffotbyaegucqsbezidmfxqfeh ; /usr/bin/python3 Feb 20 02:47:41 localhost sudo[36003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:42 localhost sshd[35988]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:47:42 localhost sudo[36003]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:42 localhost sudo[36028]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wtcookowevqulkoghvwshbruerkmxvss ; /usr/bin/python3 Feb 20 02:47:42 localhost sudo[36028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:45 localhost sshd[36006]: Invalid user redmine from 185.246.128.171 port 30072 Feb 20 02:47:46 localhost sshd[36032]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:47:46 localhost sudo[36028]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:47 localhost sshd[36006]: Disconnecting invalid user redmine 185.246.128.171 port 30072: Change of username or service not allowed: (redmine,ssh-connection) -> (netlink,ssh-connection) [preauth] Feb 20 02:47:47 localhost sudo[36047]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hbqenwuhaubsmdvgbcknjmbgucvlhzay ; /usr/bin/python3 Feb 20 02:47:47 localhost sudo[36047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:50 localhost sshd[36051]: Invalid user netlink from 185.246.128.171 port 63204 Feb 20 02:47:51 localhost sudo[36047]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:51 localhost sshd[36051]: Disconnecting invalid user netlink 185.246.128.171 port 63204: Change of username or service not allowed: (netlink,ssh-connection) -> (admin2,ssh-connection) [preauth] Feb 20 02:47:51 localhost sudo[36066]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-svxnxuirfdnklgyyucorhskovkpmrund ; /usr/bin/python3 Feb 20 02:47:51 localhost sudo[36066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:51 localhost sudo[36066]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:52 localhost sudo[36089]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qlsrroxlcluavgerddyzsapagbxelaoz ; /usr/bin/python3 Feb 20 02:47:52 localhost sudo[36089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:56 localhost sudo[36089]: pam_unix(sudo:session): session closed for user root Feb 20 02:47:56 localhost sudo[36108]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xwihgugaubxhdrfzpsxwvuoaxytnaxqe ; /usr/bin/python3 Feb 20 02:47:56 localhost sudo[36108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:47:56 localhost sshd[36093]: Invalid user admin2 from 185.246.128.171 port 21647 Feb 20 02:47:57 localhost sshd[36093]: Disconnecting invalid user admin2 185.246.128.171 port 21647: Change of username or service not allowed: (admin2,ssh-connection) -> (steven,ssh-connection) [preauth] Feb 20 02:48:00 localhost sshd[36112]: Invalid user steven from 185.246.128.171 port 45434 Feb 20 02:48:00 localhost sshd[36112]: Disconnecting invalid user steven 185.246.128.171 port 45434: Change of username or service not allowed: (steven,ssh-connection) -> (instrument,ssh-connection) [preauth] Feb 20 02:48:00 localhost sudo[36108]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:01 localhost sudo[36127]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ptlxearbunbttrlvsiuivhosgpsvthpn ; /usr/bin/python3 Feb 20 02:48:01 localhost sudo[36127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:01 localhost sudo[36127]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:01 localhost sudo[36150]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbbtraprfsvsapdpilcqbtwphvjrgmbc ; /usr/bin/python3 Feb 20 02:48:01 localhost sudo[36150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:03 localhost sshd[36154]: Invalid user instrument from 185.246.128.171 port 61405 Feb 20 02:48:04 localhost sshd[36154]: Disconnecting invalid user instrument 185.246.128.171 port 61405: Change of username or service not allowed: (instrument,ssh-connection) -> (kubelet,ssh-connection) [preauth] Feb 20 02:48:05 localhost sudo[36150]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:06 localhost sudo[36171]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ysevhygsmunxuxfilvfydjnhmrfcgsxn ; /usr/bin/python3 Feb 20 02:48:06 localhost sudo[36171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:09 localhost sshd[36156]: Invalid user kubelet from 185.246.128.171 port 14966 Feb 20 02:48:10 localhost sudo[36171]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:10 localhost sudo[36188]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bheeasccyyymetzikeszoruxzhkiuzdj ; /usr/bin/python3 Feb 20 02:48:10 localhost sudo[36188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:10 localhost sudo[36188]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:11 localhost sudo[36211]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-czvzhmteuovorsycancczddkrmfofaop ; /usr/bin/python3 Feb 20 02:48:11 localhost sudo[36211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:11 localhost sshd[36156]: Disconnecting invalid user kubelet 185.246.128.171 port 14966: Change of username or service not allowed: (kubelet,ssh-connection) -> (tunnel,ssh-connection) [preauth] Feb 20 02:48:13 localhost sshd[36215]: Invalid user tunnel from 185.246.128.171 port 48857 Feb 20 02:48:13 localhost sshd[36215]: Disconnecting invalid user tunnel 185.246.128.171 port 48857: Change of username or service not allowed: (tunnel,ssh-connection) -> (User,ssh-connection) [preauth] Feb 20 02:48:14 localhost sshd[36217]: Invalid user User from 185.246.128.171 port 56069 Feb 20 02:48:15 localhost sshd[36217]: Disconnecting invalid user User 185.246.128.171 port 56069: Change of username or service not allowed: (User,ssh-connection) -> (Matthew,ssh-connection) [preauth] Feb 20 02:48:15 localhost sudo[36211]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:15 localhost sudo[36232]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdovavlkyismbmaltmsqoufmnkeugzbb ; /usr/bin/python3 Feb 20 02:48:15 localhost sudo[36232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:17 localhost sshd[36236]: Invalid user Matthew from 185.246.128.171 port 2850 Feb 20 02:48:17 localhost sshd[36236]: Disconnecting invalid user Matthew 185.246.128.171 port 2850: Change of username or service not allowed: (Matthew,ssh-connection) -> (portal,ssh-connection) [preauth] Feb 20 02:48:19 localhost sudo[36239]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:48:19 localhost sudo[36239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:48:19 localhost sudo[36239]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:19 localhost sudo[36254]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:48:19 localhost sudo[36254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:48:19 localhost sudo[36254]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:19 localhost sudo[36232]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:21 localhost sudo[36315]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihtkbzefqxzxlnxrssdapbvsqleovqnv ; /usr/bin/python3 Feb 20 02:48:21 localhost sudo[36315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:21 localhost sudo[36315]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:21 localhost sudo[36363]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-etbzqcqlpnbrxjwutemykpqqbkzraznw ; /usr/bin/python3 Feb 20 02:48:21 localhost sudo[36363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:21 localhost sudo[36363]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:21 localhost sudo[36381]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cunzvlsacjjwsbdphlmpsvpkppcmzwip ; /usr/bin/python3 Feb 20 02:48:21 localhost sudo[36381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:21 localhost sudo[36384]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:48:21 localhost sudo[36384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:48:21 localhost sudo[36384]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:21 localhost sudo[36381]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:22 localhost sudo[36426]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-soeaajtvvcehtvfutwdinqbhtrhidwgr ; /usr/bin/python3 Feb 20 02:48:22 localhost sudo[36426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:22 localhost sudo[36426]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:22 localhost sshd[36238]: Invalid user portal from 185.246.128.171 port 18504 Feb 20 02:48:22 localhost sudo[36474]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dezteyvqvlheeiveebyjvcatgusxspvh ; /usr/bin/python3 Feb 20 02:48:22 localhost sudo[36474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:23 localhost sudo[36474]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:23 localhost sudo[36492]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xtkfkcxuwusvwokpsfvzvpmhcgvascsz ; /usr/bin/python3 Feb 20 02:48:23 localhost sudo[36492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:23 localhost sudo[36492]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:23 localhost sudo[36554]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffqeeypubajeresxbbwqnqcgolfqmruw ; /usr/bin/python3 Feb 20 02:48:23 localhost sudo[36554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:23 localhost sudo[36554]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:23 localhost sudo[36572]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rftnvelmjnfrztrcsnllslsoxlpillui ; /usr/bin/python3 Feb 20 02:48:23 localhost sudo[36572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:24 localhost sshd[36238]: Disconnecting invalid user portal 185.246.128.171 port 18504: Change of username or service not allowed: (portal,ssh-connection) -> (nodemanager,ssh-connection) [preauth] Feb 20 02:48:24 localhost sudo[36572]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:24 localhost sudo[36634]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tuxjglxtrotjdwftvxpahoffadthwwxn ; /usr/bin/python3 Feb 20 02:48:24 localhost sudo[36634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:24 localhost sudo[36634]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:24 localhost sudo[36652]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qrknjuakxzeqwwamxhzvzhcgvqvgglvm ; /usr/bin/python3 Feb 20 02:48:24 localhost sudo[36652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:24 localhost sudo[36652]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:25 localhost sudo[36714]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxzrjvnagbkplxuhradvarojcrcesqol ; /usr/bin/python3 Feb 20 02:48:25 localhost sudo[36714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:25 localhost sudo[36714]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:25 localhost sudo[36732]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ectljrrppsxfbjtdutmepoesztpkkedp ; /usr/bin/python3 Feb 20 02:48:25 localhost sudo[36732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:25 localhost sudo[36732]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:26 localhost sudo[36794]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yramdvnicnsrqtyuidhjvmnkjttkhbcp ; /usr/bin/python3 Feb 20 02:48:26 localhost sudo[36794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:26 localhost sudo[36794]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:26 localhost sudo[36814]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dtvfgqajxgsgufifrgjzuvnszekbstfg ; /usr/bin/python3 Feb 20 02:48:26 localhost sudo[36814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:26 localhost sudo[36814]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:26 localhost sudo[36876]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fdwkronzektalblvtggryblyupigphez ; /usr/bin/python3 Feb 20 02:48:26 localhost sudo[36876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:27 localhost sudo[36876]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:27 localhost sudo[36894]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-blvlqghvzlxqxqscuoquyxabsyiozicn ; /usr/bin/python3 Feb 20 02:48:27 localhost sudo[36894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:27 localhost sudo[36894]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:27 localhost sshd[36797]: Invalid user nodemanager from 185.246.128.171 port 54525 Feb 20 02:48:27 localhost sudo[36956]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jnyrjbzeujrmryjxauzzcacjdngxjmci ; /usr/bin/python3 Feb 20 02:48:27 localhost sudo[36956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:27 localhost sshd[36797]: Disconnecting invalid user nodemanager 185.246.128.171 port 54525: Change of username or service not allowed: (nodemanager,ssh-connection) -> (john,ssh-connection) [preauth] Feb 20 02:48:27 localhost sudo[36956]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:27 localhost sudo[36975]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsddmcbconqseizfdkwssucbokzsspzv ; /usr/bin/python3 Feb 20 02:48:27 localhost sudo[36975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:27 localhost sudo[36975]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:28 localhost sudo[37038]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymhoxtwaxirlpypzmmfxmgsjdobqjhes ; /usr/bin/python3 Feb 20 02:48:28 localhost sudo[37038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:28 localhost sudo[37038]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:28 localhost sudo[37056]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ozqxkvzedqswxyafmithovlggzhemsle ; /usr/bin/python3 Feb 20 02:48:28 localhost sudo[37056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:28 localhost sudo[37056]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:29 localhost sshd[36974]: Invalid user john from 185.246.128.171 port 62593 Feb 20 02:48:29 localhost sudo[37118]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihzhkgrwnhvxmjwnltnptrqhgxkcsasl ; /usr/bin/python3 Feb 20 02:48:29 localhost sudo[37118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:29 localhost sudo[37118]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:29 localhost sudo[37136]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zwmlodkfmlzdlqylnqhrcjketcbocyim ; /usr/bin/python3 Feb 20 02:48:29 localhost sudo[37136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:29 localhost sshd[36974]: Disconnecting invalid user john 185.246.128.171 port 62593: Change of username or service not allowed: (john,ssh-connection) -> (utente,ssh-connection) [preauth] Feb 20 02:48:29 localhost sudo[37136]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:29 localhost sudo[37198]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jfbqqnuidgxtqeoltguycqyhbnkzwdwo ; /usr/bin/python3 Feb 20 02:48:29 localhost sudo[37198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:29 localhost sudo[37198]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:30 localhost sudo[37216]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rmsflpejnnpzkvfirlcvixoyolyifwiz ; /usr/bin/python3 Feb 20 02:48:30 localhost sudo[37216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:30 localhost sudo[37216]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:30 localhost sudo[37279]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aeqcdbfyzyctofmrttqghsxnhwflditc ; /usr/bin/python3 Feb 20 02:48:30 localhost sudo[37279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:30 localhost sudo[37279]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:30 localhost sudo[37298]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hgxrmcpabjgghqmaveswpyybtjgbgkcr ; /usr/bin/python3 Feb 20 02:48:30 localhost sudo[37298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:30 localhost sudo[37298]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:31 localhost sudo[37329]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbhlgavkaeoeauzwgoagremrmpzryaex ; /usr/bin/python3 Feb 20 02:48:31 localhost sudo[37329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:31 localhost sudo[37329]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:31 localhost sshd[37246]: Invalid user utente from 185.246.128.171 port 12125 Feb 20 02:48:31 localhost sshd[37328]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:48:31 localhost sudo[37378]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pzgtotouehqrhnzgetabibazsaxwcgmu ; /usr/bin/python3 Feb 20 02:48:31 localhost sudo[37378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:32 localhost sudo[37378]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:32 localhost sudo[37396]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hcfwwcvgmectpkjmnlbavtgyjixadorn ; /usr/bin/python3 Feb 20 02:48:32 localhost sudo[37396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:32 localhost sshd[37246]: Disconnecting invalid user utente 185.246.128.171 port 12125: Change of username or service not allowed: (utente,ssh-connection) -> (su,ssh-connection) [preauth] Feb 20 02:48:32 localhost sudo[37396]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:36 localhost sudo[37428]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yklnkckcqlnnyapffzbarsjhmqqoucza ; /usr/bin/python3 Feb 20 02:48:36 localhost sudo[37428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:38 localhost sshd[37413]: Invalid user su from 185.246.128.171 port 32187 Feb 20 02:48:38 localhost sudo[37428]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:39 localhost sshd[37413]: Disconnecting invalid user su 185.246.128.171 port 32187: Change of username or service not allowed: (su,ssh-connection) -> (deploy,ssh-connection) [preauth] Feb 20 02:48:40 localhost sudo[37445]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wfhblyflhasvnfrcphawifvchhqspllf ; /usr/bin/python3 Feb 20 02:48:40 localhost sudo[37445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:41 localhost sudo[37445]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:41 localhost sudo[37463]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gxspdyuevjmbhskaxlxdrgjiefqbnlqo ; /usr/bin/python3 Feb 20 02:48:41 localhost sudo[37463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:41 localhost sudo[37463]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:41 localhost sudo[37481]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ooredgjqylbxczxbdhqwkzkgjxdmplay ; /usr/bin/python3 Feb 20 02:48:41 localhost sudo[37481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:42 localhost sudo[37481]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:42 localhost sshd[37528]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:48:42 localhost sudo[37576]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmptsvhoeqwamttqgbzqvbbaiyltdefj ; /usr/bin/python3 Feb 20 02:48:42 localhost sudo[37576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:43 localhost sudo[37576]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:43 localhost sudo[37619]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzdqozrxcapiskkqgxligruztactqtxn ; /usr/bin/python3 Feb 20 02:48:43 localhost sudo[37619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:43 localhost sudo[37619]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:43 localhost sudo[37649]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-opvakrcjzhbknilgopqwxuzijbkflidt ; /usr/bin/python3 Feb 20 02:48:43 localhost sudo[37649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:43 localhost sudo[37649]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:44 localhost sudo[37667]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-udjmpsxxfzrqznktticzrofhsllwpkqc ; /usr/bin/python3 Feb 20 02:48:44 localhost sudo[37667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:44 localhost sudo[37667]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:44 localhost sudo[37716]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pznjyhrweqvobdoxjlnezbkxblujzjwk ; /usr/bin/python3 Feb 20 02:48:44 localhost sudo[37716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:45 localhost sudo[37716]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:45 localhost sudo[37759]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rhqrdooixefrcuyqqapxzebiehglvgyu ; /usr/bin/python3 Feb 20 02:48:45 localhost sudo[37759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:45 localhost sudo[37759]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:45 localhost sudo[37821]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qkkjrnkhfdnrlbtqkjapdzxmoubpbgib ; /usr/bin/python3 Feb 20 02:48:46 localhost sudo[37821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:46 localhost sudo[37821]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:46 localhost sudo[37864]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gdfilmsxzpzqkxmqxtlujngdsrzxjhwk ; /usr/bin/python3 Feb 20 02:48:46 localhost sudo[37864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:46 localhost sudo[37864]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:46 localhost sshd[37484]: Invalid user deploy from 185.246.128.171 port 3923 Feb 20 02:48:47 localhost sudo[37926]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vjaexnziigyjfpdkopgjnqrzupozcpyt ; /usr/bin/python3 Feb 20 02:48:47 localhost sudo[37926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:47 localhost sudo[37926]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:47 localhost sudo[37970]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cumvwcysfllxblsdquxsimezshgdsajy ; /usr/bin/python3 Feb 20 02:48:47 localhost sudo[37970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:47 localhost sudo[37970]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:47 localhost sudo[38033]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lgtvaorabdeadulkiusqhfiokoqxsbqj ; /usr/bin/python3 Feb 20 02:48:47 localhost sudo[38033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:48 localhost sudo[38033]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:48 localhost sshd[37929]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:48:48 localhost sudo[38076]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tmdrejmrkyisgstmxahielaqrxadtwsf ; /usr/bin/python3 Feb 20 02:48:48 localhost sudo[38076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:48 localhost sudo[38076]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:49 localhost sudo[38138]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tfbstrgfukqbnucvfwplipbaeuidlpsy ; /usr/bin/python3 Feb 20 02:48:49 localhost sudo[38138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:49 localhost sudo[38138]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:50 localhost sudo[38181]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-giotbrhpkdvvktshlknngnjlojxitmqc ; /usr/bin/python3 Feb 20 02:48:50 localhost sudo[38181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:50 localhost sudo[38181]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:50 localhost sshd[37484]: Disconnecting invalid user deploy 185.246.128.171 port 3923: Change of username or service not allowed: (deploy,ssh-connection) -> (sftp,ssh-connection) [preauth] Feb 20 02:48:50 localhost sudo[38211]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymcfwynetozvcagblnpvzbcgulsxnvxo ; /usr/bin/python3 Feb 20 02:48:50 localhost sudo[38211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:51 localhost sudo[38211]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:51 localhost sudo[38276]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vttkonpponatqqazduhvyotpvgmkowdw ; /usr/bin/python3 Feb 20 02:48:51 localhost sudo[38276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:51 localhost sudo[38276]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:51 localhost sudo[38293]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hwmolqoqybttwajxarxtlfurnasklwxy ; /usr/bin/python3 Feb 20 02:48:51 localhost sudo[38293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:51 localhost sudo[38293]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:52 localhost sudo[38310]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gvhytcknqlwfdfrgqpumgspvfvbythnu ; /usr/bin/python3 Feb 20 02:48:52 localhost sudo[38310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:52 localhost sudo[38310]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:52 localhost sudo[38330]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xpvthiersyfyshorksycaqogvjpqdtsl ; /usr/bin/python3 Feb 20 02:48:52 localhost sudo[38330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:52 localhost sudo[38330]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:52 localhost sudo[38346]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wuuwsjbpetcdgvyibjavmxihrotjxdah ; /usr/bin/python3 Feb 20 02:48:52 localhost sudo[38346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:52 localhost sudo[38346]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:53 localhost sudo[38363]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shjunqbybwaoutnvmgvkxcunixczemfu ; /usr/bin/python3 Feb 20 02:48:53 localhost sudo[38363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:53 localhost sudo[38363]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:53 localhost sudo[38379]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xfgebrnsnayumgoxlsbxobbezurayqrr ; /usr/bin/python3 Feb 20 02:48:53 localhost sudo[38379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:53 localhost sudo[38379]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:53 localhost sudo[38395]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-encnmihkimkfopbutozhgcxfdfacnamc ; /usr/bin/python3 Feb 20 02:48:53 localhost sudo[38395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:53 localhost sudo[38395]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:54 localhost sudo[38411]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tktcmmlkecleiipasnnazoczbnqyxbaq ; /usr/bin/python3 Feb 20 02:48:54 localhost sudo[38411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:54 localhost sudo[38411]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:54 localhost sudo[38427]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-epariyknhvfoxlcnypsxxctkvcyfkged ; /usr/bin/python3 Feb 20 02:48:54 localhost sudo[38427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:55 localhost sshd[38313]: Invalid user sftp from 185.246.128.171 port 55028 Feb 20 02:48:55 localhost sudo[38427]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:55 localhost sudo[38447]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-myrfqjxjicczhtnambcvcibahgowhttl ; /usr/bin/python3 Feb 20 02:48:55 localhost sudo[38447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:55 localhost sudo[38447]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:55 localhost sudo[38463]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdfbnsfupiebebgrrvxkwvlnlqbklggi ; /usr/bin/python3 Feb 20 02:48:55 localhost sudo[38463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:55 localhost sudo[38463]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:56 localhost sudo[38479]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qbzjqfrdldkkwrjocmxqyolebflzrmww ; /usr/bin/python3 Feb 20 02:48:56 localhost sudo[38479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:57 localhost sshd[38313]: Disconnecting invalid user sftp 185.246.128.171 port 55028: Change of username or service not allowed: (sftp,ssh-connection) -> (t128,ssh-connection) [preauth] Feb 20 02:48:57 localhost sudo[38479]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:57 localhost sudo[38500]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fidqpvjpahmatdturlqmabxrscvgrdqj ; /usr/bin/python3 Feb 20 02:48:57 localhost sudo[38500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:57 localhost sudo[38500]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:57 localhost sudo[38516]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-behshbdrizifamjwinyadmqqzaujgmpl ; /usr/bin/python3 Feb 20 02:48:57 localhost sudo[38516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:57 localhost sudo[38516]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:58 localhost sudo[38532]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bvibfebllkwqdjqbilvhqeztxzrjlmbx ; /usr/bin/python3 Feb 20 02:48:58 localhost sudo[38532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:58 localhost sudo[38532]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:58 localhost sudo[38548]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-judsjbyfvteihskdbupdwkoqaudjhzwy ; /usr/bin/python3 Feb 20 02:48:58 localhost sudo[38548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:58 localhost sudo[38548]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:59 localhost sudo[38565]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ndgligqdxkyifrysdfedebhefmyfoplm ; /usr/bin/python3 Feb 20 02:48:59 localhost sudo[38565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:48:59 localhost sudo[38565]: pam_unix(sudo:session): session closed for user root Feb 20 02:48:59 localhost sudo[38582]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ogerximuikaidgvcdzpyhffiinffgeas ; /usr/bin/python3 Feb 20 02:48:59 localhost sudo[38582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:00 localhost sudo[38582]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:00 localhost sudo[38598]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-adhuhktgkwqryrsovbdyhmmjsdigtgdj ; /usr/bin/python3 Feb 20 02:49:00 localhost sudo[38598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:00 localhost sudo[38598]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:00 localhost sudo[38614]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vccyjyqblphznuaegarxdczvxqdzrwsv ; /usr/bin/python3 Feb 20 02:49:00 localhost sudo[38614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:00 localhost sudo[38614]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:01 localhost sudo[38630]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zzgwbtpkbbaeawwgvrzldiidbbrkdkxj ; /usr/bin/python3 Feb 20 02:49:01 localhost sudo[38630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:01 localhost sshd[38551]: Invalid user t128 from 185.246.128.171 port 27110 Feb 20 02:49:01 localhost sudo[38630]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:01 localhost sudo[38646]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djckxlsswgrglaerwzofbuplbpkpbgxp ; /usr/bin/python3 Feb 20 02:49:01 localhost sudo[38646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:01 localhost sudo[38646]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:02 localhost sudo[38662]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wlgucordpvfxzzfdzuyjsxfniwlnguht ; /usr/bin/python3 Feb 20 02:49:02 localhost sudo[38662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:02 localhost sshd[38551]: Disconnecting invalid user t128 185.246.128.171 port 27110: Change of username or service not allowed: (t128,ssh-connection) -> (terraform,ssh-connection) [preauth] Feb 20 02:49:02 localhost sudo[38662]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:02 localhost sudo[38678]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tyyrppsvvsuadlufjqbecutklnchjtsx ; /usr/bin/python3 Feb 20 02:49:02 localhost sudo[38678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:02 localhost sudo[38678]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:02 localhost sudo[38694]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-omxnzemevzzgouehiwghbtpiizsgjidu ; /usr/bin/python3 Feb 20 02:49:02 localhost sudo[38694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:02 localhost sudo[38694]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:03 localhost sudo[38710]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aasaivemrnxhnlrckqeezszzznuteosc ; /usr/bin/python3 Feb 20 02:49:03 localhost sudo[38710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:03 localhost sudo[38710]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:04 localhost sudo[38728]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tzazfnuiuhqnawsmlavctgpxzwmzfpjj ; /usr/bin/python3 Feb 20 02:49:04 localhost sudo[38728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:04 localhost sudo[38728]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:04 localhost sudo[38744]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oamupogvkmzlnuiohhesvzpiroygiong ; /usr/bin/python3 Feb 20 02:49:04 localhost sudo[38744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:05 localhost sudo[38744]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:05 localhost sudo[38760]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgocviyyphedgzfgjokleyqfiherszhe ; /usr/bin/python3 Feb 20 02:49:05 localhost sudo[38760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:05 localhost sshd[38713]: Invalid user terraform from 185.246.128.171 port 45558 Feb 20 02:49:06 localhost sshd[38713]: Disconnecting invalid user terraform 185.246.128.171 port 45558: Change of username or service not allowed: (terraform,ssh-connection) -> (frank,ssh-connection) [preauth] Feb 20 02:49:10 localhost sudo[38760]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:10 localhost sudo[38892]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ruyxmtqttyjbymprkrtxivcrfazpdodd ; /usr/bin/python3 Feb 20 02:49:10 localhost sudo[38892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:10 localhost sudo[38892]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:10 localhost sudo[38908]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmdzjymitghaynczoupsgugiojbqrnpq ; /usr/bin/python3 Feb 20 02:49:10 localhost sudo[38908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:11 localhost sudo[38908]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:11 localhost sudo[38924]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-twrxobuvszubunuyhxpizfhiicwoydko ; /usr/bin/python3 Feb 20 02:49:11 localhost sudo[38924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:11 localhost sudo[38924]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:11 localhost sshd[38781]: Invalid user frank from 185.246.128.171 port 1153 Feb 20 02:49:11 localhost sudo[38940]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wxmfdhuoxxehrafjavtknaglgmasosri ; /usr/bin/python3 Feb 20 02:49:11 localhost sudo[38940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:11 localhost sudo[38940]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:11 localhost sudo[38956]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hdypwssgvxhsabstogfsizqugbthogvh ; /usr/bin/python3 Feb 20 02:49:11 localhost sudo[38956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:12 localhost sudo[38956]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:12 localhost sshd[38781]: Disconnecting invalid user frank 185.246.128.171 port 1153: Change of username or service not allowed: (frank,ssh-connection) -> (josie,ssh-connection) [preauth] Feb 20 02:49:12 localhost sudo[38972]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-svndguepfplplpiguvtavagvkqieapgc ; /usr/bin/python3 Feb 20 02:49:12 localhost sudo[38972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:12 localhost sudo[38972]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:12 localhost sudo[38988]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qwspfzjpvudogrxkzmdjasmyvfwvlvxc ; /usr/bin/python3 Feb 20 02:49:12 localhost sudo[38988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:12 localhost sudo[38988]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:12 localhost sudo[39004]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-geeedlkrkgkctvflmgrwztjjugqiaxzz ; /usr/bin/python3 Feb 20 02:49:12 localhost sudo[39004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:13 localhost sudo[39004]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:13 localhost sudo[39020]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rswnyglqkbmbpitmedaxhwwwwbgmhixt ; /usr/bin/python3 Feb 20 02:49:13 localhost sudo[39020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:13 localhost sudo[39020]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:13 localhost sudo[39068]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ibefpyhjjpsasuwjmykfnmkghtmbdssu ; /usr/bin/python3 Feb 20 02:49:13 localhost sudo[39068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:13 localhost sudo[39068]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:13 localhost sudo[39112]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wslxtaowmkowwxlyuazuretpmcfbttdo ; /usr/bin/python3 Feb 20 02:49:13 localhost sudo[39112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:14 localhost sudo[39112]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:14 localhost sudo[39143]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kwhbvomfbptxbnizsoqvyiznttpzjqix ; /usr/bin/python3 Feb 20 02:49:14 localhost sudo[39143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:15 localhost sudo[39143]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:15 localhost sudo[39350]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lledqmabchiqbohgyprsapbnxwmsrezt ; /usr/bin/python3 Feb 20 02:49:15 localhost sudo[39350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:15 localhost sshd[39071]: Invalid user josie from 185.246.128.171 port 34486 Feb 20 02:49:16 localhost sshd[39071]: Disconnecting invalid user josie 185.246.128.171 port 34486: Change of username or service not allowed: (josie,ssh-connection) -> (minh,ssh-connection) [preauth] Feb 20 02:49:16 localhost sudo[39350]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:16 localhost sudo[39371]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvfmwzbklcyjxkctdvpspiazrqvkpmbl ; /usr/bin/python3 Feb 20 02:49:16 localhost sudo[39371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:18 localhost sudo[39371]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:18 localhost sudo[39394]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xgtpglxnkchvvzyacecvgknptvxomscm ; /usr/bin/python3 Feb 20 02:49:18 localhost sudo[39394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:18 localhost sudo[39394]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:18 localhost sudo[39410]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uquogjdclrhtldkmwulqwiripyiunfvg ; /usr/bin/python3 Feb 20 02:49:18 localhost sudo[39410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:18 localhost sudo[39410]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:18 localhost sudo[39427]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-guvkixuujipbdhuuxacekjtheupiiwaj ; /usr/bin/python3 Feb 20 02:49:18 localhost sudo[39427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:18 localhost sshd[39413]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:49:18 localhost sudo[39427]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:19 localhost sudo[39444]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-blonehapfykzbidfvvyaflvcpdlugcgb ; /usr/bin/python3 Feb 20 02:49:19 localhost sudo[39444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:19 localhost sudo[39444]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:19 localhost sudo[39460]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ursusemtpfpcynkjqyrokoujdyexrffb ; /usr/bin/python3 Feb 20 02:49:19 localhost sudo[39460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:19 localhost sshd[39379]: Invalid user minh from 185.246.128.171 port 56913 Feb 20 02:49:19 localhost sudo[39460]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:20 localhost sudo[39477]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ncejedrgcarybbefugoqvkgywtsybjnk ; /usr/bin/python3 Feb 20 02:49:20 localhost sudo[39477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:20 localhost sshd[39379]: Disconnecting invalid user minh 185.246.128.171 port 56913: Change of username or service not allowed: (minh,ssh-connection) -> (RPM,ssh-connection) [preauth] Feb 20 02:49:22 localhost sudo[39482]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:49:22 localhost sudo[39482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:49:22 localhost sudo[39482]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:22 localhost sudo[39497]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 02:49:22 localhost sudo[39497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:49:22 localhost sudo[39497]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:22 localhost sudo[39533]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:49:22 localhost sudo[39533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:49:23 localhost sudo[39533]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:23 localhost sudo[39548]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:49:23 localhost sudo[39548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:49:23 localhost sudo[39548]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:24 localhost sudo[39595]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:49:24 localhost sudo[39595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:49:24 localhost sudo[39595]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:24 localhost sudo[39477]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:24 localhost sudo[39623]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zwvhfsughjlzrcovykptnpsqvxnkwukl ; /usr/bin/python3 Feb 20 02:49:24 localhost sudo[39623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:24 localhost sudo[39623]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:24 localhost sudo[39671]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-szdyjtcvvxtijkgyhdmrcjmlganpuzue ; /usr/bin/python3 Feb 20 02:49:24 localhost sudo[39671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:24 localhost sudo[39671]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:25 localhost sudo[39714]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-okuematpfxekbqystwuabdyaqtyyaskk ; /usr/bin/python3 Feb 20 02:49:25 localhost sudo[39714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:25 localhost sudo[39714]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:26 localhost sudo[39744]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rtwccoqxgoxagsumcscmgjalkscuuhlh ; /usr/bin/python3 Feb 20 02:49:26 localhost sudo[39744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:26 localhost sshd[39481]: Invalid user RPM from 185.246.128.171 port 11147 Feb 20 02:49:26 localhost sudo[39744]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:26 localhost sshd[39481]: Disconnecting invalid user RPM 185.246.128.171 port 11147: Change of username or service not allowed: (RPM,ssh-connection) -> (temp,ssh-connection) [preauth] Feb 20 02:49:26 localhost sudo[39798]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eaifuljrwqmhxoapuvwimhcsvigruavd ; /usr/bin/python3 Feb 20 02:49:26 localhost sudo[39798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:26 localhost sudo[39798]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:27 localhost sudo[39841]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-svlonzgrqwfoinofvjcxxbzflkitkyaa ; /usr/bin/python3 Feb 20 02:49:27 localhost sudo[39841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:27 localhost sudo[39841]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:27 localhost sudo[39872]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-csbcjcrmsxdgdcgryvdltrycojphqgah ; /usr/bin/python3 Feb 20 02:49:27 localhost sudo[39872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:27 localhost sudo[39872]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:27 localhost sudo[39890]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-singjqdbczsflajnvifwpdwkecpiucjx ; /usr/bin/python3 Feb 20 02:49:27 localhost sudo[39890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:28 localhost sudo[39890]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:28 localhost sudo[39909]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzwiakqzdzmzzzaykxjakdbyzowrzvvd ; /usr/bin/python3 Feb 20 02:49:28 localhost sudo[39909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:28 localhost sudo[39909]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:28 localhost sudo[39926]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymlyezhzpztreyhtvamzamvjcuqqyvtt ; /usr/bin/python3 Feb 20 02:49:28 localhost sudo[39926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:28 localhost sudo[39926]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:28 localhost sudo[39943]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmozfakqlhzlokldyqboknpohidpzpre ; /usr/bin/python3 Feb 20 02:49:28 localhost sudo[39943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:28 localhost sudo[39943]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:29 localhost sudo[39960]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iaeritrofuotbutsprnaqhmdlhdzxsgp ; /usr/bin/python3 Feb 20 02:49:29 localhost sudo[39960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:29 localhost sudo[39960]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:29 localhost sshd[39858]: Invalid user temp from 185.246.128.171 port 39963 Feb 20 02:49:29 localhost sudo[39978]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mrfiwodnsmrttmskprbagevvfnqxjiql ; /usr/bin/python3 Feb 20 02:49:29 localhost sudo[39978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:29 localhost sudo[39978]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:29 localhost sudo[39996]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kjhuptjjawsosiukjxzksnbbjvrkdkal ; /usr/bin/python3 Feb 20 02:49:29 localhost sudo[39996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:29 localhost sudo[39996]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:30 localhost sudo[40014]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qxekpshwlnkynddkmcnzrbkdbuaqbjcv ; /usr/bin/python3 Feb 20 02:49:30 localhost sudo[40014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:30 localhost sudo[40014]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:30 localhost sudo[40032]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mtqqgwolmrowmglnqvoqbedzdkaudvoo ; /usr/bin/python3 Feb 20 02:49:30 localhost sudo[40032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:30 localhost sudo[40032]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:30 localhost sudo[40050]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ncbriabacrmruefsvmadoaophgndtvod ; /usr/bin/python3 Feb 20 02:49:30 localhost sudo[40050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:30 localhost sudo[40050]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:30 localhost sudo[40068]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qevkrzmdubotvkxhqxhumwsmiaxcxesv ; /usr/bin/python3 Feb 20 02:49:30 localhost sudo[40068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:31 localhost sudo[40068]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:31 localhost sudo[40086]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lhffmaqwizqseiyjanlbtcjjuroqeymh ; /usr/bin/python3 Feb 20 02:49:31 localhost sudo[40086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:31 localhost sshd[39858]: Disconnecting invalid user temp 185.246.128.171 port 39963: Change of username or service not allowed: (temp,ssh-connection) -> (solr,ssh-connection) [preauth] Feb 20 02:49:31 localhost sudo[40086]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:31 localhost sudo[40103]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hvmjkrmuesvtdlzyqfhkfujtqukmoqri ; /usr/bin/python3 Feb 20 02:49:31 localhost sudo[40103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:31 localhost sudo[40103]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:31 localhost sudo[40120]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxlljcuzasjwvxfsacsgfigxcvyyeodj ; /usr/bin/python3 Feb 20 02:49:31 localhost sudo[40120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:32 localhost sudo[40120]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:32 localhost sudo[40137]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lksgiaojtpcgvwcmcrpmgmekafbfimyh ; /usr/bin/python3 Feb 20 02:49:32 localhost sudo[40137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:32 localhost sudo[40137]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:32 localhost sudo[40154]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qojklyytebnnawyjqjtgywnjuupsfymy ; /usr/bin/python3 Feb 20 02:49:32 localhost sudo[40154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:32 localhost sudo[40154]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:32 localhost sudo[40172]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-txrijxhnmjcoxljegwqbtxzflczohanj ; /usr/bin/python3 Feb 20 02:49:32 localhost sudo[40172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:33 localhost sudo[40172]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:33 localhost sudo[40193]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iodmxydvhsarjoebsdfpvdkoygpfzqfr ; /usr/bin/python3 Feb 20 02:49:33 localhost sudo[40193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:33 localhost sudo[40193]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:33 localhost sudo[40209]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-picozjnkimjnofeukbieecwkgitypwee ; /usr/bin/python3 Feb 20 02:49:33 localhost sudo[40209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:33 localhost sudo[40209]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:34 localhost sudo[40225]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qtlblsxsdwneoftmxqyhtvzivlpkvvsn ; /usr/bin/python3 Feb 20 02:49:34 localhost sudo[40225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:34 localhost sudo[40225]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:34 localhost sudo[40242]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kpffhbkzaqisoqlzkhjnvgydnzcxbkbn ; /usr/bin/python3 Feb 20 02:49:34 localhost sudo[40242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:34 localhost sudo[40242]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:34 localhost sudo[40258]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-juisuwzgcwjnyjosjgjqobpsnvmogmbj ; /usr/bin/python3 Feb 20 02:49:34 localhost sudo[40258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:34 localhost sudo[40258]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:35 localhost sudo[40274]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vneajzbrifxdqivzciicgldcrivdxdwv ; /usr/bin/python3 Feb 20 02:49:35 localhost sudo[40274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:35 localhost sudo[40274]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:35 localhost sudo[40290]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lbvuqdprjoncrfucegvkeyjfpcadsyhx ; /usr/bin/python3 Feb 20 02:49:35 localhost sudo[40290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:35 localhost sudo[40290]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:35 localhost sudo[40306]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rpbbimklwpcwjaucspguirmvmtyainom ; /usr/bin/python3 Feb 20 02:49:35 localhost sudo[40306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:36 localhost sudo[40306]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:36 localhost sudo[40322]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lyzdhrrimbwhvlgmggjioiezzjjfspse ; /usr/bin/python3 Feb 20 02:49:36 localhost sudo[40322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:36 localhost sshd[40175]: Invalid user solr from 185.246.128.171 port 6078 Feb 20 02:49:36 localhost sudo[40322]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:36 localhost sshd[40324]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:49:36 localhost sudo[40340]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gajarryzehhjupxuzrzfkrpilogmafce ; /usr/bin/python3 Feb 20 02:49:36 localhost sudo[40340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:36 localhost sudo[40340]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:36 localhost sshd[40175]: Disconnecting invalid user solr 185.246.128.171 port 6078: Change of username or service not allowed: (solr,ssh-connection) -> (root2,ssh-connection) [preauth] Feb 20 02:49:36 localhost sudo[40356]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-refrzhmgukgbgwiczhbmhwerpgnawlso ; /usr/bin/python3 Feb 20 02:49:36 localhost sudo[40356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:37 localhost sudo[40356]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:37 localhost sudo[40372]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pefledmdkdxguhzjhxojlnvidguzsmwz ; /usr/bin/python3 Feb 20 02:49:37 localhost sudo[40372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:37 localhost sudo[40372]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:37 localhost sudo[40388]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eytdxdkmevwwsvytkrdzxarndbzystvs ; /usr/bin/python3 Feb 20 02:49:37 localhost sudo[40388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:37 localhost sudo[40388]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:38 localhost sudo[40405]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-przyaigimhaazmpczuprmsxnpsspuwnp ; /usr/bin/python3 Feb 20 02:49:38 localhost sudo[40405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:38 localhost sudo[40405]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:38 localhost sudo[40421]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qdnfbkhufftemrhojzbnsrakckmdrrvf ; /usr/bin/python3 Feb 20 02:49:38 localhost sudo[40421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:38 localhost sudo[40421]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:38 localhost sudo[40437]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lgxxghglhqkyusieqkefubsuuaxlknqi ; /usr/bin/python3 Feb 20 02:49:38 localhost sudo[40437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:38 localhost sudo[40437]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:39 localhost sudo[40454]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iencxzeplmnzrflaaqjkufrrqzkvcykt ; /usr/bin/python3 Feb 20 02:49:39 localhost sudo[40454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:39 localhost sudo[40454]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:39 localhost sudo[40470]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yiwqzhyzmjgjuvuhnxipknmomyueqbgs ; /usr/bin/python3 Feb 20 02:49:39 localhost sudo[40470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:39 localhost sudo[40470]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:39 localhost sudo[40486]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lhpzurylusopjoeerwzyydpozzkoapln ; /usr/bin/python3 Feb 20 02:49:39 localhost sudo[40486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:40 localhost sudo[40486]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:40 localhost sudo[40502]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ofehrowbgwjyowfkpggskyspjsaccbti ; /usr/bin/python3 Feb 20 02:49:40 localhost sudo[40502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:40 localhost sudo[40502]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:40 localhost sudo[40518]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-riqcvkkuzjzpucjfabsqyufkqhqwvrkk ; /usr/bin/python3 Feb 20 02:49:40 localhost sudo[40518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:40 localhost sudo[40518]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:40 localhost sudo[40534]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ewubfapaotpspijdwfmbtiaabvrswlmw ; /usr/bin/python3 Feb 20 02:49:40 localhost sudo[40534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:41 localhost sudo[40534]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:41 localhost sudo[40550]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qydafltypysndilvrnyueipugntcmclo ; /usr/bin/python3 Feb 20 02:49:41 localhost sudo[40550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:41 localhost sudo[40550]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:41 localhost sshd[40391]: Invalid user root2 from 185.246.128.171 port 29754 Feb 20 02:49:41 localhost sudo[40566]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uvyondjyyhutkzsokjafxoipxpjfjwnt ; /usr/bin/python3 Feb 20 02:49:41 localhost sudo[40566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:41 localhost groupadd[40569]: group added to /etc/group: name=qemu, GID=107 Feb 20 02:49:41 localhost groupadd[40569]: group added to /etc/gshadow: name=qemu Feb 20 02:49:41 localhost groupadd[40569]: new group: name=qemu, GID=107 Feb 20 02:49:41 localhost sudo[40566]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:41 localhost sudo[40588]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jcxpszmoytxgrjyvcwqeliwhbbzmybua ; /usr/bin/python3 Feb 20 02:49:41 localhost sudo[40588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:42 localhost useradd[40592]: new user: name=qemu, UID=107, GID=107, home=/home/qemu, shell=/sbin/nologin, from=none Feb 20 02:49:42 localhost sudo[40588]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:42 localhost sshd[40391]: Disconnecting invalid user root2 185.246.128.171 port 29754: Change of username or service not allowed: (root2,ssh-connection) -> (install,ssh-connection) [preauth] Feb 20 02:49:42 localhost sudo[40612]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djlspdssuvcelzdmgpjmtyxzrrrcdewn ; /usr/bin/python3 Feb 20 02:49:42 localhost sudo[40612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:43 localhost sudo[40612]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:43 localhost sudo[40635]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjwcffobmsiznojncmnodyeolkpohoyx ; /usr/bin/python3 Feb 20 02:49:43 localhost sudo[40635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:43 localhost sudo[40635]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:43 localhost sudo[40651]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kjcwlfiztaazaelzumiuhqqhieiaspcj ; /usr/bin/python3 Feb 20 02:49:43 localhost sudo[40651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:43 localhost sudo[40651]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:44 localhost sshd[40616]: Invalid user install from 185.246.128.171 port 56693 Feb 20 02:49:44 localhost sudo[40667]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lhcrhdjycliortcxmhlkzlwtulsqzcdt ; /usr/bin/python3 Feb 20 02:49:44 localhost sudo[40667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:44 localhost sudo[40667]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:44 localhost sudo[40683]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hkkpdooxyqtlyecpazgbojrcszcsuacf ; /usr/bin/python3 Feb 20 02:49:44 localhost sudo[40683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:44 localhost sudo[40683]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:44 localhost sshd[40616]: Disconnecting invalid user install 185.246.128.171 port 56693: Change of username or service not allowed: (install,ssh-connection) -> (nexus,ssh-connection) [preauth] Feb 20 02:49:44 localhost sudo[40731]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ucadfgeghlujaasbphdlnvxctskydgmh ; /usr/bin/python3 Feb 20 02:49:44 localhost sudo[40731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:45 localhost sudo[40731]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:45 localhost sudo[40775]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-edvevbprzucxzovufhfmgumntlfzioso ; /usr/bin/python3 Feb 20 02:49:45 localhost sudo[40775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:45 localhost sudo[40775]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:45 localhost sudo[40838]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tpqpokpzlwhgwkkumijrorjwwvgehtlm ; /usr/bin/python3 Feb 20 02:49:45 localhost sudo[40838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:45 localhost sudo[40838]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:46 localhost sudo[40881]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rjivjsurtgexgstulmammiwlxcaquwut ; /usr/bin/python3 Feb 20 02:49:46 localhost sudo[40881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:46 localhost sudo[40881]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:46 localhost sudo[40911]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pqxivkvmklygzjaoqvbjkwxrjxoagfgo ; /usr/bin/python3 Feb 20 02:49:46 localhost sudo[40911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:46 localhost sshd[40747]: Invalid user nexus from 185.246.128.171 port 4319 Feb 20 02:49:47 localhost sudo[40911]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:47 localhost sudo[40965]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zfodxtnftkzmjunibjtfsxgzwfffxcwx ; /usr/bin/python3 Feb 20 02:49:47 localhost sudo[40965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:47 localhost sudo[40965]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:47 localhost sshd[40747]: Disconnecting invalid user nexus 185.246.128.171 port 4319: Change of username or service not allowed: (nexus,ssh-connection) -> (giovanni,ssh-connection) [preauth] Feb 20 02:49:47 localhost sudo[40981]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jexqhpnrjrusaumgwwbazxcchcnppyut ; /usr/bin/python3 Feb 20 02:49:47 localhost sudo[40981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:47 localhost sudo[40981]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:48 localhost sudo[40997]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lhlzdatloujfnhrkoppthwixbmpnbsza ; /usr/bin/python3 Feb 20 02:49:48 localhost sudo[40997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:48 localhost sudo[40997]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:48 localhost sudo[41021]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qolczhjrwlrpfyvkyqmbnklwwfplfapo ; /usr/bin/python3 Feb 20 02:49:48 localhost sudo[41021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:49 localhost sudo[41021]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:49 localhost sudo[41039]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgasvrzbdmsznvvvfkykpddezltkfzpq ; /usr/bin/python3 Feb 20 02:49:49 localhost sudo[41039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:49 localhost sudo[41039]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:49 localhost sudo[41055]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kgveblspdznovqiokxufqahviwkkuplf ; /usr/bin/python3 Feb 20 02:49:49 localhost sudo[41055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:50 localhost sshd[41024]: Invalid user oracle from 103.59.94.62 port 51176 Feb 20 02:49:50 localhost sshd[41024]: Received disconnect from 103.59.94.62 port 51176:11: Bye Bye [preauth] Feb 20 02:49:50 localhost sshd[41024]: Disconnected from invalid user oracle 103.59.94.62 port 51176 [preauth] Feb 20 02:49:50 localhost sshd[41058]: Invalid user giovanni from 185.246.128.171 port 25924 Feb 20 02:49:50 localhost sudo[41055]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:50 localhost sudo[41078]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xstujllwgnidaudjwwyvytjqsevpcsau ; /usr/bin/python3 Feb 20 02:49:50 localhost sudo[41078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:51 localhost sshd[41058]: Disconnecting invalid user giovanni 185.246.128.171 port 25924: Change of username or service not allowed: (giovanni,ssh-connection) -> (guest,ssh-connection) [preauth] Feb 20 02:49:51 localhost sudo[41078]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:51 localhost sudo[41094]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-egqnzixfecxhljxydglmtkxrcapwnszx ; /usr/bin/python3 Feb 20 02:49:51 localhost sudo[41094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:51 localhost sudo[41094]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:51 localhost sudo[41110]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jrnycppxfzqjgpceuvdyqbsslwyulcte ; /usr/bin/python3 Feb 20 02:49:51 localhost sudo[41110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:51 localhost sudo[41110]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:52 localhost sudo[41129]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sepfckulghndqtdvxpdwhemklcpcazvp ; /usr/bin/python3 Feb 20 02:49:52 localhost sudo[41129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:54 localhost sshd[41115]: Invalid user guest from 185.246.128.171 port 39577 Feb 20 02:49:55 localhost sudo[41129]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:55 localhost sudo[41147]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hyxsfhtgnlywbfcoudxhjyokkxyfkbrb ; /usr/bin/python3 Feb 20 02:49:55 localhost sudo[41147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:56 localhost sudo[41147]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:56 localhost sudo[41208]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ftcbjwtvtwgvtnqdaiwjlievitmqsbft ; /usr/bin/python3 Feb 20 02:49:56 localhost sudo[41208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:57 localhost sudo[41208]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:57 localhost sudo[41224]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uieqwhhuwxkefylgzrfglserqerdjxzh ; /usr/bin/python3 Feb 20 02:49:57 localhost sudo[41224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:57 localhost sudo[41224]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:57 localhost sudo[41283]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cfzckskijvhfltlrklrlthonmncnzewi ; /usr/bin/python3 Feb 20 02:49:57 localhost sudo[41283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:58 localhost sudo[41283]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:58 localhost sudo[41326]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hcfzepamrmbcymlzhwiqdpateaohcxlj ; /usr/bin/python3 Feb 20 02:49:58 localhost sudo[41326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:58 localhost sudo[41326]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:58 localhost sudo[41388]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hkntuqtavstmknticuwahzstlswlwsqu ; /usr/bin/python3 Feb 20 02:49:58 localhost sudo[41388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:59 localhost sudo[41388]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:59 localhost sudo[41433]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ywemzzpxlaawpckwwbtzfdilkwldgdbm ; /usr/bin/python3 Feb 20 02:49:59 localhost sudo[41433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:59 localhost sudo[41433]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:59 localhost sshd[41115]: error: maximum authentication attempts exceeded for invalid user guest from 185.246.128.171 port 39577 ssh2 [preauth] Feb 20 02:49:59 localhost sshd[41115]: Disconnecting invalid user guest 185.246.128.171 port 39577: Too many authentication failures [preauth] Feb 20 02:49:59 localhost sudo[41463]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dpcssfijuptnjhlnfqeyvvltbylxnuao ; /usr/bin/python3 Feb 20 02:49:59 localhost sudo[41463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:49:59 localhost sudo[41463]: pam_unix(sudo:session): session closed for user root Feb 20 02:49:59 localhost sudo[41479]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ozecncfnzntalovpvwhvufkyoftlziui ; /usr/bin/python3 Feb 20 02:50:00 localhost sudo[41479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:00 localhost sudo[41479]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:00 localhost sudo[41495]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkqsbsbktacheqrmzjjsjczfmscfuqvb ; /usr/bin/python3 Feb 20 02:50:00 localhost sudo[41495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:00 localhost sudo[41495]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:00 localhost sudo[41511]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihkgpxmrhsaxlrxuzwpfzwtnltfnkjps ; /usr/bin/python3 Feb 20 02:50:00 localhost sudo[41511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:00 localhost sudo[41511]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:01 localhost sudo[41560]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wvmzsujldvwyaitijnuqsdcorfthxsxx ; /usr/bin/python3 Feb 20 02:50:01 localhost sudo[41560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:01 localhost sudo[41560]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:01 localhost sudo[41603]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-giukamdygwapsfhuyknnnxzayghwnqht ; /usr/bin/python3 Feb 20 02:50:01 localhost sudo[41603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:01 localhost sudo[41603]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:02 localhost sudo[41633]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgalbslhgcqzhrxcxuorrpsctohnwvoy ; /usr/bin/python3 Feb 20 02:50:02 localhost sudo[41633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:02 localhost sudo[41633]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:02 localhost sudo[41650]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-elafswahiughywqigeadyzrgxgrfdajo ; /usr/bin/python3 Feb 20 02:50:02 localhost sudo[41650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:02 localhost sudo[41650]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:02 localhost sudo[41666]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ohtjpxjpdxjbuifypjgmnztuyatwbkkr ; /usr/bin/python3 Feb 20 02:50:02 localhost sudo[41666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:02 localhost sudo[41666]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:03 localhost sudo[41714]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xwcjbmmfdsuovunrghygdxhuyklwpzgc ; /usr/bin/python3 Feb 20 02:50:03 localhost sudo[41714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:03 localhost sudo[41714]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:03 localhost sudo[41757]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lzownjrselxdmoaerhhpnpzgqwcxbwfw ; /usr/bin/python3 Feb 20 02:50:03 localhost sudo[41757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:03 localhost sudo[41757]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:03 localhost sudo[41787]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lwmdistswkvcfynblolhsmydlkucuvjd ; /usr/bin/python3 Feb 20 02:50:03 localhost sudo[41787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:04 localhost sudo[41787]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:04 localhost sudo[41803]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qjtqagdfsiaedqutrimsuokxcqhnfttn ; /usr/bin/python3 Feb 20 02:50:04 localhost sudo[41803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:04 localhost sudo[41803]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:04 localhost sudo[41819]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lqldbavyvljtcdrmdurbeypfqapkkyzn ; /usr/bin/python3 Feb 20 02:50:04 localhost sudo[41819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:05 localhost sshd[41551]: Invalid user guest from 185.246.128.171 port 21917 Feb 20 02:50:05 localhost sshd[41823]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:50:07 localhost sudo[41819]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:08 localhost sudo[41870]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ddiswxhborrjjvgblbdewkfkyjdnaicg ; /usr/bin/python3 Feb 20 02:50:08 localhost sudo[41870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:08 localhost sudo[41870]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:08 localhost sudo[41915]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wlmxklqisbzagfdrxjbdmcdppltfsuah ; /usr/bin/python3 Feb 20 02:50:08 localhost sudo[41915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:09 localhost sudo[41915]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:09 localhost sudo[41946]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vejyiwdlbhusaceowhihgdqqbddbsyyk ; /usr/bin/python3 Feb 20 02:50:09 localhost sudo[41946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:09 localhost sshd[41551]: Disconnecting invalid user guest 185.246.128.171 port 21917: Change of username or service not allowed: (guest,ssh-connection) -> (upload,ssh-connection) [preauth] Feb 20 02:50:09 localhost sshd[1132]: Received signal 15; terminating. Feb 20 02:50:09 localhost sshd[41952]: Server listening on 0.0.0.0 port 22. Feb 20 02:50:09 localhost sshd[41952]: Server listening on :: port 22. Feb 20 02:50:09 localhost sudo[41946]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:09 localhost sudo[41966]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ztovtfvcnulqdopabjrumhhtwgwubpdb ; /usr/bin/python3 Feb 20 02:50:09 localhost sudo[41966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:10 localhost sudo[41966]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:10 localhost sudo[41983]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hvgadswxyiiyssoqywfqaowxsyzhxxkw ; /usr/bin/python3 Feb 20 02:50:10 localhost sudo[41983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:10 localhost sudo[41983]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:10 localhost sudo[41999]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhmpliazfeqwpdpqhqpiclnwyoqepcma ; /usr/bin/python3 Feb 20 02:50:10 localhost sudo[41999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:10 localhost sudo[41999]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:10 localhost sudo[42015]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-orievkifgwqkcvyqovriiecibcutqogt ; /usr/bin/python3 Feb 20 02:50:10 localhost sudo[42015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:10 localhost sudo[42015]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:11 localhost sudo[42032]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gehunuhpvbswtkukjbvwpdglrxlidoax ; /usr/bin/python3 Feb 20 02:50:11 localhost sudo[42032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:11 localhost sudo[42032]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:11 localhost sudo[42049]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hctqrianjvhhwmjsoktcdwfahgflgruo ; /usr/bin/python3 Feb 20 02:50:11 localhost sudo[42049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:11 localhost sudo[42049]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:11 localhost sudo[42065]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymhjnctgvbjvckqusdmsnpdbdwcgmkil ; /usr/bin/python3 Feb 20 02:50:11 localhost sudo[42065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:12 localhost sudo[42065]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:12 localhost sshd[42018]: Invalid user upload from 185.246.128.171 port 6836 Feb 20 02:50:12 localhost sudo[42081]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bjpchsotvbasepajmpqdvsqtrlvmthpv ; /usr/bin/python3 Feb 20 02:50:12 localhost sudo[42081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:12 localhost sudo[42081]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:13 localhost sshd[42018]: Disconnecting invalid user upload 185.246.128.171 port 6836: Change of username or service not allowed: (upload,ssh-connection) -> (emby,ssh-connection) [preauth] Feb 20 02:50:13 localhost sudo[42099]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afrjdznhmctihqnvwsqtbcrbojehoosq ; /usr/bin/python3 Feb 20 02:50:13 localhost sudo[42099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:13 localhost sudo[42099]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:14 localhost sudo[42117]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wcgqzqcifbjccdjkxqdepouukjmnrtgx ; /usr/bin/python3 Feb 20 02:50:14 localhost sudo[42117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:17 localhost sudo[42117]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:17 localhost sshd[42121]: Invalid user emby from 185.246.128.171 port 27394 Feb 20 02:50:17 localhost sudo[42168]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgxprrdtdnfiqukytjgvuncacutfqapb ; /usr/bin/python3 Feb 20 02:50:17 localhost sudo[42168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:17 localhost sudo[42168]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:17 localhost sudo[42186]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-myyjxnpwjxyqqdidojhecamfgumqdfsw ; /usr/bin/python3 Feb 20 02:50:17 localhost sudo[42186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:18 localhost sudo[42186]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:18 localhost sudo[42216]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xcwkzzxbxdcmbzkuwkumlyaflsmdbsvp ; /usr/bin/python3 Feb 20 02:50:18 localhost sudo[42216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:18 localhost sshd[42121]: Disconnecting invalid user emby 185.246.128.171 port 27394: Change of username or service not allowed: (emby,ssh-connection) -> (ubuntu,ssh-connection) [preauth] Feb 20 02:50:18 localhost sudo[42216]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:19 localhost sudo[42266]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ecfsmcznqqptdvpmixgvwiafltrdbogx ; /usr/bin/python3 Feb 20 02:50:19 localhost sudo[42266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:19 localhost sudo[42266]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:19 localhost sudo[42284]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-behznowlsvgzymlkrkklplgpxrwkgtpn ; /usr/bin/python3 Feb 20 02:50:19 localhost sudo[42284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:19 localhost sudo[42284]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:19 localhost sudo[42314]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wuiafdmhovkizfhreunlkzqktosjkbqj ; /usr/bin/python3 Feb 20 02:50:19 localhost sudo[42314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:20 localhost sudo[42314]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:20 localhost sudo[42370]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iyjedaqtruveufouevxunwgcjxjunsik ; /usr/bin/python3 Feb 20 02:50:20 localhost sudo[42370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:21 localhost sudo[42370]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:21 localhost sudo[42388]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovllwykqonhfwikactqtmkqfeboazzlj ; /usr/bin/python3 Feb 20 02:50:21 localhost sudo[42388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:21 localhost sudo[42388]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:21 localhost sudo[42405]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bvkvqlhbzidzoypaiygseiyrbmfpispm ; /usr/bin/python3 Feb 20 02:50:21 localhost sudo[42405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:21 localhost sudo[42405]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:22 localhost sudo[42422]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mysxljzkosmeolhxbrpakknbwsvxpmfk ; /usr/bin/python3 Feb 20 02:50:22 localhost sudo[42422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:22 localhost sudo[42422]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:22 localhost sshd[42356]: Invalid user ubuntu from 185.246.128.171 port 57126 Feb 20 02:50:22 localhost sudo[42439]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wckynsrxxlxmbpqafmcfpupvdbursczn ; /usr/bin/python3 Feb 20 02:50:22 localhost sudo[42439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:22 localhost sudo[42439]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:23 localhost sudo[42459]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mztjsjlmvemhgyvlmcqptpjbovtntirf ; /usr/bin/python3 Feb 20 02:50:23 localhost sudo[42459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:23 localhost sudo[42459]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:24 localhost sudo[42476]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fyvtwxpzgeqvqrianmxhhnixnwitchwi ; PATH=/bin:/usr/bin:/sbin:/usr/sbin /usr/bin/python3 Feb 20 02:50:24 localhost sudo[42476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:24 localhost sudo[42479]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 02:50:24 localhost sudo[42479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:50:24 localhost sudo[42479]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:24 localhost sudo[42494]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 02:50:24 localhost sudo[42494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:50:24 localhost sudo[42476]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:25 localhost sudo[42494]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:25 localhost sshd[42356]: error: maximum authentication attempts exceeded for invalid user ubuntu from 185.246.128.171 port 57126 ssh2 [preauth] Feb 20 02:50:25 localhost sshd[42356]: Disconnecting invalid user ubuntu 185.246.128.171 port 57126: Too many authentication failures [preauth] Feb 20 02:50:25 localhost sudo[42554]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uymgvdrowuudpxtdgvpzqqgwkacxqybj ; /usr/bin/python3 Feb 20 02:50:25 localhost sudo[42554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:25 localhost sudo[42554]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:25 localhost sudo[42570]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tcufmfkdmlbazsmpwlccyheadekzoknu ; /usr/bin/python3 Feb 20 02:50:25 localhost sudo[42570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:25 localhost sudo[42570]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:26 localhost sudo[42575]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 02:50:26 localhost sudo[42575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 02:50:26 localhost sudo[42575]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:27 localhost sudo[42603]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkemogtslanjneuognrfzsvqqsmksvug ; /usr/bin/python3 Feb 20 02:50:27 localhost sudo[42603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:27 localhost sudo[42603]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:28 localhost sudo[42619]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eavntstlmgxxjezslbmuxmrjhwnfgbyh ; /usr/bin/python3 Feb 20 02:50:28 localhost sudo[42619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:28 localhost sudo[42619]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:28 localhost sudo[42636]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nfrrxizocvvejxeasfrhngfzuipgllbk ; /usr/bin/python3 Feb 20 02:50:28 localhost sudo[42636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:28 localhost sudo[42636]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:28 localhost sudo[42652]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-savgdulebptptussopszccwheaylumqh ; /usr/bin/python3 Feb 20 02:50:28 localhost sudo[42652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:28 localhost sshd[42573]: Invalid user ubuntu from 185.246.128.171 port 20770 Feb 20 02:50:29 localhost sudo[42652]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:29 localhost sudo[42669]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gmbnnfdsqjhvgfrvhmkjgiqjilmgcriw ; /usr/bin/python3 Feb 20 02:50:29 localhost sudo[42669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:29 localhost sudo[42669]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:29 localhost sudo[42685]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sobvbenfwpqmwrrmomqdaipiznajzazj ; /usr/bin/python3 Feb 20 02:50:29 localhost sudo[42685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:30 localhost sshd[42626]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:50:30 localhost sudo[42685]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:30 localhost sshd[42573]: Disconnecting invalid user ubuntu 185.246.128.171 port 20770: Change of username or service not allowed: (ubuntu,ssh-connection) -> (gwei,ssh-connection) [preauth] Feb 20 02:50:30 localhost sudo[42706]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-odrixrjvjnbblahvlypdcrrqzfguvwsx ; /usr/bin/python3 Feb 20 02:50:30 localhost sudo[42706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:31 localhost sudo[42706]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:31 localhost sudo[42722]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yqsdckaenhonweknrbeodpymiicukrpw ; /usr/bin/python3 Feb 20 02:50:31 localhost sudo[42722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:31 localhost sudo[42722]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:31 localhost sudo[42774]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yqivpzjprtjvaiazfxzrqxoqubbpumot ; /usr/bin/python3 Feb 20 02:50:31 localhost sudo[42774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:31 localhost sshd[42741]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:50:31 localhost sudo[42774]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:32 localhost sudo[42817]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uyowetcxqtrtgescwevljqwedjalmbwp ; /usr/bin/python3 Feb 20 02:50:32 localhost sudo[42817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:32 localhost sudo[42817]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:32 localhost sudo[42847]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xqzzlfnyaidmrxbxgvxaovhgpfmsbjpi ; /usr/bin/python3 Feb 20 02:50:32 localhost sudo[42847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:32 localhost sudo[42847]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:33 localhost sudo[42863]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dktwwjokroyqdxhzazvuvcjpgxzbhlwx ; /usr/bin/python3 Feb 20 02:50:33 localhost sudo[42863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:33 localhost sudo[42863]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:33 localhost sudo[42879]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dfeyagoyhjstqmdiymfzlihpcgvbndum ; /usr/bin/python3 Feb 20 02:50:33 localhost sudo[42879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:33 localhost sudo[42879]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:33 localhost sshd[42725]: Invalid user gwei from 185.246.128.171 port 47878 Feb 20 02:50:34 localhost sudo[42895]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahigdjgxwuvvggheisjgdbwdcqldqlol ; /usr/bin/python3 Feb 20 02:50:34 localhost sudo[42895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:34 localhost sshd[42725]: Disconnecting invalid user gwei 185.246.128.171 port 47878: Change of username or service not allowed: (gwei,ssh-connection) -> (avalanche,ssh-connection) [preauth] Feb 20 02:50:34 localhost sudo[42895]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:37 localhost sshd[42898]: Invalid user avalanche from 185.246.128.171 port 4744 Feb 20 02:50:38 localhost sshd[42898]: Disconnecting invalid user avalanche 185.246.128.171 port 4744: Change of username or service not allowed: (avalanche,ssh-connection) -> (vboxuser,ssh-connection) [preauth] Feb 20 02:50:39 localhost sudo[42947]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shpblyvxsphgckjimqtitulmnoocctal ; /usr/bin/python3 Feb 20 02:50:39 localhost sudo[42947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:39 localhost sudo[42947]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:39 localhost sudo[42990]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lnnxsbtskayoogbysgbyluomwbmwhljx ; /usr/bin/python3 Feb 20 02:50:39 localhost sudo[42990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:40 localhost sudo[42990]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:40 localhost sudo[43020]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-silwqfgnjjwaaytitcvpepkctndxxnio ; /usr/bin/python3 Feb 20 02:50:40 localhost sudo[43020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:40 localhost sudo[43020]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:40 localhost sshd[42900]: Invalid user vboxuser from 185.246.128.171 port 24398 Feb 20 02:50:41 localhost sshd[42900]: Disconnecting invalid user vboxuser 185.246.128.171 port 24398: Change of username or service not allowed: (vboxuser,ssh-connection) -> (administrator,ssh-connectio [preauth] Feb 20 02:50:41 localhost sudo[43070]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eeypebltoixcstprtyakvabqpmirdpls ; /usr/bin/python3 Feb 20 02:50:41 localhost sudo[43070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:41 localhost sudo[43070]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:41 localhost sudo[43113]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dpeuvmtwuubaebpnpnukoqlcyycrdkot ; /usr/bin/python3 Feb 20 02:50:41 localhost sudo[43113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:42 localhost sudo[43113]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:42 localhost sudo[43144]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdyikngihlafkyhzcjskehofnhmftuhb ; /usr/bin/python3 Feb 20 02:50:42 localhost sudo[43144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:42 localhost sudo[43144]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:43 localhost sudo[43193]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fqfqaffwaxfnzofrxnxhqnzvlfeaziah ; /usr/bin/python3 Feb 20 02:50:43 localhost sudo[43193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:43 localhost sudo[43193]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:43 localhost sudo[43236]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-doxeeofhfvkvvxaaspxwtffquuzvegjb ; /usr/bin/python3 Feb 20 02:50:43 localhost sudo[43236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:43 localhost sudo[43236]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:44 localhost sudo[43266]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-neopskppcypkvtveaxgvlauisnqorgfr ; /usr/bin/python3 Feb 20 02:50:44 localhost sudo[43266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:44 localhost sudo[43266]: pam_unix(sudo:session): session closed for user root Feb 20 02:50:46 localhost sudo[43282]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wsuxrjweoifedifhqnfucjhxhkvrrqtt ; /usr/bin/python3 Feb 20 02:50:46 localhost sudo[43282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:50:47 localhost sshd[43115]: Invalid user administrator from 185.246.128.171 port 37444 Feb 20 02:50:51 localhost sshd[43336]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 02:50:52 localhost sshd[43115]: error: maximum authentication attempts exceeded for invalid user administrator from 185.246.128.171 port 37444 ssh2 [preauth] Feb 20 02:50:52 localhost sshd[43115]: Disconnecting invalid user administrator 185.246.128.171 port 37444: Too many authentication failures [preauth] Feb 20 02:50:56 localhost sshd[43478]: Invalid user administrator from 185.246.128.171 port 29100 Feb 20 02:50:57 localhost sshd[43478]: Disconnecting invalid user administrator 185.246.128.171 port 29100: Change of username or service not allowed: (administrator,ssh-connection) -> (desliga,ssh-connection [preauth] Feb 20 02:51:00 localhost sudo[43282]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:00 localhost sudo[43532]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jyrucfnqwundmonktducwnxgqekbtwoz ; /usr/bin/python3 Feb 20 02:51:00 localhost sudo[43532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:51:00 localhost sudo[43532]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:01 localhost sudo[43559]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xmolbmkgvljnfjsudwgusjnrejfrjwpq ; /usr/bin/python3 Feb 20 02:51:01 localhost sudo[43559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:51:03 localhost sshd[43517]: Invalid user desliga from 185.246.128.171 port 1790 Feb 20 02:51:03 localhost sshd[43517]: Disconnecting invalid user desliga 185.246.128.171 port 1790: Change of username or service not allowed: (desliga,ssh-connection) -> (ds,ssh-connection) [preauth] Feb 20 02:51:05 localhost sudo[43559]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:05 localhost sudo[43628]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iomykgsaojabfkybkwvmkkppvlrwwebz ; /usr/bin/python3 Feb 20 02:51:05 localhost sudo[43628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:51:06 localhost sudo[43628]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:06 localhost sudo[43656]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icerumijqotgoymfytppfzzzcocxobva ; /usr/bin/python3 Feb 20 02:51:06 localhost sudo[43656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:51:06 localhost sudo[43656]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:06 localhost sudo[43673]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rgodctkhnnditkugopozilkozsxbjwzx ; /usr/bin/python3 Feb 20 02:51:06 localhost sudo[43673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 02:51:07 localhost sudo[43673]: pam_unix(sudo:session): session closed for user root Feb 20 02:51:07 localhost sudo[43689]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ieiseaocihmukxawdfrwjrrjjdfqahqw ; /usr/bin/python3 Feb 20 02:51:07 localhost sudo[43689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:08 np0005625201 sudo[43689]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:08 np0005625201 sudo[43711]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkxqwqfalwtbxtbuphmqgepnyemqekds ; /usr/bin/python3 Feb 20 07:51:08 np0005625201 sudo[43711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:09 np0005625201 sshd[43614]: Invalid user ds from 185.246.128.171 port 29882 Feb 20 07:51:10 np0005625201 sshd[43614]: Disconnecting invalid user ds 185.246.128.171 port 29882: Change of username or service not allowed: (ds,ssh-connection) -> (jrodrig,ssh-connection) [preauth] Feb 20 07:51:14 np0005625201 sshd[43752]: Invalid user jrodrig from 185.246.128.171 port 63394 Feb 20 07:51:16 np0005625201 sshd[43752]: Disconnecting invalid user jrodrig 185.246.128.171 port 63394: Change of username or service not allowed: (jrodrig,ssh-connection) -> (draytek,ssh-connection) [preauth] Feb 20 07:51:17 np0005625201 sudo[43711]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:17 np0005625201 sudo[43782]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qzimtckzhaqyesbzfxecivetlkwdkbyy ; /usr/bin/python3 Feb 20 07:51:17 np0005625201 sudo[43782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:17 np0005625201 sudo[43782]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:18 np0005625201 sudo[43809]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hlnzqzkkcuqgxbdzdxytndqoailnfsdu ; /usr/bin/python3 Feb 20 07:51:18 np0005625201 sudo[43809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:18 np0005625201 sudo[43809]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:18 np0005625201 sshd[43767]: Invalid user draytek from 185.246.128.171 port 24201 Feb 20 07:51:18 np0005625201 sshd[43767]: Disconnecting invalid user draytek 185.246.128.171 port 24201: Change of username or service not allowed: (draytek,ssh-connection) -> (sales,ssh-connection) [preauth] Feb 20 07:51:19 np0005625201 sudo[43826]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxyblxazyysmbchuumhwyqiqybnhjxsf ; /usr/bin/python3 Feb 20 07:51:19 np0005625201 sudo[43826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:24 np0005625201 sshd[43893]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:51:25 np0005625201 sshd[43842]: Invalid user sales from 185.246.128.171 port 38860 Feb 20 07:51:25 np0005625201 sshd[43842]: Disconnecting invalid user sales 185.246.128.171 port 38860: Change of username or service not allowed: (sales,ssh-connection) -> (wilson,ssh-connection) [preauth] Feb 20 07:51:27 np0005625201 sudo[44083]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:51:27 np0005625201 sudo[44083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:51:27 np0005625201 sudo[44083]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:27 np0005625201 sudo[44121]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 07:51:27 np0005625201 sudo[44121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:51:27 np0005625201 sudo[43826]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:28 np0005625201 sudo[44331]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzfhpxvcyagaseqyharpfqadxjnnwoqu ; /usr/bin/python3 Feb 20 07:51:28 np0005625201 sudo[44331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:28 np0005625201 sudo[44121]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:28 np0005625201 sudo[44348]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:51:28 np0005625201 sudo[44348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:51:28 np0005625201 sudo[44348]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:28 np0005625201 sudo[44367]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:51:28 np0005625201 sudo[44367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:51:28 np0005625201 sudo[44331]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:28 np0005625201 sshd[44081]: Invalid user wilson from 185.246.128.171 port 7351 Feb 20 07:51:28 np0005625201 sudo[44422]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qbubyfedorkifkixurphoxgooobbtuao ; /usr/bin/python3 Feb 20 07:51:28 np0005625201 sudo[44422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:29 np0005625201 sudo[44367]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:29 np0005625201 sshd[44081]: Disconnecting invalid user wilson 185.246.128.171 port 7351: Change of username or service not allowed: (wilson,ssh-connection) -> (samuel,ssh-connection) [preauth] Feb 20 07:51:32 np0005625201 sshd[44451]: Invalid user samuel from 185.246.128.171 port 22417 Feb 20 07:51:32 np0005625201 sshd[44451]: Disconnecting invalid user samuel 185.246.128.171 port 22417: Change of username or service not allowed: (samuel,ssh-connection) -> (seki,ssh-connection) [preauth] Feb 20 07:51:37 np0005625201 sshd[44953]: Invalid user seki from 185.246.128.171 port 49840 Feb 20 07:51:37 np0005625201 sshd[44967]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:51:38 np0005625201 sshd[44953]: Disconnecting invalid user seki 185.246.128.171 port 49840: Change of username or service not allowed: (seki,ssh-connection) -> (openvswitch,ssh-connection) [preauth] Feb 20 07:51:39 np0005625201 sudo[44422]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:39 np0005625201 sudo[44982]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iovvqgqtvlsmloiruivcvtyohrbualvb ; /usr/bin/python3 Feb 20 07:51:39 np0005625201 sudo[44982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:39 np0005625201 sudo[44982]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:41 np0005625201 sudo[45000]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:51:41 np0005625201 sudo[45000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:51:41 np0005625201 sudo[45000]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:41 np0005625201 sudo[45027]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kxljmebtwmdtmbupnhpfhdsxclfvedfs ; /usr/bin/python3 Feb 20 07:51:41 np0005625201 sudo[45027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:41 np0005625201 sudo[45027]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:41 np0005625201 sudo[45044]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dekylcptnvefrcrdvgtxcoiljcqmvgan ; /usr/bin/python3 Feb 20 07:51:41 np0005625201 sudo[45044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:41 np0005625201 sudo[45044]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:42 np0005625201 sshd[44998]: Disconnecting authenticating user openvswitch 185.246.128.171 port 9782: Change of username or service not allowed: (openvswitch,ssh-connection) -> (dasusr1,ssh-connection) [preauth] Feb 20 07:51:42 np0005625201 sudo[45095]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zlwdbsropvhgfxkgxahkzubkppbcqnws ; /usr/bin/python3 Feb 20 07:51:42 np0005625201 sudo[45095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:42 np0005625201 sudo[45095]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:42 np0005625201 sudo[45138]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzkxiohzpcqdwnmpwqcrqqhvlfamsynr ; /usr/bin/python3 Feb 20 07:51:42 np0005625201 sudo[45138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:42 np0005625201 sudo[45138]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:43 np0005625201 sudo[45169]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fotnugpchunrjytxgltpgzyupzqtjarc ; /usr/bin/python3 Feb 20 07:51:43 np0005625201 sudo[45169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:43 np0005625201 sudo[45169]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:43 np0005625201 sudo[45186]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mzyvvprgbpngxommssfeqmnvdntvscvn ; /usr/bin/python3 Feb 20 07:51:43 np0005625201 sudo[45186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:43 np0005625201 sudo[45186]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:44 np0005625201 sudo[45204]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fsfnsjzvdwcayfesscdwnvbwjfxncsev ; /usr/bin/python3 Feb 20 07:51:44 np0005625201 sudo[45204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:44 np0005625201 sudo[45204]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:44 np0005625201 sudo[45223]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nvkdvyhrkkqipfsiurajjfbwvpylhooy ; /usr/bin/python3 Feb 20 07:51:44 np0005625201 sudo[45223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:45 np0005625201 sshd[45208]: Invalid user ctf from 194.87.216.133 port 58894 Feb 20 07:51:45 np0005625201 sshd[45208]: Received disconnect from 194.87.216.133 port 58894:11: Bye Bye [preauth] Feb 20 07:51:45 np0005625201 sshd[45208]: Disconnected from invalid user ctf 194.87.216.133 port 58894 [preauth] Feb 20 07:51:45 np0005625201 sshd[45155]: Invalid user dasusr1 from 185.246.128.171 port 26021 Feb 20 07:51:46 np0005625201 sshd[45155]: Disconnecting invalid user dasusr1 185.246.128.171 port 26021: Change of username or service not allowed: (dasusr1,ssh-connection) -> (ddd,ssh-connection) [preauth] Feb 20 07:51:51 np0005625201 sudo[45223]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:51 np0005625201 sudo[45292]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-umdytwgfciynhmcyfnkhsvxtgdsspkox ; /usr/bin/python3 Feb 20 07:51:51 np0005625201 sudo[45292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:51 np0005625201 sudo[45292]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:51 np0005625201 sshd[45264]: Invalid user ddd from 185.246.128.171 port 51134 Feb 20 07:51:51 np0005625201 sudo[45321]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-udolfgsvhqrvherqzurxyqzhiovrhkqs ; /usr/bin/python3 Feb 20 07:51:51 np0005625201 sudo[45321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:51 np0005625201 sshd[45264]: Disconnecting invalid user ddd 185.246.128.171 port 51134: Change of username or service not allowed: (ddd,ssh-connection) -> (nsroot,ssh-connection) [preauth] Feb 20 07:51:54 np0005625201 sshd[45376]: error: kex_exchange_identification: Connection closed by remote host Feb 20 07:51:54 np0005625201 sshd[45376]: Connection closed by 92.118.39.72 port 46872 Feb 20 07:51:55 np0005625201 sshd[45374]: Invalid user nsroot from 185.246.128.171 port 12151 Feb 20 07:51:55 np0005625201 sshd[45374]: Disconnecting invalid user nsroot 185.246.128.171 port 12151: Change of username or service not allowed: (nsroot,ssh-connection) -> (xd,ssh-connection) [preauth] Feb 20 07:51:56 np0005625201 sudo[45321]: pam_unix(sudo:session): session closed for user root Feb 20 07:51:56 np0005625201 sudo[45424]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lemuljcwaibedtwipomkdazxjazrksyc ; /usr/bin/python3 Feb 20 07:51:56 np0005625201 sudo[45424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:51:58 np0005625201 sshd[45427]: Invalid user xd from 185.246.128.171 port 28129 Feb 20 07:51:58 np0005625201 sshd[45427]: Disconnecting invalid user xd 185.246.128.171 port 28129: Change of username or service not allowed: (xd,ssh-connection) -> (vagrant,ssh-connection) [preauth] Feb 20 07:52:00 np0005625201 sshd[45478]: Invalid user vagrant from 185.246.128.171 port 43371 Feb 20 07:52:01 np0005625201 sudo[45424]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:01 np0005625201 sudo[45517]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xmakekfmuyeqjkexachsvojvlhprxwul ; /usr/bin/python3 Feb 20 07:52:01 np0005625201 sudo[45517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:02 np0005625201 sshd[45478]: Disconnecting invalid user vagrant 185.246.128.171 port 43371: Change of username or service not allowed: (vagrant,ssh-connection) -> (user7,ssh-connection) [preauth] Feb 20 07:52:04 np0005625201 sudo[45517]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:05 np0005625201 sudo[45610]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tnnhemhaxlxfbezdflsadjzuvqrkydsr ; /usr/bin/python3 Feb 20 07:52:05 np0005625201 sudo[45610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:06 np0005625201 sshd[45571]: Invalid user user7 from 185.246.128.171 port 6249 Feb 20 07:52:07 np0005625201 sudo[45610]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:07 np0005625201 sshd[45571]: Disconnecting invalid user user7 185.246.128.171 port 6249: Change of username or service not allowed: (user7,ssh-connection) -> (uftp,ssh-connection) [preauth] Feb 20 07:52:09 np0005625201 sudo[45702]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yrljyjbwuafihhmnlgwmkosgxjpqhjco ; /usr/bin/python3 Feb 20 07:52:09 np0005625201 sudo[45702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:10 np0005625201 sshd[45799]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:52:12 np0005625201 sshd[45687]: Invalid user uftp from 185.246.128.171 port 25898 Feb 20 07:52:12 np0005625201 sudo[45702]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:12 np0005625201 sudo[45948]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jvpxemmxcxktmibewqcjwphjcboevfka ; /usr/bin/python3 Feb 20 07:52:12 np0005625201 sudo[45948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:13 np0005625201 sshd[45687]: Disconnecting invalid user uftp 185.246.128.171 port 25898: Change of username or service not allowed: (uftp,ssh-connection) -> (Test,ssh-connection) [preauth] Feb 20 07:52:14 np0005625201 sudo[45948]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:14 np0005625201 sudo[46027]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ftirvotjapgxpebzgqhgpbfmisjyailz ; /usr/bin/python3 Feb 20 07:52:14 np0005625201 sudo[46027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:16 np0005625201 sudo[46027]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:16 np0005625201 sudo[46111]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzdoflarqrpjbenlnfgmgmjkhkxbrwbm ; /usr/bin/python3 Feb 20 07:52:16 np0005625201 sudo[46111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:16 np0005625201 sshd[46096]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:52:16 np0005625201 sshd[46028]: Invalid user Test from 185.246.128.171 port 56892 Feb 20 07:52:18 np0005625201 sshd[46028]: Disconnecting invalid user Test 185.246.128.171 port 56892: Change of username or service not allowed: (Test,ssh-connection) -> (USER3,ssh-connection) [preauth] Feb 20 07:52:21 np0005625201 sudo[46111]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:21 np0005625201 sudo[46242]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fgsgggrxhqvfswywvqceufisxtasidpk ; /usr/bin/python3 Feb 20 07:52:21 np0005625201 sudo[46242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:23 np0005625201 sshd[46270]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:52:24 np0005625201 sshd[46187]: Invalid user USER3 from 185.246.128.171 port 21701 Feb 20 07:52:25 np0005625201 sshd[46187]: Disconnecting invalid user USER3 185.246.128.171 port 21701: Change of username or service not allowed: (USER3,ssh-connection) -> (dock,ssh-connection) [preauth] Feb 20 07:52:26 np0005625201 sshd[46309]: Invalid user dock from 185.246.128.171 port 47878 Feb 20 07:52:26 np0005625201 sshd[46312]: Invalid user ca from 35.188.112.111 port 54160 Feb 20 07:52:26 np0005625201 sshd[46312]: Received disconnect from 35.188.112.111 port 54160:11: Bye Bye [preauth] Feb 20 07:52:26 np0005625201 sshd[46312]: Disconnected from invalid user ca 35.188.112.111 port 54160 [preauth] Feb 20 07:52:26 np0005625201 sshd[46309]: Disconnecting invalid user dock 185.246.128.171 port 47878: Change of username or service not allowed: (dock,ssh-connection) -> (mysql,ssh-connection) [preauth] Feb 20 07:52:26 np0005625201 sudo[46242]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:26 np0005625201 sudo[46340]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tkpwunqenlpfxjfinkigwcrhsjorhuqp ; /usr/bin/python3 Feb 20 07:52:26 np0005625201 sudo[46340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:28 np0005625201 sudo[46340]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:28 np0005625201 sudo[46431]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-itvesyuhqwipwksvftfcjxgtjzjasjuj ; /usr/bin/python3 Feb 20 07:52:28 np0005625201 sudo[46431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:29 np0005625201 sshd[46347]: Invalid user mysql from 185.246.128.171 port 55108 Feb 20 07:52:32 np0005625201 sshd[46347]: Disconnecting invalid user mysql 185.246.128.171 port 55108: Change of username or service not allowed: (mysql,ssh-connection) -> (gitlab-runner,ssh-connection) [preauth] Feb 20 07:52:37 np0005625201 sshd[46496]: Invalid user gitlab-runner from 185.246.128.171 port 30421 Feb 20 07:52:38 np0005625201 sudo[46431]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:38 np0005625201 sudo[46525]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fqhlbbabobcxgyhbdbaejddlksbctvyx ; /usr/bin/python3 Feb 20 07:52:38 np0005625201 sudo[46525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:38 np0005625201 sshd[46496]: Disconnecting invalid user gitlab-runner 185.246.128.171 port 30421: Change of username or service not allowed: (gitlab-runner,ssh-connection) -> (aovalle,ssh-connection [preauth] Feb 20 07:52:41 np0005625201 sudo[46580]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:52:41 np0005625201 sudo[46580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:52:41 np0005625201 sudo[46580]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:41 np0005625201 sudo[46595]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:52:41 np0005625201 sudo[46595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:52:43 np0005625201 sshd[46578]: Invalid user aovalle from 185.246.128.171 port 58125 Feb 20 07:52:44 np0005625201 sshd[46578]: Disconnecting invalid user aovalle 185.246.128.171 port 58125: Change of username or service not allowed: (aovalle,ssh-connection) -> (vgilli,ssh-connection) [preauth] Feb 20 07:52:44 np0005625201 sudo[46525]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:44 np0005625201 sudo[46693]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mffyzpmkisnpthhqetqhpqvhouchxgou ; /usr/bin/python3 Feb 20 07:52:44 np0005625201 sudo[46595]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:44 np0005625201 sudo[46693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:44 np0005625201 sudo[46702]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:52:44 np0005625201 sudo[46702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:52:44 np0005625201 sudo[46702]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:49 np0005625201 sshd[46760]: Invalid user vgilli from 185.246.128.171 port 26596 Feb 20 07:52:49 np0005625201 sshd[46760]: Disconnecting invalid user vgilli 185.246.128.171 port 26596: Change of username or service not allowed: (vgilli,ssh-connection) -> (qbtuser,ssh-connection) [preauth] Feb 20 07:52:51 np0005625201 sudo[46693]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:51 np0005625201 sudo[46812]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wmejhguvjbeznjxadelqoahxlutturxk ; /usr/bin/python3 Feb 20 07:52:51 np0005625201 sudo[46812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:52 np0005625201 sshd[46775]: Invalid user qbtuser from 185.246.128.171 port 47546 Feb 20 07:52:53 np0005625201 sshd[46775]: Disconnecting invalid user qbtuser 185.246.128.171 port 47546: Change of username or service not allowed: (qbtuser,ssh-connection) -> (volumio,ssh-connection) [preauth] Feb 20 07:52:58 np0005625201 sshd[46866]: Invalid user volumio from 185.246.128.171 port 9844 Feb 20 07:52:58 np0005625201 sudo[46812]: pam_unix(sudo:session): session closed for user root Feb 20 07:52:59 np0005625201 sudo[47032]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xbivejtfqqfwfuztatbwxnznonzmrxat ; /usr/bin/python3 Feb 20 07:52:59 np0005625201 sudo[47032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:52:59 np0005625201 sshd[46866]: Disconnecting invalid user volumio 185.246.128.171 port 9844: Change of username or service not allowed: (volumio,ssh-connection) -> (keycloak,ssh-connection) [preauth] Feb 20 07:53:03 np0005625201 sudo[47032]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:03 np0005625201 sudo[47123]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkzntuhxmagywzekvxplgaldmmwmqdpg ; /usr/bin/python3 Feb 20 07:53:03 np0005625201 sudo[47123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:04 np0005625201 sshd[47084]: Invalid user keycloak from 185.246.128.171 port 38752 Feb 20 07:53:05 np0005625201 sshd[47176]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:53:06 np0005625201 sudo[47123]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:06 np0005625201 sudo[47215]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oxpxbgwvlgpucvyvjtnbpncfsinypwxa ; /usr/bin/python3 Feb 20 07:53:06 np0005625201 sudo[47215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:06 np0005625201 sshd[47084]: Disconnecting invalid user keycloak 185.246.128.171 port 38752: Change of username or service not allowed: (keycloak,ssh-connection) -> (adm,ssh-connection) [preauth] Feb 20 07:53:09 np0005625201 sshd[47304]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:53:12 np0005625201 sshd[47303]: Disconnecting authenticating user adm 185.246.128.171 port 14998: Change of username or service not allowed: (adm,ssh-connection) -> (telegram,ssh-connection) [preauth] Feb 20 07:53:13 np0005625201 sshd[47318]: Invalid user telegram from 185.246.128.171 port 35476 Feb 20 07:53:14 np0005625201 sshd[47318]: Disconnecting invalid user telegram 185.246.128.171 port 35476: Change of username or service not allowed: (telegram,ssh-connection) -> (tempuser,ssh-connection) [preauth] Feb 20 07:53:16 np0005625201 sshd[47323]: Invalid user tempuser from 185.246.128.171 port 46821 Feb 20 07:53:17 np0005625201 sshd[47323]: Disconnecting invalid user tempuser 185.246.128.171 port 46821: Change of username or service not allowed: (tempuser,ssh-connection) -> (wss,ssh-connection) [preauth] Feb 20 07:53:19 np0005625201 sudo[47215]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:19 np0005625201 sudo[47478]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dqnignsfxgpesakniigymqrpslpceggh ; /usr/bin/python3 Feb 20 07:53:19 np0005625201 sudo[47478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:22 np0005625201 sshd[47450]: Invalid user wss from 185.246.128.171 port 62080 Feb 20 07:53:24 np0005625201 sshd[47450]: Disconnecting invalid user wss 185.246.128.171 port 62080: Change of username or service not allowed: (wss,ssh-connection) -> (user,ssh-connection) [preauth] Feb 20 07:53:28 np0005625201 sshd[47543]: Invalid user user from 185.246.128.171 port 41573 Feb 20 07:53:30 np0005625201 sudo[47478]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:30 np0005625201 sudo[47938]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lwpoxvojswbjpctenlysyvpasmoobmen ; /usr/bin/python3 Feb 20 07:53:30 np0005625201 sudo[47938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:33 np0005625201 sudo[47938]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:33 np0005625201 sudo[48027]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kdsdkocebesfsoznbcbqnkszvvanscpz ; /usr/bin/python3 Feb 20 07:53:33 np0005625201 sudo[48027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:35 np0005625201 sshd[47543]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 41573 ssh2 [preauth] Feb 20 07:53:35 np0005625201 sshd[47543]: Disconnecting invalid user user 185.246.128.171 port 41573: Too many authentication failures [preauth] Feb 20 07:53:37 np0005625201 sudo[48027]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:37 np0005625201 sshd[48091]: Invalid user admin from 162.19.250.18 port 44386 Feb 20 07:53:37 np0005625201 sudo[48119]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dffsaiqpwpzbnrjgvwduoxbvdtcvgnct ; /usr/bin/python3 Feb 20 07:53:37 np0005625201 sudo[48119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:37 np0005625201 sshd[48091]: Received disconnect from 162.19.250.18 port 44386:11: Bye Bye [preauth] Feb 20 07:53:37 np0005625201 sshd[48091]: Disconnected from invalid user admin 162.19.250.18 port 44386 [preauth] Feb 20 07:53:41 np0005625201 sudo[48119]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:41 np0005625201 sudo[48225]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ofvfludgtaugbackqavyjswjrsaxtplq ; /usr/bin/python3 Feb 20 07:53:41 np0005625201 sudo[48225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:43 np0005625201 sudo[48225]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:43 np0005625201 sshd[48146]: Invalid user user from 185.246.128.171 port 41851 Feb 20 07:53:43 np0005625201 sudo[48304]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vlgzdlyjdxrebjozsrvafysstbjenxed ; /usr/bin/python3 Feb 20 07:53:43 np0005625201 sudo[48304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:45 np0005625201 sudo[48304]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:45 np0005625201 sshd[48332]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:53:45 np0005625201 sudo[48385]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sfdkultfsghbdmadhjvolwmnihkjqcti ; /usr/bin/python3 Feb 20 07:53:45 np0005625201 sudo[48385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:47 np0005625201 sshd[48146]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 41851 ssh2 [preauth] Feb 20 07:53:47 np0005625201 sshd[48146]: Disconnecting invalid user user 185.246.128.171 port 41851: Too many authentication failures [preauth] Feb 20 07:53:51 np0005625201 sudo[48618]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:53:51 np0005625201 sudo[48618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:53:51 np0005625201 sudo[48618]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:51 np0005625201 sudo[48633]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:53:51 np0005625201 sudo[48633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:53:51 np0005625201 sudo[48385]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:51 np0005625201 sudo[48690]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fizxjudcmrmidjnqnfhgshqhnvqusncv ; /usr/bin/python3 Feb 20 07:53:51 np0005625201 sudo[48690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:51 np0005625201 sudo[48633]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:52 np0005625201 sudo[48735]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:53:52 np0005625201 sudo[48735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:53:52 np0005625201 sudo[48735]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:52 np0005625201 sshd[48750]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:53:53 np0005625201 sudo[48690]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:53 np0005625201 sudo[48815]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnumyorjwkzjhrlhiowumznhevxlhqxn ; /usr/bin/python3 Feb 20 07:53:53 np0005625201 sudo[48815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:53 np0005625201 sshd[48617]: Invalid user user from 185.246.128.171 port 40929 Feb 20 07:53:55 np0005625201 sudo[48815]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:55 np0005625201 sudo[48894]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wohokurdigwubxzxvrxankwxvslytmhd ; /usr/bin/python3 Feb 20 07:53:55 np0005625201 sudo[48894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:53:56 np0005625201 sshd[48922]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:53:57 np0005625201 sshd[48617]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 40929 ssh2 [preauth] Feb 20 07:53:57 np0005625201 sshd[48617]: Disconnecting invalid user user 185.246.128.171 port 40929: Too many authentication failures [preauth] Feb 20 07:53:58 np0005625201 sudo[48894]: pam_unix(sudo:session): session closed for user root Feb 20 07:53:58 np0005625201 sudo[48984]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hwblitirqkqyuiinjeyzwwzyvzjdftvf ; /usr/bin/python3 Feb 20 07:53:58 np0005625201 sudo[48984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:02 np0005625201 sshd[49013]: Invalid user user from 185.246.128.171 port 23040 Feb 20 07:54:04 np0005625201 sudo[48984]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:04 np0005625201 sshd[49013]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 23040 ssh2 [preauth] Feb 20 07:54:04 np0005625201 sshd[49013]: Disconnecting invalid user user 185.246.128.171 port 23040: Too many authentication failures [preauth] Feb 20 07:54:04 np0005625201 sudo[49092]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lasxiwjhpyighkcsdzprnqcsuexzydfz ; /usr/bin/python3 Feb 20 07:54:04 np0005625201 sudo[49092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:06 np0005625201 sudo[49092]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:06 np0005625201 sudo[49186]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wakfgxekxivlmanfyibuuzohdwuyurnf ; /usr/bin/python3 Feb 20 07:54:06 np0005625201 sudo[49186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:06 np0005625201 sshd[49121]: Invalid user user from 185.246.128.171 port 59173 Feb 20 07:54:09 np0005625201 sudo[49186]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:09 np0005625201 sudo[49279]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kprhaxsssdtanngiztqqhrqtcchvyrek ; /usr/bin/python3 Feb 20 07:54:09 np0005625201 sudo[49279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:12 np0005625201 sudo[49279]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:12 np0005625201 sudo[49371]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tqawerriiainkekmbbrraavrtlhjbacn ; /usr/bin/python3 Feb 20 07:54:12 np0005625201 sudo[49371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:12 np0005625201 sshd[49121]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 59173 ssh2 [preauth] Feb 20 07:54:12 np0005625201 sshd[49121]: Disconnecting invalid user user 185.246.128.171 port 59173: Too many authentication failures [preauth] Feb 20 07:54:15 np0005625201 sudo[49371]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:15 np0005625201 sudo[49464]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-raeggtivysdlylorurhrjnzotzvokvkq ; /usr/bin/python3 Feb 20 07:54:15 np0005625201 sudo[49464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:17 np0005625201 sshd[49425]: Invalid user user from 185.246.128.171 port 44936 Feb 20 07:54:18 np0005625201 sudo[49464]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:18 np0005625201 sudo[49555]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mecsapavxoginxsvfhlulyipfhkiskhe ; /usr/bin/python3 Feb 20 07:54:18 np0005625201 sudo[49555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:19 np0005625201 sshd[49425]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 44936 ssh2 [preauth] Feb 20 07:54:19 np0005625201 sshd[49425]: Disconnecting invalid user user 185.246.128.171 port 44936: Too many authentication failures [preauth] Feb 20 07:54:20 np0005625201 sudo[49555]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:21 np0005625201 sudo[49647]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cbfatxnmfnclteedwkizfbqffhakaffm ; /usr/bin/python3 Feb 20 07:54:21 np0005625201 sudo[49647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:21 np0005625201 sshd[49608]: Invalid user user from 185.246.128.171 port 13707 Feb 20 07:54:23 np0005625201 sshd[49608]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.171 port 13707 ssh2 [preauth] Feb 20 07:54:23 np0005625201 sshd[49608]: Disconnecting invalid user user 185.246.128.171 port 13707: Too many authentication failures [preauth] Feb 20 07:54:23 np0005625201 sudo[49647]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:23 np0005625201 sudo[49738]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vyxesoewtkzutrxklcwbebhzebndpbzt ; /usr/bin/python3 Feb 20 07:54:23 np0005625201 sudo[49738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:26 np0005625201 sshd[49766]: Invalid user user from 185.246.128.171 port 37099 Feb 20 07:54:26 np0005625201 sudo[49738]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:26 np0005625201 sudo[49831]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrluvuwtozulzhfigpdvjevpgplziman ; /usr/bin/python3 Feb 20 07:54:26 np0005625201 sudo[49831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:27 np0005625201 sshd[49766]: Disconnecting invalid user user 185.246.128.171 port 37099: Change of username or service not allowed: (user,ssh-connection) -> (dbadmin,ssh-connection) [preauth] Feb 20 07:54:28 np0005625201 sudo[49831]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:28 np0005625201 sshd[49885]: Invalid user dbadmin from 185.246.128.171 port 55693 Feb 20 07:54:28 np0005625201 sudo[49926]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qhkiptkepecmfekhhejvmeyoscaivixh ; /usr/bin/python3 Feb 20 07:54:28 np0005625201 sudo[49926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:30 np0005625201 sshd[49885]: Disconnecting invalid user dbadmin 185.246.128.171 port 55693: Change of username or service not allowed: (dbadmin,ssh-connection) -> (Cisco,ssh-connection) [preauth] Feb 20 07:54:31 np0005625201 sudo[49926]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:31 np0005625201 sudo[50016]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqlozdtingmzwcjqntsvparchhkehbti ; /usr/bin/python3 Feb 20 07:54:31 np0005625201 sudo[50016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:34 np0005625201 sudo[50016]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:34 np0005625201 sudo[50110]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pdbndkhvbdbfqhsjsusptksaojbxtnpq ; /usr/bin/python3 Feb 20 07:54:34 np0005625201 sudo[50110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:35 np0005625201 sshd[50002]: Invalid user Cisco from 185.246.128.171 port 8538 Feb 20 07:54:36 np0005625201 sshd[50002]: Disconnecting invalid user Cisco 185.246.128.171 port 8538: Change of username or service not allowed: (Cisco,ssh-connection) -> (tst,ssh-connection) [preauth] Feb 20 07:54:37 np0005625201 sudo[50110]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:37 np0005625201 sudo[50202]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zugtfwblfxddglzzgnoowxymcaflrbgd ; /usr/bin/python3 Feb 20 07:54:37 np0005625201 sudo[50202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:39 np0005625201 sshd[50182]: Invalid user tst from 185.246.128.171 port 45313 Feb 20 07:54:39 np0005625201 sshd[50182]: Disconnecting invalid user tst 185.246.128.171 port 45313: Change of username or service not allowed: (tst,ssh-connection) -> (ts,ssh-connection) [preauth] Feb 20 07:54:40 np0005625201 sudo[50202]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:40 np0005625201 sudo[50295]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lzuzfednkzawqeyrmfscsekselldizpj ; /usr/bin/python3 Feb 20 07:54:40 np0005625201 sudo[50295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:42 np0005625201 sshd[50351]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:54:43 np0005625201 sudo[50295]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:43 np0005625201 sudo[50392]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-erinjdltppfifstkglyxclfyovnatjit ; /usr/bin/python3 Feb 20 07:54:43 np0005625201 sudo[50392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:43 np0005625201 sshd[50321]: Invalid user ts from 185.246.128.171 port 60851 Feb 20 07:54:44 np0005625201 sshd[50321]: Disconnecting invalid user ts 185.246.128.171 port 60851: Change of username or service not allowed: (ts,ssh-connection) -> (anon,ssh-connection) [preauth] Feb 20 07:54:45 np0005625201 sshd[50444]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:54:46 np0005625201 sudo[50392]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:46 np0005625201 sudo[50486]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oqmjzcrmvdyccuaqnrjmdoqlwrcbkmbm ; /usr/bin/python3 Feb 20 07:54:46 np0005625201 sudo[50486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:48 np0005625201 sshd[50446]: Invalid user anon from 185.246.128.171 port 21156 Feb 20 07:54:49 np0005625201 sshd[50446]: Disconnecting invalid user anon 185.246.128.171 port 21156: Change of username or service not allowed: (anon,ssh-connection) -> (user15,ssh-connection) [preauth] Feb 20 07:54:49 np0005625201 sudo[50486]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:49 np0005625201 sshd[50563]: error: kex_exchange_identification: Connection closed by remote host Feb 20 07:54:49 np0005625201 sshd[50563]: Connection closed by 92.118.39.76 port 39992 Feb 20 07:54:50 np0005625201 sudo[50579]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yqsxrcbvvqpmxflbxvgbphwgpvfgvrsk ; /usr/bin/python3 Feb 20 07:54:50 np0005625201 sudo[50579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:51 np0005625201 sshd[50564]: Invalid user user15 from 185.246.128.171 port 50911 Feb 20 07:54:51 np0005625201 sshd[50564]: Disconnecting invalid user user15 185.246.128.171 port 50911: Change of username or service not allowed: (user15,ssh-connection) -> (qemu,ssh-connection) [preauth] Feb 20 07:54:52 np0005625201 sudo[50620]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:54:52 np0005625201 sudo[50620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:54:52 np0005625201 sudo[50620]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:52 np0005625201 sudo[50635]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:54:52 np0005625201 sudo[50635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:54:53 np0005625201 sudo[50635]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:53 np0005625201 sudo[50681]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:54:53 np0005625201 sudo[50681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:54:53 np0005625201 sudo[50681]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:55 np0005625201 sudo[50579]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:55 np0005625201 sudo[50722]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nvopgwedluoewelernfqnectjgjqscek ; /usr/bin/python3 Feb 20 07:54:55 np0005625201 sudo[50722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:56 np0005625201 sudo[50722]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:56 np0005625201 sudo[50750]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mvfguxileiahkpbqapaaxffrfdpylrcl ; /usr/bin/python3 Feb 20 07:54:56 np0005625201 sudo[50750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:56 np0005625201 sudo[50750]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:56 np0005625201 sudo[50799]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-phhjzkrhlqzfigcbnapbzoskyqcczwsw ; /usr/bin/python3 Feb 20 07:54:56 np0005625201 sudo[50799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:57 np0005625201 sudo[50799]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:57 np0005625201 sudo[50842]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxravwixrwngkbpivcijlaogfwtrgets ; /usr/bin/python3 Feb 20 07:54:57 np0005625201 sudo[50842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:57 np0005625201 sudo[50842]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:57 np0005625201 sudo[50872]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwmsskxcxfxezkywbefmyygpcutelbbu ; /usr/bin/python3 Feb 20 07:54:57 np0005625201 sudo[50872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:58 np0005625201 sshd[50650]: Disconnecting authenticating user qemu 185.246.128.171 port 1624: Change of username or service not allowed: (qemu,ssh-connection) -> (scpuser,ssh-connection) [preauth] Feb 20 07:54:58 np0005625201 sudo[50872]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:58 np0005625201 sudo[50894]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kiakwqzbwtlkhdwpkaxqnpbwnrksfslm ; /usr/bin/python3 Feb 20 07:54:58 np0005625201 sudo[50894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:58 np0005625201 sudo[50894]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:59 np0005625201 sudo[50944]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jeyjuqiqexjsjerfbqcfotdmozboqaem ; /usr/bin/python3 Feb 20 07:54:59 np0005625201 sudo[50944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:59 np0005625201 sudo[50944]: pam_unix(sudo:session): session closed for user root Feb 20 07:54:59 np0005625201 sudo[50962]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nltknsaoklfpmdsoorjydpmczwbxwila ; /usr/bin/python3 Feb 20 07:54:59 np0005625201 sudo[50962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:54:59 np0005625201 sudo[50962]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:00 np0005625201 sudo[51067]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ptnbitokulktepjcimtehlntppjgrrsu ; ANSIBLE_ASYNC_DIR=/tmp/.ansible_async /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574100.0297549-87026-223576457551294/async_wrapper.py 800106454437 3600 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574100.0297549-87026-223576457551294/AnsiballZ_command.py _ Feb 20 07:55:00 np0005625201 sudo[51067]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 07:55:00 np0005625201 sudo[51067]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:00 np0005625201 sudo[51088]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qskppxohdnxbhtuigcftmcawqdvzagdq ; /usr/bin/python3 Feb 20 07:55:00 np0005625201 sudo[51088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:00 np0005625201 sudo[51088]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:03 np0005625201 sshd[51050]: Invalid user scpuser from 185.246.128.171 port 47172 Feb 20 07:55:03 np0005625201 sshd[51050]: Disconnecting invalid user scpuser 185.246.128.171 port 47172: Change of username or service not allowed: (scpuser,ssh-connection) -> (wang,ssh-connection) [preauth] Feb 20 07:55:07 np0005625201 sshd[51212]: Invalid user wang from 185.246.128.171 port 10596 Feb 20 07:55:07 np0005625201 sshd[51212]: Disconnecting invalid user wang 185.246.128.171 port 10596: Change of username or service not allowed: (wang,ssh-connection) -> (1234,ssh-connection) [preauth] Feb 20 07:55:10 np0005625201 sshd[51220]: Invalid user 1234 from 185.246.128.171 port 27322 Feb 20 07:55:10 np0005625201 sshd[51220]: Disconnecting invalid user 1234 185.246.128.171 port 27322: Change of username or service not allowed: (1234,ssh-connection) -> (security,ssh-connection) [preauth] Feb 20 07:55:11 np0005625201 sudo[51317]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fibrohhgvnmvxyuatvqzpzpiquulwcmt ; /usr/bin/python3 Feb 20 07:55:11 np0005625201 sudo[51317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:11 np0005625201 sudo[51317]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:13 np0005625201 groupadd[51326]: group added to /etc/group: name=haclient, GID=189 Feb 20 07:55:13 np0005625201 groupadd[51326]: group added to /etc/gshadow: name=haclient Feb 20 07:55:13 np0005625201 groupadd[51326]: new group: name=haclient, GID=189 Feb 20 07:55:13 np0005625201 useradd[51333]: new user: name=hacluster, UID=189, GID=189, home=/home/hacluster, shell=/sbin/nologin, from=none Feb 20 07:55:14 np0005625201 sshd[41952]: Received signal 15; terminating. Feb 20 07:55:14 np0005625201 sshd[51358]: Server listening on 0.0.0.0 port 22. Feb 20 07:55:14 np0005625201 sshd[51358]: Server listening on :: port 22. Feb 20 07:55:14 np0005625201 sshd[51320]: Invalid user security from 185.246.128.171 port 50553 Feb 20 07:55:16 np0005625201 sshd[51320]: Disconnecting invalid user security 185.246.128.171 port 50553: Change of username or service not allowed: (security,ssh-connection) -> (webuser,ssh-connection) [preauth] Feb 20 07:55:17 np0005625201 sshd[53077]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:55:19 np0005625201 sshd[53044]: Invalid user webuser from 185.246.128.171 port 13098 Feb 20 07:55:21 np0005625201 sudo[53162]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yuotbykshkdbszuikgzlemhdaqvurjyy ; /usr/bin/python3 Feb 20 07:55:21 np0005625201 sudo[53162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:21 np0005625201 sudo[53162]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:21 np0005625201 sshd[53044]: Disconnecting invalid user webuser 185.246.128.171 port 13098: Change of username or service not allowed: (webuser,ssh-connection) -> (asterisk,ssh-connection) [preauth] Feb 20 07:55:25 np0005625201 sshd[53210]: Invalid user asterisk from 185.246.128.171 port 53317 Feb 20 07:55:26 np0005625201 usermod[53489]: add 'hacluster' to group 'haclient' Feb 20 07:55:26 np0005625201 usermod[53489]: add 'hacluster' to shadow group 'haclient' Feb 20 07:55:26 np0005625201 sshd[53210]: Disconnecting invalid user asterisk 185.246.128.171 port 53317: Change of username or service not allowed: (asterisk,ssh-connection) -> (mark,ssh-connection) [preauth] Feb 20 07:55:29 np0005625201 sshd[53566]: Invalid user mark from 185.246.128.171 port 15717 Feb 20 07:55:30 np0005625201 sshd[53566]: Disconnecting invalid user mark 185.246.128.171 port 15717: Change of username or service not allowed: (mark,ssh-connection) -> (hadoop,ssh-connection) [preauth] Feb 20 07:55:31 np0005625201 sudo[53757]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-grjvghqkupmvgcjpctkwvelmsvlsvzfa ; /usr/bin/python3 Feb 20 07:55:31 np0005625201 sudo[53757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:31 np0005625201 sshd[53725]: Invalid user hadoop from 185.246.128.171 port 31376 Feb 20 07:55:31 np0005625201 sudo[53757]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:33 np0005625201 sshd[53725]: Disconnecting invalid user hadoop 185.246.128.171 port 31376: Change of username or service not allowed: (hadoop,ssh-connection) -> (user07,ssh-connection) [preauth] Feb 20 07:55:33 np0005625201 sshd[53765]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:55:33 np0005625201 sshd[53767]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:55:35 np0005625201 sshd[53764]: Invalid user user07 from 185.246.128.171 port 47995 Feb 20 07:55:36 np0005625201 sshd[53764]: Disconnecting invalid user user07 185.246.128.171 port 47995: Change of username or service not allowed: (user07,ssh-connection) -> (moth3r,ssh-connection) [preauth] Feb 20 07:55:41 np0005625201 sshd[53770]: Invalid user moth3r from 185.246.128.171 port 17831 Feb 20 07:55:41 np0005625201 sshd[53770]: Disconnecting invalid user moth3r 185.246.128.171 port 17831: Change of username or service not allowed: (moth3r,ssh-connection) -> (gestion,ssh-connection) [preauth] Feb 20 07:55:42 np0005625201 sudo[53788]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyvvdwqpcqxqcadxkpozjabtetiroubr ; /usr/bin/python3 Feb 20 07:55:42 np0005625201 sudo[53788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:42 np0005625201 sudo[53788]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:45 np0005625201 sshd[53798]: Invalid user gestion from 185.246.128.171 port 38391 Feb 20 07:55:46 np0005625201 sshd[53798]: Disconnecting invalid user gestion 185.246.128.171 port 38391: Change of username or service not allowed: (gestion,ssh-connection) -> (hasan,ssh-connection) [preauth] Feb 20 07:55:50 np0005625201 sshd[53924]: Invalid user hasan from 185.246.128.171 port 8748 Feb 20 07:55:51 np0005625201 sshd[53924]: Disconnecting invalid user hasan 185.246.128.171 port 8748: Change of username or service not allowed: (hasan,ssh-connection) -> (mongod,ssh-connection) [preauth] Feb 20 07:55:52 np0005625201 sudo[53942]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjhfqgsgogktitojbzuaukqcwofnlplc ; /usr/bin/python3 Feb 20 07:55:52 np0005625201 sudo[53942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:55:52 np0005625201 sudo[53942]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:52 np0005625201 sshd[53927]: Invalid user mongod from 185.246.128.171 port 27881 Feb 20 07:55:53 np0005625201 sshd[53927]: Disconnecting invalid user mongod 185.246.128.171 port 27881: Change of username or service not allowed: (mongod,ssh-connection) -> (hacluster,ssh-connection) [preauth] Feb 20 07:55:53 np0005625201 sudo[53962]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:55:53 np0005625201 sudo[53962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:55:53 np0005625201 sudo[53962]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:53 np0005625201 sudo[53977]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:55:53 np0005625201 sudo[53977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:55:54 np0005625201 sudo[53977]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:55 np0005625201 sudo[54024]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:55:55 np0005625201 sudo[54024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:55:55 np0005625201 sudo[54024]: pam_unix(sudo:session): session closed for user root Feb 20 07:55:58 np0005625201 sshd[54041]: Invalid user solana from 92.118.39.72 port 36526 Feb 20 07:55:58 np0005625201 sshd[54041]: Connection closed by invalid user solana 92.118.39.72 port 36526 [preauth] Feb 20 07:56:01 np0005625201 sshd[54033]: Disconnecting authenticating user hacluster 185.246.128.171 port 50257: Change of username or service not allowed: (hacluster,ssh-connection) -> (asus,ssh-connection) [preauth] Feb 20 07:56:02 np0005625201 sudo[54056]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uoxlltqebrhvdjcszpfdktfnbfswestv ; /usr/bin/python3 Feb 20 07:56:02 np0005625201 sudo[54056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:02 np0005625201 sudo[54056]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:04 np0005625201 sshd[54059]: Invalid user asus from 185.246.128.171 port 32213 Feb 20 07:56:06 np0005625201 sshd[54059]: Disconnecting invalid user asus 185.246.128.171 port 32213: Change of username or service not allowed: (asus,ssh-connection) -> (astra,ssh-connection) [preauth] Feb 20 07:56:11 np0005625201 sshd[54078]: Invalid user astra from 185.246.128.171 port 6761 Feb 20 07:56:11 np0005625201 sshd[54078]: Disconnecting invalid user astra 185.246.128.171 port 6761: Change of username or service not allowed: (astra,ssh-connection) -> (Grace,ssh-connection) [preauth] Feb 20 07:56:12 np0005625201 sshd[54082]: Invalid user Grace from 185.246.128.171 port 23977 Feb 20 07:56:13 np0005625201 sudo[54097]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qymhkmluqfjxcacfjfwymbbzhavwplbs ; /usr/bin/python3 Feb 20 07:56:13 np0005625201 sudo[54097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:13 np0005625201 sudo[54097]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:13 np0005625201 sshd[54082]: Disconnecting invalid user Grace 185.246.128.171 port 23977: Change of username or service not allowed: (Grace,ssh-connection) -> (prod,ssh-connection) [preauth] Feb 20 07:56:19 np0005625201 sshd[54118]: Invalid user prod from 185.246.128.171 port 49219 Feb 20 07:56:20 np0005625201 sshd[54118]: Disconnecting invalid user prod 185.246.128.171 port 49219: Change of username or service not allowed: (prod,ssh-connection) -> (vodafone,ssh-connection) [preauth] Feb 20 07:56:22 np0005625201 sshd[54120]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:56:23 np0005625201 sudo[54137]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dskwxsnnqplygkzppnrzznjvtpgzrhyc ; /usr/bin/python3 Feb 20 07:56:23 np0005625201 sudo[54137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:23 np0005625201 sudo[54137]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:23 np0005625201 sshd[54121]: Invalid user vodafone from 185.246.128.171 port 24006 Feb 20 07:56:24 np0005625201 sudo[54153]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jfclseybgwvcpwqrdmzrbrmwngxrpfjy ; /usr/bin/python3 Feb 20 07:56:24 np0005625201 sudo[54153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:24 np0005625201 sshd[54121]: Disconnecting invalid user vodafone 185.246.128.171 port 24006: Change of username or service not allowed: (vodafone,ssh-connection) -> (andre,ssh-connection) [preauth] Feb 20 07:56:24 np0005625201 sudo[54153]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:24 np0005625201 sudo[54171]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-juiugkbmbsxhrqwghzwywmpmovstvzja ; /usr/bin/python3 Feb 20 07:56:24 np0005625201 sudo[54171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:24 np0005625201 sudo[54171]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:24 np0005625201 sshd[54156]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:56:25 np0005625201 sudo[54219]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihftmggxovzvqmvrtcqpleehvlodwiug ; /usr/bin/python3 Feb 20 07:56:25 np0005625201 sudo[54219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:25 np0005625201 sudo[54219]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:25 np0005625201 sudo[54263]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xedprapdcttyvufjfkazycfmjwgqewqi ; /usr/bin/python3 Feb 20 07:56:25 np0005625201 sudo[54263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:25 np0005625201 sudo[54263]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:25 np0005625201 sudo[54294]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zmjdyproovoxybdqsajngntzzoefkbkr ; /usr/bin/python3 Feb 20 07:56:25 np0005625201 sudo[54294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:26 np0005625201 sudo[54294]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:26 np0005625201 sudo[54310]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mjdkkxhnrevrkadlxxnxuqwtvoukebdr ; /usr/bin/python3 Feb 20 07:56:26 np0005625201 sudo[54310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:26 np0005625201 sudo[54310]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:27 np0005625201 sudo[54397]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ocxflblqawudxirefeaggphbftjvxydd ; /usr/bin/python3 Feb 20 07:56:27 np0005625201 sudo[54397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:27 np0005625201 sshd[54221]: Invalid user andre from 185.246.128.171 port 42328 Feb 20 07:56:27 np0005625201 sudo[54397]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:27 np0005625201 sudo[54416]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhvfvaolftloyjlyjmtguhxdtcvaaqkt ; /usr/bin/python3 Feb 20 07:56:27 np0005625201 sudo[54416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:27 np0005625201 sudo[54416]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:27 np0005625201 sudo[54432]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znxqpyaanqrdicrchoirdtkbnsasxili ; /usr/bin/python3 Feb 20 07:56:27 np0005625201 sudo[54432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:28 np0005625201 sudo[54432]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:28 np0005625201 sshd[54221]: Disconnecting invalid user andre 185.246.128.171 port 42328: Change of username or service not allowed: (andre,ssh-connection) -> (operator,ssh-connection) [preauth] Feb 20 07:56:28 np0005625201 sudo[54448]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gtaujvprmjkueygqqsmfeoghwbcyiyyp ; /usr/bin/python3 Feb 20 07:56:28 np0005625201 sudo[54448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:28 np0005625201 sudo[54448]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:28 np0005625201 sudo[54464]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jrwladmsequpwbehsgfrtftholiubkfi ; /usr/bin/python3 Feb 20 07:56:28 np0005625201 sudo[54464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:29 np0005625201 sudo[54464]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:29 np0005625201 sudo[54481]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-unbdqdiztpiyulipwvdbnbywkqwgccjc ; /usr/bin/python3 Feb 20 07:56:29 np0005625201 sudo[54481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:30 np0005625201 sudo[54481]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:30 np0005625201 sudo[54523]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-immsiientniwfctenuhgjiieuyutbkqe ; /usr/bin/python3 Feb 20 07:56:30 np0005625201 sudo[54523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:56:36 np0005625201 sshd[54467]: Disconnecting authenticating user operator 185.246.128.171 port 5708: Change of username or service not allowed: (operator,ssh-connection) -> (tazos,ssh-connection) [preauth] Feb 20 07:56:42 np0005625201 sshd[56196]: Invalid user tazos from 185.246.128.171 port 55079 Feb 20 07:56:42 np0005625201 sshd[56196]: Disconnecting invalid user tazos 185.246.128.171 port 55079: Change of username or service not allowed: (tazos,ssh-connection) -> (ken,ssh-connection) [preauth] Feb 20 07:56:46 np0005625201 sshd[58185]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:56:49 np0005625201 sshd[57965]: Invalid user ken from 185.246.128.171 port 35294 Feb 20 07:56:50 np0005625201 sshd[57965]: Disconnecting invalid user ken 185.246.128.171 port 35294: Change of username or service not allowed: (ken,ssh-connection) -> (ubuntuserver,ssh-connection) [preauth] Feb 20 07:56:51 np0005625201 runuser[59574]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 07:56:52 np0005625201 runuser[59574]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 07:56:52 np0005625201 runuser[59722]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 07:56:52 np0005625201 runuser[59722]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 07:56:55 np0005625201 sudo[60507]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:56:55 np0005625201 sudo[60507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:56:55 np0005625201 sudo[60507]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:55 np0005625201 sudo[60533]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:56:55 np0005625201 sudo[60533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:56:56 np0005625201 sudo[60533]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:56 np0005625201 sshd[59940]: Invalid user ubuntuserver from 185.246.128.171 port 20606 Feb 20 07:56:56 np0005625201 sudo[60654]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:56:56 np0005625201 sudo[60654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:56:56 np0005625201 sudo[60654]: pam_unix(sudo:session): session closed for user root Feb 20 07:56:57 np0005625201 sshd[59940]: Disconnecting invalid user ubuntuserver 185.246.128.171 port 20606: Change of username or service not allowed: (ubuntuserver,ssh-connection) -> (deployuser,ssh-connecti [preauth] Feb 20 07:57:01 np0005625201 sshd[60824]: Invalid user deployuser from 185.246.128.171 port 55015 Feb 20 07:57:03 np0005625201 sshd[60824]: Disconnecting invalid user deployuser 185.246.128.171 port 55015: Change of username or service not allowed: (deployuser,ssh-connection) -> (victor,ssh-connection) [preauth] Feb 20 07:57:05 np0005625201 sudo[54523]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:06 np0005625201 sudo[60953]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ijaflzyakplnwpyxcacldoyamczjqhiq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:06 np0005625201 sudo[60953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:06 np0005625201 sudo[60953]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:06 np0005625201 sudo[60969]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jvpygtjihhgqzncrnvzefjmrjeubzekf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:06 np0005625201 sudo[60969]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:07 np0005625201 sudo[60969]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:07 np0005625201 sudo[60985]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xgqlbrywkuwvgydsipwjolelxnvfdpyi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:07 np0005625201 sudo[60985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:07 np0005625201 sudo[60985]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:07 np0005625201 sshd[60987]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:57:08 np0005625201 sudo[61037]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jjclehjdcjajezzkygdwudmavhksjvuc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:08 np0005625201 sudo[61037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:08 np0005625201 sudo[61037]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:08 np0005625201 sudo[61080]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zbkbrptqvwjchbrolvaeprjgorqhqlcw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:08 np0005625201 sudo[61080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:08 np0005625201 sudo[61080]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:08 np0005625201 sudo[61142]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bogngrwqacfingcqalzxyxwdmfpfycsd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:08 np0005625201 sudo[61142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:09 np0005625201 sudo[61142]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:09 np0005625201 sudo[61185]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ksinsjvsdgashsfjqulfnozogyiewteu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:09 np0005625201 sudo[61185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:09 np0005625201 sshd[60873]: Invalid user victor from 185.246.128.171 port 25838 Feb 20 07:57:09 np0005625201 sudo[61185]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:10 np0005625201 sudo[61247]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vocpucuupdnwetrckqeqziphoxvozwey ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:10 np0005625201 sudo[61247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:10 np0005625201 sudo[61247]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:10 np0005625201 sshd[60873]: Disconnecting invalid user victor 185.246.128.171 port 25838: Change of username or service not allowed: (victor,ssh-connection) -> (liuyu,ssh-connection) [preauth] Feb 20 07:57:10 np0005625201 sudo[61290]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nwzuaqvizircwvdzoiiferusjkhbilfm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:10 np0005625201 sudo[61290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:10 np0005625201 sudo[61290]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:11 np0005625201 sudo[61352]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jafqylrashmmethiugddaxyezvhowyps ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:11 np0005625201 sudo[61352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:11 np0005625201 sudo[61352]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:11 np0005625201 sudo[61397]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqxxidpinbvrammsmjdgbaoeaguidrsc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:11 np0005625201 sudo[61397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:11 np0005625201 sudo[61397]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:11 np0005625201 sudo[61427]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzrglbpgbvughojvkmjnnzooiqyoxflz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:11 np0005625201 sudo[61427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:12 np0005625201 sshd[61355]: Invalid user liuyu from 185.246.128.171 port 59674 Feb 20 07:57:12 np0005625201 sudo[61427]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:13 np0005625201 sudo[61550]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gxfbwnmumghyrqcxxlxekikkrqvjzuxg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:13 np0005625201 sudo[61550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:13 np0005625201 sudo[61550]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:13 np0005625201 sudo[61593]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hyhqhnlocupqldpmmpyhczreipqroogk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:13 np0005625201 sudo[61593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:13 np0005625201 sshd[61355]: Disconnecting invalid user liuyu 185.246.128.171 port 59674: Change of username or service not allowed: (liuyu,ssh-connection) -> (minima,ssh-connection) [preauth] Feb 20 07:57:13 np0005625201 sudo[61593]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:14 np0005625201 sudo[61655]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jlklaqbiwgtdteeflqsvenkmcpjzvzla ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:14 np0005625201 sudo[61655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:14 np0005625201 sudo[61655]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:14 np0005625201 sudo[61698]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-meqnkcdbtwvfyolqjvotoubnsfvrfmhl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:14 np0005625201 sudo[61698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:14 np0005625201 sudo[61698]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:14 np0005625201 sudo[61728]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aouwavbaxkchpbsdhhedsusndadhdegg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:14 np0005625201 sudo[61728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:15 np0005625201 sudo[61728]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:16 np0005625201 sudo[61822]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gxzbcfgkrhbpvmjxuvlbsorjyamzgkuw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:16 np0005625201 sudo[61822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:16 np0005625201 sudo[61822]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:16 np0005625201 sudo[61838]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cxxabxoftxrwkqpccdyqyirguncsbidl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:16 np0005625201 sudo[61838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:17 np0005625201 sudo[61838]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:17 np0005625201 sshd[61867]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:57:17 np0005625201 sshd[61731]: Invalid user minima from 185.246.128.171 port 18834 Feb 20 07:57:18 np0005625201 sudo[61882]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-busncwsqhmthbgvdliozidlrdnoqfngc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:18 np0005625201 sudo[61882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:18 np0005625201 sudo[62110]: memcached : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 07:57:18 np0005625201 sudo[62110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42457) Feb 20 07:57:19 np0005625201 sudo[62110]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:19 np0005625201 sudo[62403]: qdrouterd : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 07:57:19 np0005625201 sudo[62403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42465) Feb 20 07:57:19 np0005625201 sudo[62403]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:20 np0005625201 sshd[61731]: Disconnecting invalid user minima 185.246.128.171 port 18834: Change of username or service not allowed: (minima,ssh-connection) -> (sftpuser,ssh-connection) [preauth] Feb 20 07:57:20 np0005625201 sudo[62458]: root : PWD=/ ; USER=mysql ; COMMAND=/usr/local/bin/kolla_extend_start Feb 20 07:57:20 np0005625201 sudo[62458]: pam_unix(sudo:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 07:57:21 np0005625201 sudo[62826]: mysql : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_security_reset Feb 20 07:57:21 np0005625201 sudo[62826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42434) Feb 20 07:57:21 np0005625201 sudo[62826]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:22 np0005625201 sudo[62458]: pam_unix(sudo:session): session closed for user mysql Feb 20 07:57:24 np0005625201 sshd[62863]: Invalid user sftpuser from 185.246.128.171 port 61478 Feb 20 07:57:25 np0005625201 sshd[62863]: Disconnecting invalid user sftpuser 185.246.128.171 port 61478: Change of username or service not allowed: (sftpuser,ssh-connection) -> (dmdba,ssh-connection) [preauth] Feb 20 07:57:26 np0005625201 sudo[61882]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:26 np0005625201 sudo[63244]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znfckboarulxedxydzcdnxhoujmdkdne ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:26 np0005625201 sudo[63244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:26 np0005625201 sshd[63203]: Invalid user solana from 92.118.39.76 port 42976 Feb 20 07:57:26 np0005625201 sshd[63203]: Connection closed by invalid user solana 92.118.39.76 port 42976 [preauth] Feb 20 07:57:26 np0005625201 sudo[63244]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:26 np0005625201 sudo[63261]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kdxqcsjznamyqprlhvqefspxdsfgbnzz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:26 np0005625201 sudo[63261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:26 np0005625201 sudo[63261]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:27 np0005625201 sudo[63277]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-piwfrkdwjmleiwydfqnineazgfwdvgqm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:27 np0005625201 sudo[63277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:27 np0005625201 sudo[63277]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:27 np0005625201 sudo[63293]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zydarnrckamkbzwfzpnddcsxfftduzld ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:27 np0005625201 sudo[63293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:27 np0005625201 sudo[63293]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:27 np0005625201 sudo[63354]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qfgwiwqrvaivjhbrjcncfgdcjpqsrqpx ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:27 np0005625201 sudo[63354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:28 np0005625201 sudo[63354]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:28 np0005625201 sudo[63383]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkporewcwniragvjxplyofhrwtwideoe ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:28 np0005625201 sudo[63383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:28 np0005625201 sudo[63383]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:28 np0005625201 sudo[63399]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-khztmhmzuohnqjoptfrzxplpbdbxsiwi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:28 np0005625201 sudo[63399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:29 np0005625201 sudo[63399]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:29 np0005625201 sshd[63230]: Invalid user dmdba from 185.246.128.171 port 21377 Feb 20 07:57:29 np0005625201 sudo[63451]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpuzbjtmetwvmukefiomogplosawdhhh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:29 np0005625201 sudo[63451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:29 np0005625201 sshd[63230]: Disconnecting invalid user dmdba 185.246.128.171 port 21377: Change of username or service not allowed: (dmdba,ssh-connection) -> (inspur,ssh-connection) [preauth] Feb 20 07:57:30 np0005625201 sudo[63451]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:30 np0005625201 sudo[63517]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kludfhgrsouzofmgwsemffqabursrcte ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 07:57:30 np0005625201 sudo[63517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:31 np0005625201 sudo[63517]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:32 np0005625201 sudo[63599]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nvkjzwxvjfijvkegehvcghoenbtulqli ; /usr/bin/python3 Feb 20 07:57:32 np0005625201 sudo[63599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:32 np0005625201 sudo[63599]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:32 np0005625201 sudo[63648]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wyavxbsnjkwtmfkxjkwgtnzydkmwoigv ; /usr/bin/python3 Feb 20 07:57:32 np0005625201 sudo[63648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:32 np0005625201 sudo[63648]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:33 np0005625201 sudo[63691]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-juwqqcmwdqrtlbhyqmzyfcsdvitbxzsa ; /usr/bin/python3 Feb 20 07:57:33 np0005625201 sudo[63691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:33 np0005625201 sudo[63691]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:33 np0005625201 sudo[63722]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dihvzxmfxvhfciilflqmbiubuhevyhgf ; /usr/bin/python3 Feb 20 07:57:33 np0005625201 sudo[63722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:33 np0005625201 sudo[63722]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:34 np0005625201 sudo[63738]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-labczuakyeaxlqsxmzvvtldztfhrnapa ; /usr/bin/python3 Feb 20 07:57:34 np0005625201 sudo[63738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:34 np0005625201 sudo[63738]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:34 np0005625201 sudo[63754]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shafoctyhiamkjrmsbsrmoblnbkngvoo ; /usr/bin/python3 Feb 20 07:57:34 np0005625201 sudo[63754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:57:34 np0005625201 sudo[63754]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:37 np0005625201 sshd[63634]: Invalid user inspur from 185.246.128.171 port 59406 Feb 20 07:57:38 np0005625201 sshd[63634]: Disconnecting invalid user inspur 185.246.128.171 port 59406: Change of username or service not allowed: (inspur,ssh-connection) -> (linaro,ssh-connection) [preauth] Feb 20 07:57:40 np0005625201 sshd[63757]: Invalid user linaro from 185.246.128.171 port 33450 Feb 20 07:57:41 np0005625201 sshd[63757]: Disconnecting invalid user linaro 185.246.128.171 port 33450: Change of username or service not allowed: (linaro,ssh-connection) -> (admin,ssh-connection) [preauth] Feb 20 07:57:45 np0005625201 sshd[63759]: Invalid user admin from 185.246.128.171 port 54236 Feb 20 07:57:49 np0005625201 sshd[63759]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 54236 ssh2 [preauth] Feb 20 07:57:49 np0005625201 sshd[63759]: Disconnecting invalid user admin 185.246.128.171 port 54236: Too many authentication failures [preauth] Feb 20 07:57:52 np0005625201 sshd[63785]: Invalid user admin from 185.246.128.171 port 35473 Feb 20 07:57:52 np0005625201 sshd[63817]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:57:56 np0005625201 sudo[63819]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:57:56 np0005625201 sudo[63819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:57:56 np0005625201 sudo[63819]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:56 np0005625201 sudo[63834]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:57:56 np0005625201 sudo[63834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:57:57 np0005625201 sudo[63834]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:57 np0005625201 sudo[63883]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:57:57 np0005625201 sudo[63883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:57:57 np0005625201 sudo[63883]: pam_unix(sudo:session): session closed for user root Feb 20 07:57:59 np0005625201 sshd[63785]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 35473 ssh2 [preauth] Feb 20 07:57:59 np0005625201 sshd[63785]: Disconnecting invalid user admin 185.246.128.171 port 35473: Too many authentication failures [preauth] Feb 20 07:58:01 np0005625201 sshd[63898]: Invalid user sftp from 122.166.49.42 port 50838 Feb 20 07:58:02 np0005625201 sshd[63898]: Received disconnect from 122.166.49.42 port 50838:11: Bye Bye [preauth] Feb 20 07:58:02 np0005625201 sshd[63898]: Disconnected from invalid user sftp 122.166.49.42 port 50838 [preauth] Feb 20 07:58:02 np0005625201 sshd[63900]: Invalid user admin from 185.246.128.171 port 28929 Feb 20 07:58:05 np0005625201 sshd[63902]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:58:06 np0005625201 sshd[63904]: Invalid user sol from 92.118.39.72 port 46866 Feb 20 07:58:07 np0005625201 sshd[63904]: Connection closed by invalid user sol 92.118.39.72 port 46866 [preauth] Feb 20 07:58:08 np0005625201 sshd[63900]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 28929 ssh2 [preauth] Feb 20 07:58:08 np0005625201 sshd[63900]: Disconnecting invalid user admin 185.246.128.171 port 28929: Too many authentication failures [preauth] Feb 20 07:58:11 np0005625201 sshd[63906]: Invalid user admin from 185.246.128.171 port 18547 Feb 20 07:58:14 np0005625201 sshd[63908]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:58:17 np0005625201 sshd[63906]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 18547 ssh2 [preauth] Feb 20 07:58:17 np0005625201 sshd[63906]: Disconnecting invalid user admin 185.246.128.171 port 18547: Too many authentication failures [preauth] Feb 20 07:58:24 np0005625201 sshd[63910]: Invalid user admin from 185.246.128.171 port 7443 Feb 20 07:58:25 np0005625201 sudo[63967]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:58:25 np0005625201 sudo[63967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:25 np0005625201 sudo[63967]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:26 np0005625201 sudo[63982]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 07:58:26 np0005625201 sudo[63982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:28 np0005625201 sudo[63982]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:29 np0005625201 sshd[63910]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 7443 ssh2 [preauth] Feb 20 07:58:29 np0005625201 sshd[63910]: Disconnecting invalid user admin 185.246.128.171 port 7443: Too many authentication failures [preauth] Feb 20 07:58:33 np0005625201 sudo[64267]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:58:33 np0005625201 sudo[64267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:33 np0005625201 sudo[64267]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:33 np0005625201 sudo[64282]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:58:33 np0005625201 sudo[64282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:33 np0005625201 sudo[64282]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:33 np0005625201 sudo[64297]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 07:58:33 np0005625201 sudo[64297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:34 np0005625201 sudo[64297]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:34 np0005625201 sshd[64263]: Invalid user admin from 185.246.128.171 port 15607 Feb 20 07:58:35 np0005625201 sudo[64469]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:58:35 np0005625201 sudo[64469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:35 np0005625201 sudo[64469]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:35 np0005625201 sudo[64484]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:58:35 np0005625201 sudo[64484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:58:35 np0005625201 sudo[64484]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:38 np0005625201 sshd[64499]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:58:42 np0005625201 sshd[64263]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 15607 ssh2 [preauth] Feb 20 07:58:42 np0005625201 sshd[64263]: Disconnecting invalid user admin 185.246.128.171 port 15607: Too many authentication failures [preauth] Feb 20 07:58:47 np0005625201 sshd[64501]: Invalid user admin from 185.246.128.171 port 35396 Feb 20 07:58:50 np0005625201 sshd[64501]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 35396 ssh2 [preauth] Feb 20 07:58:50 np0005625201 sshd[64501]: Disconnecting invalid user admin 185.246.128.171 port 35396: Too many authentication failures [preauth] Feb 20 07:58:50 np0005625201 sudo[64516]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mklcfprfvascxsnotclbzcpapfkkmhxu ; /usr/bin/python3 Feb 20 07:58:50 np0005625201 sudo[64516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:50 np0005625201 sudo[64516]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:50 np0005625201 sudo[64564]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-meyvpoblzfuxosypnvldlketxewwzbax ; /usr/bin/python3 Feb 20 07:58:50 np0005625201 sudo[64564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:50 np0005625201 sudo[64564]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:51 np0005625201 sudo[64608]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-afjnzhuesrzpxseuawyebtbeyqqhnqms ; /usr/bin/python3 Feb 20 07:58:51 np0005625201 sudo[64608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:51 np0005625201 sudo[64608]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:51 np0005625201 sudo[64638]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hodqgrigeidnhgoljnfyyymexcqhuczv ; /usr/bin/python3 Feb 20 07:58:51 np0005625201 sudo[64638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:53 np0005625201 sudo[64638]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:53 np0005625201 sudo[64747]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rattajawcatsnivsyuxnhxltvufcsbwo ; /usr/bin/python3 Feb 20 07:58:53 np0005625201 sudo[64747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:54 np0005625201 sudo[64747]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:54 np0005625201 sudo[64782]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aomgcncxbedddzpmkhxzcjwausyhvcgr ; /usr/bin/python3 Feb 20 07:58:54 np0005625201 sudo[64782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:58:54 np0005625201 sudo[64782]: pam_unix(sudo:session): session closed for user root Feb 20 07:58:55 np0005625201 sshd[64641]: Invalid user admin from 185.246.128.171 port 11307 Feb 20 07:58:55 np0005625201 sshd[64786]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:59:01 np0005625201 sudo[64801]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lxbjcjoadyzdjgjiulcvvlgjvaeysikd ; /usr/bin/python3 Feb 20 07:59:01 np0005625201 sudo[64801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:01 np0005625201 sudo[64801]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:01 np0005625201 sshd[64641]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 11307 ssh2 [preauth] Feb 20 07:59:01 np0005625201 sshd[64641]: Disconnecting invalid user admin 185.246.128.171 port 11307: Too many authentication failures [preauth] Feb 20 07:59:03 np0005625201 sudo[64819]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jyqlziprucjksqgnhljydfglrouseguo ; /usr/bin/python3 Feb 20 07:59:03 np0005625201 sudo[64819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:03 np0005625201 sudo[64819]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:03 np0005625201 sshd[64804]: Invalid user admin from 185.246.128.171 port 13912 Feb 20 07:59:05 np0005625201 sudo[64835]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qlhnkdandfmwgdfbxvpizvmdzbnurrhy ; /usr/bin/python3 Feb 20 07:59:05 np0005625201 sudo[64835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:05 np0005625201 sudo[64835]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:05 np0005625201 sshd[64804]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 13912 ssh2 [preauth] Feb 20 07:59:05 np0005625201 sshd[64804]: Disconnecting invalid user admin 185.246.128.171 port 13912: Too many authentication failures [preauth] Feb 20 07:59:08 np0005625201 sshd[64838]: Invalid user admin from 185.246.128.171 port 35926 Feb 20 07:59:10 np0005625201 sudo[64885]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhdpgdpmwkbtddfjvmnypsqkcvuvzcty ; /usr/bin/python3 Feb 20 07:59:10 np0005625201 sudo[64885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:10 np0005625201 sudo[64885]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:10 np0005625201 sudo[64928]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ylnnzbmlpvtgjunnentdnmxiutnvpzme ; /usr/bin/python3 Feb 20 07:59:10 np0005625201 sudo[64928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:10 np0005625201 sudo[64928]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:14 np0005625201 sshd[64838]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 35926 ssh2 [preauth] Feb 20 07:59:14 np0005625201 sshd[64838]: Disconnecting invalid user admin 185.246.128.171 port 35926: Too many authentication failures [preauth] Feb 20 07:59:15 np0005625201 sudo[64990]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkjzxzcrdblsujquvnqtlqebvbxkheoh ; /usr/bin/python3 Feb 20 07:59:15 np0005625201 sudo[64990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:15 np0005625201 sudo[64990]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:15 np0005625201 sudo[65034]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqcaarcstuvydsmxdyotrdwwcupbiaqv ; /usr/bin/python3 Feb 20 07:59:15 np0005625201 sudo[65034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:16 np0005625201 sudo[65034]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:16 np0005625201 sshd[64993]: Invalid user admin from 185.246.128.171 port 29882 Feb 20 07:59:18 np0005625201 sshd[64993]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 29882 ssh2 [preauth] Feb 20 07:59:18 np0005625201 sshd[64993]: Disconnecting invalid user admin 185.246.128.171 port 29882: Too many authentication failures [preauth] Feb 20 07:59:20 np0005625201 sudo[65099]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ebvloitogobayfvvrriiwmxniqkqzqps ; /usr/bin/python3 Feb 20 07:59:20 np0005625201 sudo[65099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:20 np0005625201 sudo[65099]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:20 np0005625201 sudo[65142]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zjobsmksikzwmynuthzolagkctllgvmz ; /usr/bin/python3 Feb 20 07:59:20 np0005625201 sudo[65142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:21 np0005625201 sshd[65052]: Invalid user admin from 185.246.128.171 port 55327 Feb 20 07:59:21 np0005625201 sudo[65142]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:22 np0005625201 sudo[65228]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mymnuyfzvbebphnhewybjeybohvbdpmv ; /usr/bin/python3 Feb 20 07:59:22 np0005625201 sudo[65228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:22 np0005625201 sudo[65228]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:22 np0005625201 sudo[65273]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gtnrhxnmblfzqwpsaypabmoyehugqmov ; /usr/bin/python3 Feb 20 07:59:22 np0005625201 sudo[65273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:23 np0005625201 sudo[65273]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:23 np0005625201 sudo[65303]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jzegjywscccjsrzskkcpscgasrpasvkd ; /usr/bin/python3 Feb 20 07:59:23 np0005625201 sudo[65303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:24 np0005625201 sshd[65052]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 55327 ssh2 [preauth] Feb 20 07:59:24 np0005625201 sshd[65052]: Disconnecting invalid user admin 185.246.128.171 port 55327: Too many authentication failures [preauth] Feb 20 07:59:24 np0005625201 sudo[65303]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:24 np0005625201 sudo[65351]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkcqwpkxleaqvbofmojpwooncnelwxto ; /usr/bin/python3 Feb 20 07:59:24 np0005625201 sudo[65351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:25 np0005625201 sshd[65355]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:59:29 np0005625201 sshd[65374]: Invalid user admin from 185.246.128.171 port 33046 Feb 20 07:59:30 np0005625201 sudo[65351]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:30 np0005625201 sudo[65495]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgfqrudtyeadmowtpfjncoskimzdlmuj ; /usr/bin/python3 Feb 20 07:59:30 np0005625201 sudo[65495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:30 np0005625201 sudo[65495]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:31 np0005625201 sudo[65513]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ayakovsquqixtuuiohezicqyaccllutc ; /usr/bin/python3 Feb 20 07:59:31 np0005625201 sudo[65513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:31 np0005625201 sudo[65513]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:31 np0005625201 sudo[65533]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dkmolxuoewvalwtamhyquwobgbpvjzmu ; /usr/bin/python3 Feb 20 07:59:31 np0005625201 sudo[65533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:31 np0005625201 sudo[65533]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:32 np0005625201 sudo[65549]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jumuyjvutxsksgwwcfcwksjwxavypwil ; /usr/bin/python3 Feb 20 07:59:32 np0005625201 sudo[65549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:33 np0005625201 sshd[65552]: Invalid user sol from 92.118.39.76 port 52860 Feb 20 07:59:33 np0005625201 sudo[65549]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:33 np0005625201 sshd[65552]: Connection closed by invalid user sol 92.118.39.76 port 52860 [preauth] Feb 20 07:59:33 np0005625201 sshd[65374]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 33046 ssh2 [preauth] Feb 20 07:59:33 np0005625201 sshd[65374]: Disconnecting invalid user admin 185.246.128.171 port 33046: Too many authentication failures [preauth] Feb 20 07:59:33 np0005625201 sudo[65569]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vtnezxllmzjtpuewozxyurfanfolgevw ; /usr/bin/python3 Feb 20 07:59:33 np0005625201 sudo[65569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:35 np0005625201 sudo[65616]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:59:35 np0005625201 sudo[65616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:59:35 np0005625201 sudo[65616]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:36 np0005625201 sudo[65640]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 07:59:36 np0005625201 sudo[65640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:59:36 np0005625201 sudo[65640]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:36 np0005625201 sudo[65685]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 07:59:36 np0005625201 sudo[65685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:59:36 np0005625201 sudo[65685]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:36 np0005625201 sudo[65760]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 07:59:36 np0005625201 sudo[65760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:59:36 np0005625201 sshd[65586]: Invalid user admin from 185.246.128.171 port 17519 Feb 20 07:59:37 np0005625201 sudo[65760]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:37 np0005625201 sudo[65806]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 07:59:37 np0005625201 sudo[65806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 07:59:37 np0005625201 sudo[65806]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:38 np0005625201 sudo[65569]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:38 np0005625201 sudo[65838]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qepzgorxsxrugpciqxwlgjctcduxhjzm ; /usr/bin/python3 Feb 20 07:59:38 np0005625201 sudo[65838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:38 np0005625201 sudo[65838]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:39 np0005625201 sudo[65856]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-weqnbyafuvoiktvisfzdgduecgputwyg ; /usr/bin/python3 Feb 20 07:59:39 np0005625201 sudo[65856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:39 np0005625201 sudo[65856]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:39 np0005625201 sudo[65877]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vobmyyidsiklotegbdjuujopnxoqnzrz ; /usr/bin/python3 Feb 20 07:59:39 np0005625201 sudo[65877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:39 np0005625201 sudo[65877]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:40 np0005625201 sshd[65586]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 17519 ssh2 [preauth] Feb 20 07:59:40 np0005625201 sshd[65586]: Disconnecting invalid user admin 185.246.128.171 port 17519: Too many authentication failures [preauth] Feb 20 07:59:40 np0005625201 sshd[65863]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:59:40 np0005625201 sudo[65927]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-liydopvkpepboebocpgoclglhjtipkfr ; /usr/bin/python3 Feb 20 07:59:40 np0005625201 sudo[65927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:40 np0005625201 sudo[65927]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:41 np0005625201 sudo[65970]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ciqmjwysbteozceycnaziwokncqxfrji ; /usr/bin/python3 Feb 20 07:59:41 np0005625201 sudo[65970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:41 np0005625201 sudo[65970]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:41 np0005625201 sudo[66000]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xvnoylxdwmjewogpkmxukwrixzbmwopt ; /usr/bin/python3 Feb 20 07:59:41 np0005625201 sudo[66000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:41 np0005625201 sudo[66000]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:41 np0005625201 sudo[66019]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hkhtmglwhontebwlncwudflvuyjrqvmh ; /usr/bin/python3 Feb 20 07:59:41 np0005625201 sudo[66019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:42 np0005625201 sudo[66019]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:42 np0005625201 sudo[66038]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eqfgukjodsqsvweqfheaunsgsubnyjdd ; /usr/bin/python3 Feb 20 07:59:42 np0005625201 sudo[66038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:43 np0005625201 sshd[66005]: Invalid user admin from 185.246.128.171 port 61044 Feb 20 07:59:44 np0005625201 sshd[66054]: Received disconnect from 194.87.216.133 port 56796:11: Bye Bye [preauth] Feb 20 07:59:44 np0005625201 sshd[66054]: Disconnected from authenticating user root 194.87.216.133 port 56796 [preauth] Feb 20 07:59:44 np0005625201 sshd[66063]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 07:59:45 np0005625201 sshd[66005]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 61044 ssh2 [preauth] Feb 20 07:59:45 np0005625201 sshd[66005]: Disconnecting invalid user admin 185.246.128.171 port 61044: Too many authentication failures [preauth] Feb 20 07:59:47 np0005625201 sudo[66038]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:47 np0005625201 sudo[66185]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wetqaxixavrhuokiazfjshdaopkbkvwu ; /usr/bin/python3 Feb 20 07:59:47 np0005625201 sudo[66185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:48 np0005625201 sudo[66185]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:48 np0005625201 sudo[66203]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mmcnlvcjzhhkfunpcimdryowcyccnonv ; /usr/bin/python3 Feb 20 07:59:48 np0005625201 sudo[66203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:48 np0005625201 sudo[66203]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:48 np0005625201 sudo[66223]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xlriszisexhzfjmbdiynoiknyigrsvun ; /usr/bin/python3 Feb 20 07:59:48 np0005625201 sudo[66223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:48 np0005625201 sudo[66223]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:49 np0005625201 sudo[66239]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcxwiqncfwgkqmzefwsqixhwdvejmdgu ; /usr/bin/python3 Feb 20 07:59:49 np0005625201 sudo[66239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:50 np0005625201 sudo[66239]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:50 np0005625201 sudo[66302]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-paymazaewvwvzbmynyynpeoiazpiqabf ; /usr/bin/python3 Feb 20 07:59:50 np0005625201 sudo[66302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:51 np0005625201 sshd[66166]: Invalid user admin from 185.246.128.171 port 29733 Feb 20 07:59:52 np0005625201 sshd[66306]: Invalid user iksi from 103.183.75.204 port 57150 Feb 20 07:59:52 np0005625201 sshd[66306]: Received disconnect from 103.183.75.204 port 57150:11: Bye Bye [preauth] Feb 20 07:59:52 np0005625201 sshd[66306]: Disconnected from invalid user iksi 103.183.75.204 port 57150 [preauth] Feb 20 07:59:55 np0005625201 sudo[66302]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:55 np0005625201 sudo[66501]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahovckewltkytrnenygkwtsszxskupxu ; /usr/bin/python3 Feb 20 07:59:55 np0005625201 sudo[66501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:55 np0005625201 sudo[66501]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:55 np0005625201 sudo[66519]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cbhejgbwdkxbkgrwtrqaogcxjfoytsju ; /usr/bin/python3 Feb 20 07:59:55 np0005625201 sudo[66519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:56 np0005625201 sudo[66519]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:56 np0005625201 sudo[66539]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pfdarulpkwrhwhepwjdgfewihsqwhxgr ; /usr/bin/python3 Feb 20 07:59:56 np0005625201 sudo[66539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:56 np0005625201 sudo[66539]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:57 np0005625201 sudo[66555]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iygnyesiapwfgvvhmeiemiwurwggjvlm ; /usr/bin/python3 Feb 20 07:59:57 np0005625201 sudo[66555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:57 np0005625201 sudo[66555]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:57 np0005625201 sudo[66605]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zrbcwhczlaahgrijehtefbbrxvzarzpa ; /usr/bin/python3 Feb 20 07:59:57 np0005625201 sudo[66605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:58 np0005625201 sudo[66605]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:58 np0005625201 sudo[66623]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbqoryngyntedfqukqslzmalglfqqtds ; /usr/bin/python3 Feb 20 07:59:58 np0005625201 sudo[66623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:58 np0005625201 sudo[66623]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:58 np0005625201 sshd[66166]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 29733 ssh2 [preauth] Feb 20 07:59:58 np0005625201 sshd[66166]: Disconnecting invalid user admin 185.246.128.171 port 29733: Too many authentication failures [preauth] Feb 20 07:59:58 np0005625201 sudo[66727]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rjrcuolbqmiopafjqqdonlnljvvdonpb ; ANSIBLE_ASYNC_DIR=/tmp/.ansible_async /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574398.5189292-94125-211837919172457/async_wrapper.py 980014787209 3600 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574398.5189292-94125-211837919172457/AnsiballZ_command.py _ Feb 20 07:59:58 np0005625201 sudo[66727]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 07:59:59 np0005625201 sudo[66727]: pam_unix(sudo:session): session closed for user root Feb 20 07:59:59 np0005625201 sudo[66748]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-igrrorxvlmpkdcbmecsmjcujsnkninny ; /usr/bin/python3 Feb 20 07:59:59 np0005625201 sudo[66748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 07:59:59 np0005625201 sudo[66748]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:01 np0005625201 sshd[66754]: Invalid user admin from 185.246.128.171 port 45836 Feb 20 08:00:06 np0005625201 sshd[66754]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 45836 ssh2 [preauth] Feb 20 08:00:06 np0005625201 sshd[66754]: Disconnecting invalid user admin 185.246.128.171 port 45836: Too many authentication failures [preauth] Feb 20 08:00:08 np0005625201 sshd[67092]: Invalid user iksi from 35.188.112.111 port 47398 Feb 20 08:00:08 np0005625201 sshd[67092]: Received disconnect from 35.188.112.111 port 47398:11: Bye Bye [preauth] Feb 20 08:00:08 np0005625201 sshd[67092]: Disconnected from invalid user iksi 35.188.112.111 port 47398 [preauth] Feb 20 08:00:09 np0005625201 sudo[67108]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjqvqbjjnlrspvxldimiyyenuvdjxqqc ; /usr/bin/python3 Feb 20 08:00:09 np0005625201 sudo[67108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:09 np0005625201 sudo[67108]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:10 np0005625201 sudo[67125]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nzkvvmvbyslidqxmitabfezfvalmqpid ; /usr/bin/python3 Feb 20 08:00:10 np0005625201 sudo[67125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:10 np0005625201 sudo[67125]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:10 np0005625201 sudo[67141]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-twuatcjkrhdclijgnhguaqoubvdjaudx ; /usr/bin/python3 Feb 20 08:00:10 np0005625201 sudo[67141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:10 np0005625201 sudo[67141]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:11 np0005625201 sudo[67191]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vymtrsatzxrmqjlqfzztkgjstdixjrrt ; /usr/bin/python3 Feb 20 08:00:11 np0005625201 sudo[67191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:11 np0005625201 sudo[67191]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:11 np0005625201 sudo[67209]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cimhakuncvyfwsqzaazyvpkphsyswraq ; /usr/bin/python3 Feb 20 08:00:11 np0005625201 sudo[67209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:11 np0005625201 sudo[67209]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:11 np0005625201 sudo[67239]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gbbjshhmekmtofpycjjakfdjdjndblyo ; /usr/bin/python3 Feb 20 08:00:11 np0005625201 sudo[67239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:11 np0005625201 sudo[67239]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:12 np0005625201 sudo[67255]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tlpujxinbgosbkjigrunbcvgxrwpymix ; /usr/bin/python3 Feb 20 08:00:12 np0005625201 sudo[67255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:12 np0005625201 sshd[67094]: Invalid user admin from 185.246.128.171 port 40179 Feb 20 08:00:12 np0005625201 sudo[67255]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:12 np0005625201 sudo[67384]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nblbqrmurxqdqmteydxbrvsutdzngutm ; /usr/bin/python3 Feb 20 08:00:12 np0005625201 sudo[67384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:13 np0005625201 sudo[67384]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:13 np0005625201 sudo[67405]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wkzrcihxjlnplqpgftlqrkoauwcdxiey ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:13 np0005625201 sudo[67405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:13 np0005625201 sshd[67390]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:00:13 np0005625201 sudo[67405]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:13 np0005625201 sudo[67421]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmjewiehaqamuyxypstlgqcqfxfwdkwj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:13 np0005625201 sudo[67421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:14 np0005625201 sudo[67421]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:14 np0005625201 sudo[67438]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jnchborinojewwsbsesqfqcnyzfkpddh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:14 np0005625201 sudo[67438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:14 np0005625201 sudo[67438]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:14 np0005625201 sudo[67488]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fathtywkmxstftfuwtejzsryrtvfbsvt ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:14 np0005625201 sudo[67488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:15 np0005625201 sudo[67488]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:15 np0005625201 sudo[67506]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fluxecydlrxwoblfraamjtryntgoodml ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:15 np0005625201 sudo[67506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:15 np0005625201 sudo[67506]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:15 np0005625201 sudo[67568]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihftgtjmeptdegmshybmfoccvrjkuqdg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:15 np0005625201 sudo[67568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:15 np0005625201 sudo[67568]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:15 np0005625201 sudo[67587]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-utwazzveemukcfxdtblkqilfqdvkftuo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:15 np0005625201 sudo[67587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:16 np0005625201 sudo[67587]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:16 np0005625201 sshd[67577]: Invalid user sol from 92.118.39.72 port 57204 Feb 20 08:00:16 np0005625201 sudo[67651]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kgugerqdgdukhelatqcahqtznkftmdts ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:16 np0005625201 sshd[67577]: Connection closed by invalid user sol 92.118.39.72 port 57204 [preauth] Feb 20 08:00:16 np0005625201 sudo[67651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:16 np0005625201 sshd[67094]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 40179 ssh2 [preauth] Feb 20 08:00:16 np0005625201 sshd[67094]: Disconnecting invalid user admin 185.246.128.171 port 40179: Too many authentication failures [preauth] Feb 20 08:00:16 np0005625201 sudo[67651]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:16 np0005625201 sudo[67778]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xdrlkqzqkjqnlsgjpercvcncrvphohnq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:16 np0005625201 sudo[67778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:16 np0005625201 sudo[67778]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:17 np0005625201 sudo[67841]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gvvwjtxcqzfrwzkrnvmccmurhjhmrswz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:17 np0005625201 sudo[67841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:17 np0005625201 sudo[67841]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:17 np0005625201 sudo[67860]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bmqjadfyxsilbzeywfzhsymbjhuqiiut ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:17 np0005625201 sudo[67860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:17 np0005625201 sudo[67860]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:18 np0005625201 sudo[67890]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vvczvaosxbtrhyozwfuisadxoysycqxt ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:18 np0005625201 sudo[67890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:18 np0005625201 sudo[67890]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:18 np0005625201 sudo[67976]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahztqlxiagmojwhsoenhtwetdjoematx ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:18 np0005625201 sudo[67976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:19 np0005625201 sudo[67976]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:19 np0005625201 sudo[67994]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qjtdxgstlqopjhnsrirncfpjgzijjjfz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:19 np0005625201 sudo[67994]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:19 np0005625201 sudo[67994]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:19 np0005625201 sshd[67808]: Invalid user admin from 185.246.128.171 port 26601 Feb 20 08:00:19 np0005625201 sudo[68056]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-utlthswhlororeqrvnrpfxxydcwbxkuf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:19 np0005625201 sudo[68056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:19 np0005625201 sudo[68056]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:19 np0005625201 sudo[68074]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xgghaiefwtxgvqqkyjanmlggdqbmckqu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:19 np0005625201 sudo[68074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:20 np0005625201 sudo[68074]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:20 np0005625201 sudo[68104]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eaiolydybpheeolgxmxsuamtvrpwhrcc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:20 np0005625201 sudo[68104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:21 np0005625201 sudo[68104]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:21 np0005625201 sudo[68165]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yesjrlskgvnifzhhgnnbbhgdexxjlfnp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:21 np0005625201 sudo[68165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:21 np0005625201 sudo[68165]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:21 np0005625201 sudo[68181]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sbqpaqodwvabfwiohevwuexjmdhnevbk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:21 np0005625201 sudo[68181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:22 np0005625201 sudo[68181]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:22 np0005625201 sshd[67808]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 26601 ssh2 [preauth] Feb 20 08:00:22 np0005625201 sshd[67808]: Disconnecting invalid user admin 185.246.128.171 port 26601: Too many authentication failures [preauth] Feb 20 08:00:23 np0005625201 sudo[68293]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fcnblcekdohcanjxxziwvtzvyfqmtufk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:23 np0005625201 sudo[68293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:24 np0005625201 sshd[68278]: Invalid user admin from 185.246.128.171 port 62894 Feb 20 08:00:28 np0005625201 runuser[69807]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:00:29 np0005625201 sshd[68278]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 62894 ssh2 [preauth] Feb 20 08:00:29 np0005625201 sshd[68278]: Disconnecting invalid user admin 185.246.128.171 port 62894: Too many authentication failures [preauth] Feb 20 08:00:30 np0005625201 runuser[69807]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:00:30 np0005625201 runuser[70232]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:00:32 np0005625201 sshd[70197]: Invalid user admin from 185.246.128.171 port 45275 Feb 20 08:00:33 np0005625201 runuser[70232]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:00:35 np0005625201 sudo[70940]: mysql : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:00:35 np0005625201 sudo[70940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42434) Feb 20 08:00:35 np0005625201 sudo[70940]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:35 np0005625201 sudo[68293]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:35 np0005625201 sshd[70197]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 45275 ssh2 [preauth] Feb 20 08:00:35 np0005625201 sshd[70197]: Disconnecting invalid user admin 185.246.128.171 port 45275: Too many authentication failures [preauth] Feb 20 08:00:35 np0005625201 sudo[71083]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-knxxgkkgqjaarmmhklonbgzhqrgzhzto ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:35 np0005625201 sudo[71083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:35 np0005625201 sudo[71083]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:35 np0005625201 sudo[71099]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdraxpznqnnlyaclwcwftxehczbdngnc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:35 np0005625201 sudo[71099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:36 np0005625201 sudo[71099]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:36 np0005625201 sudo[71161]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xacrkeixhwpnetpjwcinbqhcbwltnpsc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:36 np0005625201 sudo[71161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:36 np0005625201 sudo[71161]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:36 np0005625201 sudo[71189]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-octxjdgjbhaoomyoknmfvhitlqwwcguo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:36 np0005625201 sudo[71189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:37 np0005625201 sshd[71170]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:00:37 np0005625201 sudo[71189]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:37 np0005625201 sudo[71274]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xsebmfpfjwsihyfweehwlyezrollkehs ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:00:37 np0005625201 sudo[71274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:37 np0005625201 sudo[71277]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:00:37 np0005625201 sudo[71277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:00:37 np0005625201 sudo[71277]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:38 np0005625201 sudo[71292]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:00:38 np0005625201 sudo[71292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:00:38 np0005625201 sshd[71147]: Invalid user admin from 185.246.128.171 port 18728 Feb 20 08:00:38 np0005625201 sudo[71274]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:38 np0005625201 sudo[71292]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:38 np0005625201 sudo[71417]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zeljgfdtqdcbjvmfswedmlrzstwnbbau ; /usr/bin/python3 Feb 20 08:00:38 np0005625201 sudo[71417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:39 np0005625201 sudo[71417]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:39 np0005625201 sudo[71420]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:00:39 np0005625201 sudo[71420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:00:39 np0005625201 sudo[71420]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:39 np0005625201 sudo[71480]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rujhffjgrsijoofnbsikykpgytphzcag ; /usr/bin/python3 Feb 20 08:00:39 np0005625201 sudo[71480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:39 np0005625201 sudo[71480]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:39 np0005625201 sudo[71523]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qhelgmusxtcmgyymhqgnqepscpzwmqwf ; /usr/bin/python3 Feb 20 08:00:39 np0005625201 sudo[71523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:40 np0005625201 sudo[71523]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:40 np0005625201 sudo[71553]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ndercdbwhxizdgvwmdxmstfibfkolojz ; /usr/bin/python3 Feb 20 08:00:40 np0005625201 sudo[71553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:40 np0005625201 sudo[71553]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:40 np0005625201 sudo[71569]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cxzvxtvzclfouiuulslbgymykzcmqwtq ; /usr/bin/python3 Feb 20 08:00:40 np0005625201 sudo[71569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:41 np0005625201 sudo[71569]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:41 np0005625201 sudo[71585]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hklnedqcclvyksmkowykevndwghthsyv ; /usr/bin/python3 Feb 20 08:00:41 np0005625201 sudo[71585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:00:41 np0005625201 sudo[71585]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:44 np0005625201 sshd[71147]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 18728 ssh2 [preauth] Feb 20 08:00:44 np0005625201 sshd[71147]: Disconnecting invalid user admin 185.246.128.171 port 18728: Too many authentication failures [preauth] Feb 20 08:00:48 np0005625201 sshd[71631]: Invalid user admin from 185.246.128.171 port 16125 Feb 20 08:00:50 np0005625201 sshd[71784]: Invalid user n8n from 162.19.250.18 port 33630 Feb 20 08:00:50 np0005625201 sshd[71784]: Received disconnect from 162.19.250.18 port 33630:11: Bye Bye [preauth] Feb 20 08:00:50 np0005625201 sshd[71784]: Disconnected from invalid user n8n 162.19.250.18 port 33630 [preauth] Feb 20 08:00:51 np0005625201 sshd[71631]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 16125 ssh2 [preauth] Feb 20 08:00:51 np0005625201 sshd[71631]: Disconnecting invalid user admin 185.246.128.171 port 16125: Too many authentication failures [preauth] Feb 20 08:00:55 np0005625201 sshd[71845]: Invalid user admin from 185.246.128.171 port 59126 Feb 20 08:00:57 np0005625201 sudo[72018]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:00:57 np0005625201 sudo[72018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:00:57 np0005625201 sudo[72018]: pam_unix(sudo:session): session closed for user root Feb 20 08:00:58 np0005625201 sshd[71845]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 59126 ssh2 [preauth] Feb 20 08:00:58 np0005625201 sshd[71845]: Disconnecting invalid user admin 185.246.128.171 port 59126: Too many authentication failures [preauth] Feb 20 08:01:00 np0005625201 sshd[72287]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:01:00 np0005625201 sshd[72275]: Invalid user admin from 185.246.128.171 port 34431 Feb 20 08:01:01 np0005625201 sshd[72349]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:01:02 np0005625201 sshd[72275]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 34431 ssh2 [preauth] Feb 20 08:01:02 np0005625201 sshd[72275]: Disconnecting invalid user admin 185.246.128.171 port 34431: Too many authentication failures [preauth] Feb 20 08:01:07 np0005625201 sshd[72424]: Invalid user admin from 185.246.128.171 port 7038 Feb 20 08:01:12 np0005625201 sshd[72424]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.171 port 7038 ssh2 [preauth] Feb 20 08:01:12 np0005625201 sshd[72424]: Disconnecting invalid user admin 185.246.128.171 port 7038: Too many authentication failures [preauth] Feb 20 08:01:16 np0005625201 sshd[72741]: Invalid user admin from 185.246.128.171 port 63560 Feb 20 08:01:17 np0005625201 sshd[72741]: Disconnecting invalid user admin 185.246.128.171 port 63560: Change of username or service not allowed: (admin,ssh-connection) -> (wso2,ssh-connection) [preauth] Feb 20 08:01:19 np0005625201 sshd[72946]: Invalid user wso2 from 185.246.128.171 port 32299 Feb 20 08:01:20 np0005625201 sshd[72946]: Disconnecting invalid user wso2 185.246.128.171 port 32299: Change of username or service not allowed: (wso2,ssh-connection) -> (osmc,ssh-connection) [preauth] Feb 20 08:01:24 np0005625201 sshd[73013]: Invalid user osmc from 185.246.128.171 port 48978 Feb 20 08:01:25 np0005625201 sshd[73013]: Disconnecting invalid user osmc 185.246.128.171 port 48978: Change of username or service not allowed: (osmc,ssh-connection) -> (ftpguest,ssh-connection) [preauth] Feb 20 08:01:28 np0005625201 sshd[73329]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:01:31 np0005625201 sshd[73287]: Invalid user ftpguest from 185.246.128.171 port 33795 Feb 20 08:01:31 np0005625201 sshd[73287]: Disconnecting invalid user ftpguest 185.246.128.171 port 33795: Change of username or service not allowed: (ftpguest,ssh-connection) -> (tech,ssh-connection) [preauth] Feb 20 08:01:34 np0005625201 sshd[73430]: Invalid user tech from 185.246.128.171 port 63016 Feb 20 08:01:34 np0005625201 sshd[73430]: Disconnecting invalid user tech 185.246.128.171 port 63016: Change of username or service not allowed: (tech,ssh-connection) -> (mj,ssh-connection) [preauth] Feb 20 08:01:39 np0005625201 sudo[73725]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:01:39 np0005625201 sudo[73725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:01:39 np0005625201 sudo[73725]: pam_unix(sudo:session): session closed for user root Feb 20 08:01:39 np0005625201 sudo[73740]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:01:39 np0005625201 sudo[73740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:01:39 np0005625201 sshd[73529]: Invalid user mj from 185.246.128.171 port 27733 Feb 20 08:01:40 np0005625201 sshd[73529]: Disconnecting invalid user mj 185.246.128.171 port 27733: Change of username or service not allowed: (mj,ssh-connection) -> (riscv,ssh-connection) [preauth] Feb 20 08:01:40 np0005625201 sudo[73740]: pam_unix(sudo:session): session closed for user root Feb 20 08:01:41 np0005625201 sudo[73836]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:01:41 np0005625201 sudo[73836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:01:41 np0005625201 sudo[73836]: pam_unix(sudo:session): session closed for user root Feb 20 08:01:44 np0005625201 sshd[73899]: Invalid user sol from 92.118.39.76 port 34518 Feb 20 08:01:44 np0005625201 sshd[73899]: Connection closed by invalid user sol 92.118.39.76 port 34518 [preauth] Feb 20 08:01:44 np0005625201 sshd[73818]: Invalid user riscv from 185.246.128.171 port 56774 Feb 20 08:01:45 np0005625201 sshd[73818]: Disconnecting invalid user riscv 185.246.128.171 port 56774: Change of username or service not allowed: (riscv,ssh-connection) -> (Y,ssh-connection) [preauth] Feb 20 08:01:49 np0005625201 sshd[74105]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:01:49 np0005625201 sshd[74038]: Invalid user Y from 185.246.128.171 port 39701 Feb 20 08:01:49 np0005625201 sshd[74038]: Disconnecting invalid user Y 185.246.128.171 port 39701: Change of username or service not allowed: (Y,ssh-connection) -> (erp,ssh-connection) [preauth] Feb 20 08:01:51 np0005625201 sshd[74131]: Invalid user erp from 185.246.128.171 port 55831 Feb 20 08:01:51 np0005625201 sshd[74131]: Disconnecting invalid user erp 185.246.128.171 port 55831: Change of username or service not allowed: (erp,ssh-connection) -> (kiosk,ssh-connection) [preauth] Feb 20 08:01:53 np0005625201 sshd[74182]: Invalid user kiosk from 185.246.128.171 port 2325 Feb 20 08:01:53 np0005625201 sshd[74182]: Disconnecting invalid user kiosk 185.246.128.171 port 2325: Change of username or service not allowed: (kiosk,ssh-connection) -> (~,ssh-connection) [preauth] Feb 20 08:01:57 np0005625201 sshd[74257]: Invalid user ~ from 185.246.128.171 port 23535 Feb 20 08:01:57 np0005625201 sshd[74257]: Disconnecting invalid user ~ 185.246.128.171 port 23535: Change of username or service not allowed: (~,ssh-connection) -> (splunk,ssh-connection) [preauth] Feb 20 08:01:59 np0005625201 sshd[74427]: Invalid user splunk from 185.246.128.171 port 46055 Feb 20 08:01:59 np0005625201 sshd[74427]: Disconnecting invalid user splunk 185.246.128.171 port 46055: Change of username or service not allowed: (splunk,ssh-connection) -> (suraj,ssh-connection) [preauth] Feb 20 08:02:00 np0005625201 sshd[74545]: Invalid user suraj from 185.246.128.171 port 55742 Feb 20 08:02:00 np0005625201 sshd[74545]: Disconnecting invalid user suraj 185.246.128.171 port 55742: Change of username or service not allowed: (suraj,ssh-connection) -> (kali,ssh-connection) [preauth] Feb 20 08:02:01 np0005625201 sshd[74579]: Invalid user kali from 185.246.128.171 port 63343 Feb 20 08:02:02 np0005625201 sshd[74579]: Disconnecting invalid user kali 185.246.128.171 port 63343: Change of username or service not allowed: (kali,ssh-connection) -> (carlos,ssh-connection) [preauth] Feb 20 08:02:07 np0005625201 sshd[74707]: Invalid user carlos from 185.246.128.171 port 25681 Feb 20 08:02:08 np0005625201 sshd[74707]: Disconnecting invalid user carlos 185.246.128.171 port 25681: Change of username or service not allowed: (carlos,ssh-connection) -> (onlime_r,ssh-connection) [preauth] Feb 20 08:02:09 np0005625201 sudo[75018]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:02:09 np0005625201 sudo[75018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:02:09 np0005625201 sudo[75018]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:09 np0005625201 sshd[74920]: Invalid user onlime_r from 185.246.128.171 port 52425 Feb 20 08:02:09 np0005625201 sshd[74920]: Disconnecting invalid user onlime_r 185.246.128.171 port 52425: Change of username or service not allowed: (onlime_r,ssh-connection) -> (richard,ssh-connection) [preauth] Feb 20 08:02:11 np0005625201 sshd[75214]: Invalid user richard from 185.246.128.171 port 1739 Feb 20 08:02:14 np0005625201 sudo[75494]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:02:14 np0005625201 sudo[75494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:02:14 np0005625201 sudo[75494]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:15 np0005625201 sshd[75681]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:02:16 np0005625201 sshd[75214]: Disconnecting invalid user richard 185.246.128.171 port 1739: Change of username or service not allowed: (richard,ssh-connection) -> (ADMIN,ssh-connection) [preauth] Feb 20 08:02:17 np0005625201 sshd[75797]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:02:21 np0005625201 sshd[75864]: Invalid user ADMIN from 185.246.128.171 port 54707 Feb 20 08:02:22 np0005625201 sshd[75864]: Disconnecting invalid user ADMIN 185.246.128.171 port 54707: Change of username or service not allowed: (ADMIN,ssh-connection) -> (useradmin,ssh-connection) [preauth] Feb 20 08:02:23 np0005625201 sshd[76006]: Invalid user validator from 92.118.39.72 port 39316 Feb 20 08:02:23 np0005625201 sshd[76006]: Connection closed by invalid user validator 92.118.39.72 port 39316 [preauth] Feb 20 08:02:26 np0005625201 sshd[76028]: Invalid user useradmin from 185.246.128.171 port 26651 Feb 20 08:02:28 np0005625201 sshd[76028]: Disconnecting invalid user useradmin 185.246.128.171 port 26651: Change of username or service not allowed: (useradmin,ssh-connection) -> (peertube,ssh-connection) [preauth] Feb 20 08:02:28 np0005625201 runuser[76356]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:28 np0005625201 runuser[76356]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:28 np0005625201 runuser[76373]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:28 np0005625201 runuser[76373]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:28 np0005625201 runuser[76389]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:28 np0005625201 runuser[76389]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:29 np0005625201 runuser[76428]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:30 np0005625201 runuser[76428]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:30 np0005625201 sshd[76406]: Invalid user peertube from 185.246.128.171 port 63631 Feb 20 08:02:31 np0005625201 sshd[76406]: Disconnecting invalid user peertube 185.246.128.171 port 63631: Change of username or service not allowed: (peertube,ssh-connection) -> (zabbix,ssh-connection) [preauth] Feb 20 08:02:32 np0005625201 sshd[76904]: Invalid user zabbix from 185.246.128.171 port 20714 Feb 20 08:02:35 np0005625201 sshd[76904]: Disconnecting invalid user zabbix 185.246.128.171 port 20714: Change of username or service not allowed: (zabbix,ssh-connection) -> (es_user,ssh-connection) [preauth] Feb 20 08:02:35 np0005625201 sshd[77080]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:02:39 np0005625201 sshd[77202]: Invalid user es_user from 185.246.128.171 port 60391 Feb 20 08:02:39 np0005625201 runuser[77418]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:39 np0005625201 runuser[77418]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:39 np0005625201 runuser[77442]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:39 np0005625201 runuser[77442]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:39 np0005625201 runuser[77458]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:39 np0005625201 runuser[77458]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:02:39 np0005625201 runuser[77477]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0) Feb 20 08:02:39 np0005625201 sshd[77202]: Disconnecting invalid user es_user 185.246.128.171 port 60391: Change of username or service not allowed: (es_user,ssh-connection) -> (sonos,ssh-connection) [preauth] Feb 20 08:02:41 np0005625201 sshd[77816]: Invalid user sonos from 185.246.128.171 port 19049 Feb 20 08:02:41 np0005625201 sshd[77816]: Disconnecting invalid user sonos 185.246.128.171 port 19049: Change of username or service not allowed: (sonos,ssh-connection) -> (nc,ssh-connection) [preauth] Feb 20 08:02:42 np0005625201 sudo[77901]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:02:42 np0005625201 sudo[77901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:02:42 np0005625201 sudo[77901]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:42 np0005625201 sudo[77916]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:02:42 np0005625201 sudo[77916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:02:42 np0005625201 sshd[77932]: error: kex_exchange_identification: read: Connection reset by peer Feb 20 08:02:42 np0005625201 sshd[77932]: Connection reset by 176.120.22.52 port 15931 Feb 20 08:02:42 np0005625201 sudo[77916]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:43 np0005625201 sudo[77991]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:02:43 np0005625201 sudo[77991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:02:43 np0005625201 sudo[77991]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:44 np0005625201 sshd[77899]: Invalid user nc from 185.246.128.171 port 28317 Feb 20 08:02:44 np0005625201 sshd[77899]: Disconnecting invalid user nc 185.246.128.171 port 28317: Change of username or service not allowed: (nc,ssh-connection) -> (cristi,ssh-connection) [preauth] Feb 20 08:02:46 np0005625201 sshd[78211]: Invalid user iksi from 194.87.216.133 port 59592 Feb 20 08:02:46 np0005625201 sshd[78211]: Received disconnect from 194.87.216.133 port 59592:11: Bye Bye [preauth] Feb 20 08:02:46 np0005625201 sshd[78211]: Disconnected from invalid user iksi 194.87.216.133 port 59592 [preauth] Feb 20 08:02:47 np0005625201 sshd[78210]: Invalid user cristi from 185.246.128.171 port 54565 Feb 20 08:02:47 np0005625201 sshd[78210]: Disconnecting invalid user cristi 185.246.128.171 port 54565: Change of username or service not allowed: (cristi,ssh-connection) -> (teste,ssh-connection) [preauth] Feb 20 08:02:51 np0005625201 sshd[78328]: Invalid user teste from 185.246.128.171 port 10705 Feb 20 08:02:52 np0005625201 sshd[78328]: Disconnecting invalid user teste 185.246.128.171 port 10705: Change of username or service not allowed: (teste,ssh-connection) -> (user2,ssh-connection) [preauth] Feb 20 08:02:54 np0005625201 sshd[78666]: Invalid user user2 from 185.246.128.171 port 43601 Feb 20 08:02:55 np0005625201 sshd[78666]: Disconnecting invalid user user2 185.246.128.171 port 43601: Change of username or service not allowed: (user2,ssh-connection) -> (proxyuser,ssh-connection) [preauth] Feb 20 08:02:55 np0005625201 sudo[78848]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:02:55 np0005625201 sudo[78848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:02:56 np0005625201 sudo[78848]: pam_unix(sudo:session): session closed for user root Feb 20 08:02:58 np0005625201 sshd[79057]: Invalid user proxyuser from 185.246.128.171 port 6623 Feb 20 08:02:58 np0005625201 sshd[79057]: Disconnecting invalid user proxyuser 185.246.128.171 port 6623: Change of username or service not allowed: (proxyuser,ssh-connection) -> (2,ssh-connection) [preauth] Feb 20 08:03:03 np0005625201 sshd[79286]: Invalid user 2 from 185.246.128.171 port 25078 Feb 20 08:03:03 np0005625201 sshd[79286]: Disconnecting invalid user 2 185.246.128.171 port 25078: Change of username or service not allowed: (2,ssh-connection) -> (bbs,ssh-connection) [preauth] Feb 20 08:03:04 np0005625201 sshd[79558]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:03:06 np0005625201 runuser[79687]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:07 np0005625201 sshd[79584]: Invalid user bbs from 185.246.128.171 port 60158 Feb 20 08:03:07 np0005625201 runuser[79687]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:07 np0005625201 sshd[79584]: Disconnecting invalid user bbs 185.246.128.171 port 60158: Change of username or service not allowed: (bbs,ssh-connection) -> (odoo16,ssh-connection) [preauth] Feb 20 08:03:08 np0005625201 sshd[79854]: Invalid user odoo16 from 185.246.128.171 port 20150 Feb 20 08:03:09 np0005625201 sshd[79854]: Disconnecting invalid user odoo16 185.246.128.171 port 20150: Change of username or service not allowed: (odoo16,ssh-connection) -> (123,ssh-connection) [preauth] Feb 20 08:03:11 np0005625201 sshd[79938]: Invalid user 123 from 185.246.128.171 port 31490 Feb 20 08:03:11 np0005625201 sshd[80012]: Invalid user gbasedbt from 35.188.112.111 port 38278 Feb 20 08:03:11 np0005625201 sshd[80012]: Received disconnect from 35.188.112.111 port 38278:11: Bye Bye [preauth] Feb 20 08:03:11 np0005625201 sshd[80012]: Disconnected from invalid user gbasedbt 35.188.112.111 port 38278 [preauth] Feb 20 08:03:11 np0005625201 sshd[79938]: Disconnecting invalid user 123 185.246.128.171 port 31490: Change of username or service not allowed: (123,ssh-connection) -> (juan,ssh-connection) [preauth] Feb 20 08:03:13 np0005625201 sshd[80054]: Invalid user juan from 185.246.128.171 port 51166 Feb 20 08:03:14 np0005625201 sshd[80054]: Disconnecting invalid user juan 185.246.128.171 port 51166: Change of username or service not allowed: (juan,ssh-connection) -> (website,ssh-connection) [preauth] Feb 20 08:03:16 np0005625201 sshd[80105]: Invalid user website from 185.246.128.171 port 2231 Feb 20 08:03:16 np0005625201 sshd[80105]: Disconnecting invalid user website 185.246.128.171 port 2231: Change of username or service not allowed: (website,ssh-connection) -> (docker,ssh-connection) [preauth] Feb 20 08:03:21 np0005625201 sshd[80431]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:03:24 np0005625201 sshd[80315]: Invalid user docker from 185.246.128.171 port 26403 Feb 20 08:03:26 np0005625201 sshd[80315]: Disconnecting invalid user docker 185.246.128.171 port 26403: Change of username or service not allowed: (docker,ssh-connection) -> (siddharth,ssh-connection) [preauth] Feb 20 08:03:31 np0005625201 sshd[80713]: Invalid user siddharth from 185.246.128.171 port 31701 Feb 20 08:03:31 np0005625201 sshd[80854]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:03:31 np0005625201 sshd[80713]: Disconnecting invalid user siddharth 185.246.128.171 port 31701: Change of username or service not allowed: (siddharth,ssh-connection) -> (prometheus,ssh-connection) [preauth] Feb 20 08:03:33 np0005625201 runuser[80976]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:33 np0005625201 sudo[81085]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:03:33 np0005625201 sudo[81085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:03:33 np0005625201 sudo[81085]: pam_unix(sudo:session): session closed for user root Feb 20 08:03:33 np0005625201 sshd[80892]: Invalid user prometheus from 185.246.128.171 port 62306 Feb 20 08:03:33 np0005625201 runuser[80976]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:33 np0005625201 sshd[80892]: Disconnecting invalid user prometheus 185.246.128.171 port 62306: Change of username or service not allowed: (prometheus,ssh-connection) -> (management,ssh-connection [preauth] Feb 20 08:03:34 np0005625201 runuser[81279]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:35 np0005625201 runuser[81279]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:35 np0005625201 runuser[81376]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:35 np0005625201 sshd[81219]: Invalid user management from 185.246.128.171 port 11849 Feb 20 08:03:35 np0005625201 runuser[81376]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:36 np0005625201 runuser[81515]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:36 np0005625201 sshd[81219]: Disconnecting invalid user management 185.246.128.171 port 11849: Change of username or service not allowed: (management,ssh-connection) -> (wuhan,ssh-connection) [preauth] Feb 20 08:03:36 np0005625201 runuser[81515]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:36 np0005625201 sshd[81506]: Received disconnect from 212.233.136.201 port 56364:11: Bye Bye [preauth] Feb 20 08:03:36 np0005625201 sshd[81506]: Disconnected from authenticating user root 212.233.136.201 port 56364 [preauth] Feb 20 08:03:37 np0005625201 runuser[81588]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:37 np0005625201 runuser[81593]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:37 np0005625201 sshd[81569]: Invalid user wuhan from 185.246.128.171 port 29065 Feb 20 08:03:38 np0005625201 sshd[81569]: Disconnecting invalid user wuhan 185.246.128.171 port 29065: Change of username or service not allowed: (wuhan,ssh-connection) -> (master,ssh-connection) [preauth] Feb 20 08:03:41 np0005625201 sshd[81885]: Invalid user master from 185.246.128.171 port 49187 Feb 20 08:03:41 np0005625201 sshd[81885]: Disconnecting invalid user master 185.246.128.171 port 49187: Change of username or service not allowed: (master,ssh-connection) -> (report,ssh-connection) [preauth] Feb 20 08:03:42 np0005625201 runuser[81593]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:42 np0005625201 runuser[81984]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:42 np0005625201 sshd[81982]: Invalid user sol from 92.118.39.76 port 44408 Feb 20 08:03:42 np0005625201 sshd[81982]: Connection closed by invalid user sol 92.118.39.76 port 44408 [preauth] Feb 20 08:03:42 np0005625201 runuser[81984]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:42 np0005625201 runuser[82063]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:43 np0005625201 runuser[82063]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:43 np0005625201 runuser[82132]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:43 np0005625201 sudo[82169]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:03:43 np0005625201 sudo[82169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:03:43 np0005625201 sudo[82169]: pam_unix(sudo:session): session closed for user root Feb 20 08:03:43 np0005625201 sshd[82046]: Invalid user report from 185.246.128.171 port 2599 Feb 20 08:03:43 np0005625201 sudo[82201]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:03:43 np0005625201 sudo[82201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:03:44 np0005625201 sshd[82046]: Disconnecting invalid user report 185.246.128.171 port 2599: Change of username or service not allowed: (report,ssh-connection) -> (elasticsearch,ssh-connection) [preauth] Feb 20 08:03:44 np0005625201 sudo[82201]: pam_unix(sudo:session): session closed for user root Feb 20 08:03:44 np0005625201 runuser[82132]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:44 np0005625201 runuser[82275]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:44 np0005625201 sudo[82328]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:03:44 np0005625201 sudo[82328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:03:44 np0005625201 sudo[82328]: pam_unix(sudo:session): session closed for user root Feb 20 08:03:45 np0005625201 runuser[82275]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:45 np0005625201 runuser[82378]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:47 np0005625201 sshd[82367]: Invalid user elasticsearch from 185.246.128.171 port 24919 Feb 20 08:03:47 np0005625201 runuser[82378]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:47 np0005625201 runuser[82521]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:47 np0005625201 runuser[82521]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:48 np0005625201 runuser[82679]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:48 np0005625201 sshd[82367]: Disconnecting invalid user elasticsearch 185.246.128.171 port 24919: Change of username or service not allowed: (elasticsearch,ssh-connection) -> (zhao,ssh-connection) [preauth] Feb 20 08:03:49 np0005625201 runuser[82679]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:49 np0005625201 runuser[82977]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:49 np0005625201 sshd[82805]: Invalid user claude from 162.19.250.18 port 56242 Feb 20 08:03:49 np0005625201 sshd[82805]: Received disconnect from 162.19.250.18 port 56242:11: Bye Bye [preauth] Feb 20 08:03:49 np0005625201 sshd[82805]: Disconnected from invalid user claude 162.19.250.18 port 56242 [preauth] Feb 20 08:03:49 np0005625201 runuser[82977]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:49 np0005625201 runuser[83055]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:03:50 np0005625201 runuser[83055]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:03:51 np0005625201 sshd[83140]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:03:52 np0005625201 sshd[83102]: Invalid user zhao from 185.246.128.171 port 57450 Feb 20 08:03:53 np0005625201 sshd[83102]: Disconnecting invalid user zhao 185.246.128.171 port 57450: Change of username or service not allowed: (zhao,ssh-connection) -> (zxcloudsetup,ssh-connection) [preauth] Feb 20 08:03:57 np0005625201 sshd[83215]: Invalid user zxcloudsetup from 185.246.128.171 port 22612 Feb 20 08:03:57 np0005625201 sshd[83215]: Disconnecting invalid user zxcloudsetup 185.246.128.171 port 22612: Change of username or service not allowed: (zxcloudsetup,ssh-connection) -> (super,ssh-connection) [preauth] Feb 20 08:03:58 np0005625201 su[83504]: pam_unix(su:session): session opened for user redis(uid=42460) by (uid=0) Feb 20 08:03:58 np0005625201 su[83504]: pam_lastlog(su:session): file /var/log/lastlog created Feb 20 08:03:58 np0005625201 su[83504]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Feb 20 08:03:58 np0005625201 su[83504]: pam_unix(su:session): session closed for user redis Feb 20 08:03:59 np0005625201 sshd[83554]: Invalid user super from 185.246.128.171 port 50264 Feb 20 08:04:00 np0005625201 sshd[83554]: Disconnecting invalid user super 185.246.128.171 port 50264: Change of username or service not allowed: (super,ssh-connection) -> (frontend,ssh-connection) [preauth] Feb 20 08:04:01 np0005625201 runuser[83754]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:01 np0005625201 runuser[83754]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:01 np0005625201 runuser[83850]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:02 np0005625201 runuser[83850]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:02 np0005625201 runuser[84004]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:03 np0005625201 runuser[84004]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:03 np0005625201 sshd[83703]: Invalid user frontend from 185.246.128.171 port 3308 Feb 20 08:04:03 np0005625201 sshd[83703]: Disconnecting invalid user frontend 185.246.128.171 port 3308: Change of username or service not allowed: (frontend,ssh-connection) -> (satisfactory,ssh-connection [preauth] Feb 20 08:04:05 np0005625201 sshd[84085]: Invalid user sybase from 122.166.49.42 port 47774 Feb 20 08:04:05 np0005625201 sshd[84085]: Received disconnect from 122.166.49.42 port 47774:11: Bye Bye [preauth] Feb 20 08:04:05 np0005625201 sshd[84085]: Disconnected from invalid user sybase 122.166.49.42 port 47774 [preauth] Feb 20 08:04:06 np0005625201 sshd[84341]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:04:07 np0005625201 sshd[84238]: Invalid user satisfactory from 185.246.128.171 port 31203 Feb 20 08:04:09 np0005625201 sshd[84238]: Disconnecting invalid user satisfactory 185.246.128.171 port 31203: Change of username or service not allowed: (satisfactory,ssh-connection) -> (vali,ssh-connection) [preauth] Feb 20 08:04:14 np0005625201 runuser[84766]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:14 np0005625201 sshd[84673]: Invalid user vali from 185.246.128.171 port 13771 Feb 20 08:04:14 np0005625201 sshd[84673]: Disconnecting invalid user vali 185.246.128.171 port 13771: Change of username or service not allowed: (vali,ssh-connection) -> (Admin,ssh-connection) [preauth] Feb 20 08:04:14 np0005625201 runuser[84766]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:14 np0005625201 runuser[84851]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:15 np0005625201 runuser[84851]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:15 np0005625201 runuser[84930]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:16 np0005625201 runuser[84930]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:17 np0005625201 sshd[84911]: Invalid user Admin from 185.246.128.171 port 38209 Feb 20 08:04:19 np0005625201 sshd[85205]: Invalid user blockchain from 92.118.39.72 port 49658 Feb 20 08:04:19 np0005625201 sshd[85205]: Connection closed by invalid user blockchain 92.118.39.72 port 49658 [preauth] Feb 20 08:04:21 np0005625201 sshd[85216]: Received disconnect from 103.183.75.204 port 39978:11: Bye Bye [preauth] Feb 20 08:04:21 np0005625201 sshd[85216]: Disconnected from authenticating user root 103.183.75.204 port 39978 [preauth] Feb 20 08:04:22 np0005625201 sshd[84911]: error: maximum authentication attempts exceeded for invalid user Admin from 185.246.128.171 port 38209 ssh2 [preauth] Feb 20 08:04:22 np0005625201 sshd[84911]: Disconnecting invalid user Admin 185.246.128.171 port 38209: Too many authentication failures [preauth] Feb 20 08:04:25 np0005625201 sshd[85298]: Invalid user Admin from 185.246.128.171 port 29297 Feb 20 08:04:27 np0005625201 runuser[85455]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:27 np0005625201 runuser[85455]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:27 np0005625201 sshd[85298]: Disconnecting invalid user Admin 185.246.128.171 port 29297: Change of username or service not allowed: (Admin,ssh-connection) -> (office,ssh-connection) [preauth] Feb 20 08:04:27 np0005625201 runuser[85532]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:28 np0005625201 runuser[85532]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:28 np0005625201 runuser[85666]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:29 np0005625201 runuser[85666]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:30 np0005625201 sudo[85853]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ppawispcossjbqgqkyvqrwvjxfjqmqvz ; /usr/bin/python3 Feb 20 08:04:30 np0005625201 sudo[85853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:30 np0005625201 sudo[85853]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:30 np0005625201 sudo[85914]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwnbgilznprckajexisabhbolvxpwhgo ; /usr/bin/python3 Feb 20 08:04:30 np0005625201 sudo[85914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:31 np0005625201 sudo[85914]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:32 np0005625201 sudo[86006]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-raoxipolusigtrwnsqyxpukmthpfiwbd ; /usr/bin/python3 Feb 20 08:04:32 np0005625201 sudo[86006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:32 np0005625201 sudo[86006]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:32 np0005625201 sudo[86072]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bwdeetxffnbjfkzwmlzpbkmikzaucxos ; /usr/bin/python3 Feb 20 08:04:32 np0005625201 sudo[86072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:33 np0005625201 sudo[86072]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:33 np0005625201 sudo[86098]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shbygmljswltzefgtbanitgvwhiiujbz ; /usr/bin/python3 Feb 20 08:04:33 np0005625201 sudo[86098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:33 np0005625201 sudo[86098]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:33 np0005625201 sshd[85782]: Invalid user office from 185.246.128.171 port 8180 Feb 20 08:04:33 np0005625201 sshd[85782]: Disconnecting invalid user office 185.246.128.171 port 8180: Change of username or service not allowed: (office,ssh-connection) -> (fusion,ssh-connection) [preauth] Feb 20 08:04:34 np0005625201 sudo[86218]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mnddmpibayvvpwcatscwvfaeevrhtkhx ; ANSIBLE_ASYNC_DIR=/tmp/.ansible_async /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574673.6595678-99477-159397789405174/async_wrapper.py 962976421764 3600 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574673.6595678-99477-159397789405174/AnsiballZ_command.py _ Feb 20 08:04:34 np0005625201 sudo[86218]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 08:04:34 np0005625201 sudo[86218]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:34 np0005625201 sudo[86247]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dkxoeubyvvngezdtqjzaeufhklpezhna ; /usr/bin/python3 Feb 20 08:04:34 np0005625201 sudo[86247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:34 np0005625201 sudo[86247]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:36 np0005625201 sshd[86284]: Invalid user fusion from 185.246.128.171 port 44329 Feb 20 08:04:36 np0005625201 sshd[86284]: Disconnecting invalid user fusion 185.246.128.171 port 44329: Change of username or service not allowed: (fusion,ssh-connection) -> (sftp_user,ssh-connection) [preauth] Feb 20 08:04:37 np0005625201 sshd[86416]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:04:40 np0005625201 runuser[86662]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:40 np0005625201 runuser[86662]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:40 np0005625201 runuser[86755]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:41 np0005625201 sshd[86519]: Invalid user sftp_user from 185.246.128.171 port 1183 Feb 20 08:04:41 np0005625201 sshd[86519]: Disconnecting invalid user sftp_user 185.246.128.171 port 1183: Change of username or service not allowed: (sftp_user,ssh-connection) -> (mary,ssh-connection) [preauth] Feb 20 08:04:41 np0005625201 runuser[86755]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:41 np0005625201 runuser[86833]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:42 np0005625201 runuser[86833]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:43 np0005625201 sshd[86901]: Invalid user mary from 185.246.128.171 port 28319 Feb 20 08:04:44 np0005625201 sshd[86901]: Disconnecting invalid user mary 185.246.128.171 port 28319: Change of username or service not allowed: (mary,ssh-connection) -> (helpdesk,ssh-connection) [preauth] Feb 20 08:04:44 np0005625201 sudo[87017]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jcrjbgfduxxejgjlqqvofhgpdousbose ; /usr/bin/python3 Feb 20 08:04:44 np0005625201 sudo[87017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:44 np0005625201 sudo[87017]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:45 np0005625201 sudo[87029]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:04:45 np0005625201 sudo[87029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:04:45 np0005625201 sudo[87029]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:45 np0005625201 sudo[87053]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:04:45 np0005625201 sudo[87053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:04:45 np0005625201 sudo[87081]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vzmgyjdpylumwesifmdklqkonqhjhcdj ; /usr/bin/python3 Feb 20 08:04:45 np0005625201 sudo[87081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:45 np0005625201 sudo[87081]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:45 np0005625201 sudo[87126]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ykhzzloitjotmmnhnfajmmpzymtwrmif ; /usr/bin/python3 Feb 20 08:04:45 np0005625201 sudo[87126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:45 np0005625201 sudo[87053]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:46 np0005625201 sudo[87126]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:46 np0005625201 sshd[87110]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:04:46 np0005625201 sudo[87192]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:04:46 np0005625201 sudo[87192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:04:46 np0005625201 sudo[87192]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:46 np0005625201 sudo[87219]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fnuabnrjarwclwiukdryqjqjmkeotrhu ; /usr/bin/python3 Feb 20 08:04:46 np0005625201 sudo[87219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:46 np0005625201 sudo[87219]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:46 np0005625201 sudo[87290]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sqbljfqcygvsssypwlhfbqgsfqczkobz ; /usr/bin/python3 Feb 20 08:04:46 np0005625201 sudo[87290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:46 np0005625201 sshd[87020]: Invalid user helpdesk from 185.246.128.171 port 45354 Feb 20 08:04:46 np0005625201 sudo[87290]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:47 np0005625201 sudo[87367]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sewnfuhdtpqhfdpuekevfmallkesojbh ; /usr/bin/python3 Feb 20 08:04:47 np0005625201 sudo[87367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:47 np0005625201 sudo[87367]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:47 np0005625201 sudo[87399]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntwukjrlyoqdcyvimwrtneedsndjqxnk ; /usr/bin/python3 Feb 20 08:04:47 np0005625201 sudo[87399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:47 np0005625201 sudo[87399]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:48 np0005625201 sshd[87020]: Disconnecting invalid user helpdesk 185.246.128.171 port 45354: Change of username or service not allowed: (helpdesk,ssh-connection) -> (marek,ssh-connection) [preauth] Feb 20 08:04:48 np0005625201 sudo[87510]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mqgmtdwatnryapomcqbotutubcbweswt ; /usr/bin/python3 Feb 20 08:04:48 np0005625201 sudo[87510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:48 np0005625201 sudo[87510]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:49 np0005625201 sudo[87716]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jjllkmiuieloqrhvrxodjecgacytjagz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:49 np0005625201 sudo[87716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:49 np0005625201 sudo[87716]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:49 np0005625201 sudo[87795]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mfxhjneuyvkipqgttjqmfuammbmpqgpa ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:49 np0005625201 sudo[87795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:49 np0005625201 sudo[87795]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:50 np0005625201 sudo[87828]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-omhcmhcclfrskzyzmsdjsswkgovmisha ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:50 np0005625201 sudo[87828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:50 np0005625201 sudo[87828]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:51 np0005625201 sudo[87886]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-psttwqtswqfdyqbnamsxxlpdhsstjnqo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:51 np0005625201 sudo[87886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:51 np0005625201 sudo[87886]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:51 np0005625201 sudo[87919]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aqtvbeajdwifwlcqtaeqifquenfmtcnq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:51 np0005625201 sudo[87919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:51 np0005625201 sudo[87919]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:51 np0005625201 sudo[87990]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vnsskldxvirmkspepibkufraaxesshde ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:51 np0005625201 sudo[87990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:52 np0005625201 sudo[87990]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:52 np0005625201 sudo[88008]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-olmceyzhwqqkyodpkraabtprcognhefu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:52 np0005625201 sudo[88008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:52 np0005625201 sudo[88008]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:52 np0005625201 sshd[88011]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:04:52 np0005625201 sudo[88096]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tanmnkytzycrxnewqicjqccydyecptcr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:52 np0005625201 sudo[88096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:52 np0005625201 runuser[88103]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:52 np0005625201 sudo[88096]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:53 np0005625201 sudo[88163]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-upukuubuuzabccsjjckxgibwwscvpdhz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:53 np0005625201 sudo[88163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:53 np0005625201 sudo[88163]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:53 np0005625201 sshd[87781]: Invalid user marek from 185.246.128.171 port 14741 Feb 20 08:04:53 np0005625201 runuser[88103]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:53 np0005625201 sudo[88308]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jlwmqyzkrsbeaswfpnfsbyawnqhilimt ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:53 np0005625201 sudo[88308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:53 np0005625201 runuser[88326]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:53 np0005625201 sudo[88308]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:53 np0005625201 sudo[88386]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbpidcecvlbfsaprautuyxcfzfxspfuu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:53 np0005625201 sudo[88386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:54 np0005625201 sudo[88386]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:54 np0005625201 sshd[87781]: Disconnecting invalid user marek 185.246.128.171 port 14741: Change of username or service not allowed: (marek,ssh-connection) -> (ahmed,ssh-connection) [preauth] Feb 20 08:04:54 np0005625201 sudo[88420]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-olqgfwumuuzhnlxbcupgdcwalpzyujvz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:54 np0005625201 sudo[88420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:54 np0005625201 runuser[88326]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:54 np0005625201 runuser[88444]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:04:55 np0005625201 sudo[88420]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:55 np0005625201 runuser[88444]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:04:55 np0005625201 sudo[88594]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkqivkuiusmacyxekriymxapneecgjjj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:55 np0005625201 sudo[88594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:55 np0005625201 sudo[88594]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:55 np0005625201 sudo[88629]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qpmuvetpufxwqfaooovembyuvfiwjhll ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:55 np0005625201 sudo[88629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:55 np0005625201 sudo[88629]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:56 np0005625201 sudo[88700]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-myvcknjtaptryymlhvawqudvhxtguoap ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:56 np0005625201 sudo[88700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:56 np0005625201 sudo[88700]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:56 np0005625201 sudo[88734]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pwpgquhazzdypfarvoiaaqryvbzjqktf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:56 np0005625201 sudo[88734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:56 np0005625201 sudo[88734]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:57 np0005625201 sudo[88827]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wqrtmbkawccmlyyelxphhkieezijwesh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:57 np0005625201 sudo[88827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:57 np0005625201 sudo[88827]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:58 np0005625201 sudo[88908]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-szlcmqgoxynnctnnnxfzzgowimvmgojq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:58 np0005625201 sudo[88908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:58 np0005625201 sudo[88908]: pam_unix(sudo:session): session closed for user root Feb 20 08:04:58 np0005625201 sudo[89006]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-suunvfmeudhdwtzkrhvhuvypeotzmoxy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:04:58 np0005625201 sudo[89006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:04:58 np0005625201 sshd[88499]: Invalid user ahmed from 185.246.128.171 port 49006 Feb 20 08:04:59 np0005625201 sudo[89006]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:00 np0005625201 sudo[89122]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yvdkrkagjskfjlyhnfcoctpgtcsffbvm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:00 np0005625201 sudo[89122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:00 np0005625201 sshd[88499]: Disconnecting invalid user ahmed 185.246.128.171 port 49006: Change of username or service not allowed: (ahmed,ssh-connection) -> (aziz,ssh-connection) [preauth] Feb 20 08:05:00 np0005625201 sudo[89387]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:00 np0005625201 sudo[89387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:00 np0005625201 sudo[89387]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:01 np0005625201 sudo[89488]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:01 np0005625201 sudo[89488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:01 np0005625201 sudo[89488]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:01 np0005625201 sudo[89797]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:01 np0005625201 sudo[89797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:01 np0005625201 sudo[89808]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:01 np0005625201 sudo[89797]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:01 np0005625201 systemd[89848]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:01 np0005625201 sudo[89868]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:01 np0005625201 sudo[89868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:01 np0005625201 sudo[89868]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:01 np0005625201 sudo[89808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:01 np0005625201 sudo[89808]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:02 np0005625201 sudo[90244]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:02 np0005625201 sudo[90244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:02 np0005625201 sudo[90244]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:02 np0005625201 sudo[90387]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:02 np0005625201 sudo[90387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:02 np0005625201 sudo[90387]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:02 np0005625201 sudo[90534]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:02 np0005625201 sudo[90534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:02 np0005625201 sudo[90534]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:02 np0005625201 sudo[90579]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:02 np0005625201 sudo[90579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:03 np0005625201 sudo[90579]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:04 np0005625201 sudo[90946]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:04 np0005625201 sudo[90946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:04 np0005625201 sudo[90954]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:04 np0005625201 sudo[90954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:04 np0005625201 sudo[90946]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:04 np0005625201 sudo[90954]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:05 np0005625201 sshd[90490]: Invalid user aziz from 185.246.128.171 port 40071 Feb 20 08:05:05 np0005625201 sshd[90490]: Disconnecting invalid user aziz 185.246.128.171 port 40071: Change of username or service not allowed: (aziz,ssh-connection) -> (nginx,ssh-connection) [preauth] Feb 20 08:05:05 np0005625201 sudo[91172]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:05 np0005625201 sudo[91172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:05 np0005625201 sudo[91177]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:05 np0005625201 sudo[91177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:05 np0005625201 sudo[91172]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:05 np0005625201 sudo[91177]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:05 np0005625201 runuser[91365]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:06 np0005625201 sudo[91466]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:06 np0005625201 sudo[91466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:06 np0005625201 sudo[91466]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:06 np0005625201 runuser[91365]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:06 np0005625201 runuser[91538]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:07 np0005625201 sshd[91301]: Invalid user nginx from 185.246.128.171 port 59189 Feb 20 08:05:07 np0005625201 sudo[89122]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:07 np0005625201 runuser[91538]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:07 np0005625201 runuser[91756]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:07 np0005625201 sudo[91824]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-evcjhktmxvzjrdthgwsfbuyctxkunadk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:07 np0005625201 sudo[91824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:07 np0005625201 sudo[91824]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:07 np0005625201 sudo[91841]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xlzsvglkievyxddopmcesggpvgebzzrp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:07 np0005625201 sudo[91841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:07 np0005625201 sudo[91841]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:07 np0005625201 runuser[91756]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:07 np0005625201 sudo[91906]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hcparnfiqzthmzcfzfurauoeqxxoapza ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:07 np0005625201 sudo[91906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:08 np0005625201 sudo[91906]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:08 np0005625201 sudo[91964]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vlprisojykttltgnzftuehefnkobhjaj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:08 np0005625201 sudo[91964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:08 np0005625201 sudo[91964]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:08 np0005625201 sudo[91981]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ydugdwozhllsnftyzjovieagqaifbrhv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:08 np0005625201 sudo[91981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:08 np0005625201 sudo[91981]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:08 np0005625201 sudo[92038]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ooafcdltvsvhprxdiupcqgizawhvjsld ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:08 np0005625201 sudo[92038]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:08 np0005625201 sudo[92038]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:08 np0005625201 sudo[92070]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-femrashwiwhevwnlhuimquqddltkjyga ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:08 np0005625201 sudo[92070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:09 np0005625201 sudo[92070]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:09 np0005625201 sudo[92086]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnltffhkythpmuigaottufkgluwpkprs ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:09 np0005625201 sudo[92086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:09 np0005625201 sshd[91301]: Disconnecting invalid user nginx 185.246.128.171 port 59189: Change of username or service not allowed: (nginx,ssh-connection) -> (samba,ssh-connection) [preauth] Feb 20 08:05:09 np0005625201 sudo[92086]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:09 np0005625201 sudo[92141]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aemkgwwbiwljiefsxfchpwgbcdktkkyl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:09 np0005625201 sudo[92141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:09 np0005625201 sudo[92141]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:09 np0005625201 sudo[92198]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-trogqcxpnxhdvinfkcjfwgknopohtdzu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:09 np0005625201 sudo[92198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:09 np0005625201 sudo[92198]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:09 np0005625201 sudo[92230]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aotngcorzewadhavrjtmdrnlsuinynza ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:09 np0005625201 sudo[92230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:10 np0005625201 sudo[92230]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:10 np0005625201 sudo[92246]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oqchhbnwdjlklhrqjzjhxmnnbwgrwhik ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:10 np0005625201 sudo[92246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:10 np0005625201 sudo[92246]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:10 np0005625201 sudo[92317]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dadfrvucsklxewannulcsitavdbfxmtv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:10 np0005625201 sudo[92317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:10 np0005625201 sudo[92317]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:11 np0005625201 sudo[92362]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-weqioekpxlrsajhftwfgijbahmvsntvl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:11 np0005625201 sudo[92362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:11 np0005625201 sudo[92362]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:11 np0005625201 sudo[92399]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zlrqlyvpkyoqqwgkrnicoaadqbvfgkwy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:11 np0005625201 sudo[92399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:11 np0005625201 sudo[92399]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:12 np0005625201 sudo[92444]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eesubffqjrejkpozqgerndbhzykmsftd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:12 np0005625201 sudo[92444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:12 np0005625201 sudo[92444]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:12 np0005625201 sudo[92481]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rixdluxrbhcqvwexhlxfpewvfseszsrm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:12 np0005625201 sudo[92481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:13 np0005625201 sudo[92481]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:13 np0005625201 sshd[92270]: Invalid user samba from 185.246.128.171 port 28312 Feb 20 08:05:13 np0005625201 sudo[92526]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qiizoyrkubhoeihudpwycvtfiqbemqas ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:13 np0005625201 sudo[92526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:13 np0005625201 sudo[92526]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:13 np0005625201 sudo[92589]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihwevemixjkusoktxvbtdsrewsbnaetr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:13 np0005625201 sudo[92589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:14 np0005625201 sudo[92589]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:14 np0005625201 sshd[92270]: Disconnecting invalid user samba 185.246.128.171 port 28312: Change of username or service not allowed: (samba,ssh-connection) -> (ventas01,ssh-connection) [preauth] Feb 20 08:05:14 np0005625201 sudo[92664]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lisevsaexlayompmrgrdnqxytblsyoij ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:14 np0005625201 sudo[92664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:16 np0005625201 sudo[92664]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:17 np0005625201 sudo[92852]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-telrhsexckjsblassbdfokwbrmpzlgmy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:17 np0005625201 sudo[92852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:18 np0005625201 sudo[92852]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:18 np0005625201 runuser[92936]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:18 np0005625201 sudo[92998]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkuowgyexcwxoodgfqtvoewmvslqvznb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:18 np0005625201 sudo[92998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:19 np0005625201 runuser[92936]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:19 np0005625201 sudo[92998]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:19 np0005625201 runuser[93126]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:19 np0005625201 sshd[92710]: Invalid user ventas01 from 185.246.128.171 port 5435 Feb 20 08:05:20 np0005625201 sshd[92710]: Disconnecting invalid user ventas01 185.246.128.171 port 5435: Change of username or service not allowed: (ventas01,ssh-connection) -> (scsadmin,ssh-connection) [preauth] Feb 20 08:05:20 np0005625201 sudo[93237]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qqdhddsfqcmzdsjqlqmslwbhhohffuiw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:20 np0005625201 sudo[93237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:20 np0005625201 runuser[93126]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:20 np0005625201 runuser[93253]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:20 np0005625201 sudo[93237]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:20 np0005625201 runuser[93253]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:21 np0005625201 sshd[93308]: Invalid user scsadmin from 185.246.128.171 port 32913 Feb 20 08:05:21 np0005625201 sshd[93308]: Disconnecting invalid user scsadmin 185.246.128.171 port 32913: Change of username or service not allowed: (scsadmin,ssh-connection) -> (cisco,ssh-connection) [preauth] Feb 20 08:05:21 np0005625201 sudo[93409]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-asohmngrydghgguabbnyfwyhebftgbqn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:21 np0005625201 sudo[93409]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:22 np0005625201 sudo[93409]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:22 np0005625201 sshd[93488]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:05:22 np0005625201 sudo[93511]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ckstctcljvdenxrvahpcmckvaeobmohq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:05:22 np0005625201 sudo[93511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:23 np0005625201 sudo[93589]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:23 np0005625201 sudo[93589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:23 np0005625201 sudo[93511]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:23 np0005625201 sudo[93589]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:23 np0005625201 sudo[93652]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkkjgpsxpzxlrttchszxctvpsaziqbry ; /usr/bin/python3 Feb 20 08:05:24 np0005625201 sudo[93652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:24 np0005625201 sudo[93674]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:24 np0005625201 sudo[93674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:24 np0005625201 sudo[93652]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:24 np0005625201 sudo[93674]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:24 np0005625201 sshd[93457]: Invalid user cisco from 185.246.128.171 port 43649 Feb 20 08:05:24 np0005625201 sudo[93764]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmuxiwfnenmwltjtrrvkemdhnnbjjomx ; /usr/bin/python3 Feb 20 08:05:24 np0005625201 sudo[93764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:24 np0005625201 sudo[93793]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:24 np0005625201 sudo[93793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:24 np0005625201 sudo[93764]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:24 np0005625201 sudo[93793]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:25 np0005625201 sudo[93857]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lniubdiolxcewzupolpoovadhwnfdupp ; /usr/bin/python3 Feb 20 08:05:25 np0005625201 sudo[93857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:25 np0005625201 sudo[93857]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:25 np0005625201 sudo[93910]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ugcqmfcjjcuzlxdgtgexbbjvpvjvagwq ; /usr/bin/python3 Feb 20 08:05:25 np0005625201 sudo[93910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:25 np0005625201 sudo[93932]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:25 np0005625201 sudo[93932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:25 np0005625201 sudo[93932]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:25 np0005625201 sudo[93910]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:26 np0005625201 sudo[93986]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:05:26 np0005625201 sudo[93986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:05:26 np0005625201 sudo[94001]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-osoyofrwtueegyeixgmmwevuozmxcecx ; /usr/bin/python3 Feb 20 08:05:26 np0005625201 sudo[94001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:26 np0005625201 sudo[93986]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:26 np0005625201 sudo[94001]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:26 np0005625201 sudo[94060]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqccforcqbzgsyjsiqphyiicuvqbhnoo ; /usr/bin/python3 Feb 20 08:05:26 np0005625201 sudo[94060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:05:26 np0005625201 sshd[93457]: Disconnecting invalid user cisco 185.246.128.171 port 43649: Change of username or service not allowed: (cisco,ssh-connection) -> (mina,ssh-connection) [preauth] Feb 20 08:05:26 np0005625201 sudo[94060]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:28 np0005625201 sshd[94142]: Invalid user mina from 185.246.128.171 port 18821 Feb 20 08:05:28 np0005625201 sshd[94142]: Disconnecting invalid user mina 185.246.128.171 port 18821: Change of username or service not allowed: (mina,ssh-connection) -> (cat,ssh-connection) [preauth] Feb 20 08:05:30 np0005625201 sshd[94248]: Invalid user cat from 185.246.128.171 port 29031 Feb 20 08:05:31 np0005625201 runuser[94351]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:31 np0005625201 sshd[94248]: Disconnecting invalid user cat 185.246.128.171 port 29031: Change of username or service not allowed: (cat,ssh-connection) -> (teamspeak,ssh-connection) [preauth] Feb 20 08:05:32 np0005625201 runuser[94351]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:32 np0005625201 runuser[94475]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:33 np0005625201 runuser[94475]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:33 np0005625201 runuser[94581]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:34 np0005625201 runuser[94581]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:34 np0005625201 sshd[94643]: Received disconnect from 194.87.216.133 port 55654:11: Bye Bye [preauth] Feb 20 08:05:34 np0005625201 sshd[94643]: Disconnected from authenticating user root 194.87.216.133 port 55654 [preauth] Feb 20 08:05:37 np0005625201 sshd[94671]: Invalid user teamspeak from 185.246.128.171 port 62069 Feb 20 08:05:38 np0005625201 sshd[94671]: Disconnecting invalid user teamspeak 185.246.128.171 port 62069: Change of username or service not allowed: (teamspeak,ssh-connection) -> (12345,ssh-connection) [preauth] Feb 20 08:05:38 np0005625201 sshd[94928]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:05:39 np0005625201 sshd[94948]: Invalid user ubuntu from 92.118.39.76 port 54288 Feb 20 08:05:39 np0005625201 sshd[94948]: Connection closed by invalid user ubuntu 92.118.39.76 port 54288 [preauth] Feb 20 08:05:42 np0005625201 sshd[95085]: Invalid user 12345 from 185.246.128.171 port 39184 Feb 20 08:05:42 np0005625201 sshd[95085]: Disconnecting invalid user 12345 185.246.128.171 port 39184: Change of username or service not allowed: (12345,ssh-connection) -> (user1,ssh-connection) [preauth] Feb 20 08:05:44 np0005625201 runuser[95231]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:44 np0005625201 sshd[95162]: Invalid user user1 from 185.246.128.171 port 62708 Feb 20 08:05:45 np0005625201 runuser[95231]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:45 np0005625201 runuser[95316]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:46 np0005625201 runuser[95316]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:46 np0005625201 runuser[95386]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:46 np0005625201 sudo[95441]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:05:46 np0005625201 sudo[95441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:05:46 np0005625201 sudo[95441]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:46 np0005625201 sshd[95162]: error: maximum authentication attempts exceeded for invalid user user1 from 185.246.128.171 port 62708 ssh2 [preauth] Feb 20 08:05:46 np0005625201 sshd[95162]: Disconnecting invalid user user1 185.246.128.171 port 62708: Too many authentication failures [preauth] Feb 20 08:05:46 np0005625201 sudo[95460]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:05:46 np0005625201 sudo[95460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:05:46 np0005625201 runuser[95386]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:47 np0005625201 sudo[95460]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:47 np0005625201 sudo[95628]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:05:47 np0005625201 sudo[95628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:05:47 np0005625201 sudo[95628]: pam_unix(sudo:session): session closed for user root Feb 20 08:05:50 np0005625201 sshd[95651]: Invalid user user1 from 185.246.128.171 port 29036 Feb 20 08:05:52 np0005625201 sshd[95651]: error: maximum authentication attempts exceeded for invalid user user1 from 185.246.128.171 port 29036 ssh2 [preauth] Feb 20 08:05:52 np0005625201 sshd[95651]: Disconnecting invalid user user1 185.246.128.171 port 29036: Too many authentication failures [preauth] Feb 20 08:05:57 np0005625201 sshd[96012]: Invalid user user1 from 185.246.128.171 port 9140 Feb 20 08:05:57 np0005625201 runuser[96153]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:58 np0005625201 runuser[96153]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:58 np0005625201 runuser[96230]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:59 np0005625201 runuser[96230]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:59 np0005625201 runuser[96347]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:05:59 np0005625201 runuser[96347]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:05:59 np0005625201 sshd[96012]: error: maximum authentication attempts exceeded for invalid user user1 from 185.246.128.171 port 9140 ssh2 [preauth] Feb 20 08:05:59 np0005625201 sshd[96012]: Disconnecting invalid user user1 185.246.128.171 port 9140: Too many authentication failures [preauth] Feb 20 08:06:00 np0005625201 sshd[96505]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:06:01 np0005625201 sshd[96495]: Invalid user user1 from 185.246.128.171 port 54926 Feb 20 08:06:01 np0005625201 sshd[96495]: Disconnecting invalid user user1 185.246.128.171 port 54926: Change of username or service not allowed: (user1,ssh-connection) -> (czr,ssh-connection) [preauth] Feb 20 08:06:03 np0005625201 sshd[96563]: Invalid user user from 35.188.112.111 port 41164 Feb 20 08:06:03 np0005625201 sshd[96563]: Received disconnect from 35.188.112.111 port 41164:11: Bye Bye [preauth] Feb 20 08:06:03 np0005625201 sshd[96563]: Disconnected from invalid user user 35.188.112.111 port 41164 [preauth] Feb 20 08:06:04 np0005625201 sshd[96576]: Invalid user czr from 185.246.128.171 port 10648 Feb 20 08:06:05 np0005625201 sshd[96576]: Disconnecting invalid user czr 185.246.128.171 port 10648: Change of username or service not allowed: (czr,ssh-connection) -> (alireza,ssh-connection) [preauth] Feb 20 08:06:07 np0005625201 sshd[96768]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:06:08 np0005625201 sshd[96719]: Invalid user alireza from 185.246.128.171 port 32311 Feb 20 08:06:08 np0005625201 sshd[96719]: Disconnecting invalid user alireza 185.246.128.171 port 32311: Change of username or service not allowed: (alireza,ssh-connection) -> (userftp,ssh-connection) [preauth] Feb 20 08:06:10 np0005625201 runuser[97087]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:11 np0005625201 runuser[97087]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:11 np0005625201 runuser[97173]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:11 np0005625201 runuser[97173]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:11 np0005625201 runuser[97240]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:12 np0005625201 runuser[97240]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:13 np0005625201 sshd[97140]: Invalid user userftp from 185.246.128.171 port 5500 Feb 20 08:06:15 np0005625201 sshd[97140]: Disconnecting invalid user userftp 185.246.128.171 port 5500: Change of username or service not allowed: (userftp,ssh-connection) -> (smart,ssh-connection) [preauth] Feb 20 08:06:17 np0005625201 sshd[97445]: Invalid user smart from 185.246.128.171 port 44865 Feb 20 08:06:18 np0005625201 sshd[97550]: Invalid user pool from 92.118.39.72 port 60070 Feb 20 08:06:19 np0005625201 sshd[97445]: Disconnecting invalid user smart 185.246.128.171 port 44865: Change of username or service not allowed: (smart,ssh-connection) -> (mama,ssh-connection) [preauth] Feb 20 08:06:19 np0005625201 sshd[97550]: Connection closed by invalid user pool 92.118.39.72 port 60070 [preauth] Feb 20 08:06:23 np0005625201 runuser[97752]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:24 np0005625201 runuser[97752]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:24 np0005625201 runuser[97895]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:24 np0005625201 sshd[97702]: Invalid user mama from 185.246.128.171 port 20578 Feb 20 08:06:24 np0005625201 runuser[97895]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:24 np0005625201 runuser[97957]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:25 np0005625201 sshd[97702]: Disconnecting invalid user mama 185.246.128.171 port 20578: Change of username or service not allowed: (mama,ssh-connection) -> (oper,ssh-connection) [preauth] Feb 20 08:06:25 np0005625201 sshd[98015]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:06:25 np0005625201 runuser[97957]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:28 np0005625201 sshd[98057]: Invalid user oper from 185.246.128.171 port 56680 Feb 20 08:06:29 np0005625201 sshd[98057]: Disconnecting invalid user oper 185.246.128.171 port 56680: Change of username or service not allowed: (oper,ssh-connection) -> (connect,ssh-connection) [preauth] Feb 20 08:06:34 np0005625201 sshd[98324]: Invalid user connect from 185.246.128.171 port 28027 Feb 20 08:06:35 np0005625201 sshd[98324]: Disconnecting invalid user connect 185.246.128.171 port 28027: Change of username or service not allowed: (connect,ssh-connection) -> (ftptest,ssh-connection) [preauth] Feb 20 08:06:36 np0005625201 runuser[98544]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:37 np0005625201 runuser[98544]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:37 np0005625201 runuser[98621]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:38 np0005625201 runuser[98621]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:38 np0005625201 runuser[98799]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:38 np0005625201 sshd[98523]: Invalid user ftptest from 185.246.128.171 port 3496 Feb 20 08:06:38 np0005625201 sshd[98523]: Disconnecting invalid user ftptest 185.246.128.171 port 3496: Change of username or service not allowed: (ftptest,ssh-connection) -> (oracle,ssh-connection) [preauth] Feb 20 08:06:39 np0005625201 runuser[98799]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:40 np0005625201 sshd[98909]: Invalid user oracle from 185.246.128.171 port 27662 Feb 20 08:06:41 np0005625201 sshd[98909]: error: maximum authentication attempts exceeded for invalid user oracle from 185.246.128.171 port 27662 ssh2 [preauth] Feb 20 08:06:41 np0005625201 sshd[98909]: Disconnecting invalid user oracle 185.246.128.171 port 27662: Too many authentication failures [preauth] Feb 20 08:06:42 np0005625201 sshd[99031]: Invalid user oracle from 185.246.128.171 port 46193 Feb 20 08:06:44 np0005625201 sshd[99081]: Invalid user oracle from 162.19.250.18 port 33314 Feb 20 08:06:44 np0005625201 sshd[99081]: Received disconnect from 162.19.250.18 port 33314:11: Bye Bye [preauth] Feb 20 08:06:44 np0005625201 sshd[99081]: Disconnected from invalid user oracle 162.19.250.18 port 33314 [preauth] Feb 20 08:06:48 np0005625201 sudo[99326]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:06:48 np0005625201 sudo[99326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:06:48 np0005625201 sudo[99326]: pam_unix(sudo:session): session closed for user root Feb 20 08:06:48 np0005625201 sudo[99341]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:06:48 np0005625201 sudo[99341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:06:48 np0005625201 sudo[99341]: pam_unix(sudo:session): session closed for user root Feb 20 08:06:49 np0005625201 sshd[99031]: error: maximum authentication attempts exceeded for invalid user oracle from 185.246.128.171 port 46193 ssh2 [preauth] Feb 20 08:06:49 np0005625201 sshd[99031]: Disconnecting invalid user oracle 185.246.128.171 port 46193: Too many authentication failures [preauth] Feb 20 08:06:49 np0005625201 sudo[99590]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:06:49 np0005625201 sudo[99590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:06:49 np0005625201 sudo[99590]: pam_unix(sudo:session): session closed for user root Feb 20 08:06:49 np0005625201 runuser[99616]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:50 np0005625201 runuser[99616]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:50 np0005625201 runuser[99728]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:50 np0005625201 runuser[99728]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:50 np0005625201 runuser[99806]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:06:51 np0005625201 runuser[99806]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:06:52 np0005625201 sshd[99904]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:06:53 np0005625201 sshd[99676]: Invalid user oracle from 185.246.128.171 port 49805 Feb 20 08:07:00 np0005625201 sshd[99676]: error: maximum authentication attempts exceeded for invalid user oracle from 185.246.128.171 port 49805 ssh2 [preauth] Feb 20 08:07:00 np0005625201 sshd[99676]: Disconnecting invalid user oracle 185.246.128.171 port 49805: Too many authentication failures [preauth] Feb 20 08:07:02 np0005625201 runuser[100297]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:02 np0005625201 runuser[100297]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:03 np0005625201 runuser[100374]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:03 np0005625201 runuser[100374]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:03 np0005625201 runuser[100452]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:03 np0005625201 sshd[100283]: Invalid user oracle from 185.246.128.171 port 25016 Feb 20 08:07:04 np0005625201 runuser[100452]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:05 np0005625201 sshd[100283]: error: maximum authentication attempts exceeded for invalid user oracle from 185.246.128.171 port 25016 ssh2 [preauth] Feb 20 08:07:05 np0005625201 sshd[100283]: Disconnecting invalid user oracle 185.246.128.171 port 25016: Too many authentication failures [preauth] Feb 20 08:07:09 np0005625201 sshd[100605]: Invalid user oracle from 185.246.128.171 port 11702 Feb 20 08:07:11 np0005625201 sshd[100605]: Disconnecting invalid user oracle 185.246.128.171 port 11702: Change of username or service not allowed: (oracle,ssh-connection) -> (isaac,ssh-connection) [preauth] Feb 20 08:07:12 np0005625201 sshd[101102]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:07:13 np0005625201 sshd[101101]: Invalid user isaac from 185.246.128.171 port 7928 Feb 20 08:07:13 np0005625201 sshd[101101]: Disconnecting invalid user isaac 185.246.128.171 port 7928: Change of username or service not allowed: (isaac,ssh-connection) -> (note,ssh-connection) [preauth] Feb 20 08:07:14 np0005625201 sshd[101145]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:07:14 np0005625201 runuser[101176]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:15 np0005625201 runuser[101176]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:15 np0005625201 runuser[101250]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:16 np0005625201 runuser[101250]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:16 np0005625201 runuser[101325]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:17 np0005625201 runuser[101325]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:17 np0005625201 sshd[101155]: Invalid user note from 185.246.128.171 port 33727 Feb 20 08:07:17 np0005625201 sshd[101155]: Disconnecting invalid user note 185.246.128.171 port 33727: Change of username or service not allowed: (note,ssh-connection) -> (shutdown,ssh-connection) [preauth] Feb 20 08:07:20 np0005625201 sshd[101464]: Disconnecting authenticating user shutdown 185.246.128.171 port 6689: Change of username or service not allowed: (shutdown,ssh-connection) -> (dqi,ssh-connection) [preauth] Feb 20 08:07:22 np0005625201 sshd[101681]: Invalid user dqi from 185.246.128.171 port 40638 Feb 20 08:07:22 np0005625201 sshd[101681]: Disconnecting invalid user dqi 185.246.128.171 port 40638: Change of username or service not allowed: (dqi,ssh-connection) -> (maroof,ssh-connection) [preauth] Feb 20 08:07:25 np0005625201 sshd[101739]: Invalid user maroof from 185.246.128.171 port 6468 Feb 20 08:07:27 np0005625201 sshd[101739]: Disconnecting invalid user maroof 185.246.128.171 port 6468: Change of username or service not allowed: (maroof,ssh-connection) -> (centos,ssh-connection) [preauth] Feb 20 08:07:27 np0005625201 runuser[101839]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:28 np0005625201 runuser[101839]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:28 np0005625201 runuser[101978]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:29 np0005625201 runuser[101978]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:29 np0005625201 runuser[102048]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:29 np0005625201 sshd[101834]: Invalid user centos from 185.246.128.171 port 45830 Feb 20 08:07:29 np0005625201 sshd[101834]: Disconnecting invalid user centos 185.246.128.171 port 45830: Change of username or service not allowed: (centos,ssh-connection) -> (sara,ssh-connection) [preauth] Feb 20 08:07:30 np0005625201 runuser[102048]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:31 np0005625201 sshd[102154]: Invalid user sara from 185.246.128.171 port 8444 Feb 20 08:07:31 np0005625201 sshd[102154]: Disconnecting invalid user sara 185.246.128.171 port 8444: Change of username or service not allowed: (sara,ssh-connection) -> (demo,ssh-connection) [preauth] Feb 20 08:07:32 np0005625201 sshd[102270]: Invalid user demo from 185.246.128.171 port 24256 Feb 20 08:07:32 np0005625201 sshd[102270]: Disconnecting invalid user demo 185.246.128.171 port 24256: Change of username or service not allowed: (demo,ssh-connection) -> (xiaoxiao,ssh-connection) [preauth] Feb 20 08:07:36 np0005625201 sshd[102296]: Invalid user xiaoxiao from 185.246.128.171 port 42749 Feb 20 08:07:37 np0005625201 sshd[102296]: Disconnecting invalid user xiaoxiao 185.246.128.171 port 42749: Change of username or service not allowed: (xiaoxiao,ssh-connection) -> (testing,ssh-connection) [preauth] Feb 20 08:07:37 np0005625201 sshd[102446]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:07:40 np0005625201 sshd[102445]: Invalid user testing from 185.246.128.171 port 21222 Feb 20 08:07:40 np0005625201 runuser[102769]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:40 np0005625201 sshd[102706]: Invalid user solv from 92.118.39.76 port 35930 Feb 20 08:07:40 np0005625201 sshd[102706]: Connection closed by invalid user solv 92.118.39.76 port 35930 [preauth] Feb 20 08:07:41 np0005625201 runuser[102769]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:41 np0005625201 runuser[102838]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:41 np0005625201 sshd[102445]: Disconnecting invalid user testing 185.246.128.171 port 21222: Change of username or service not allowed: (testing,ssh-connection) -> (config,ssh-connection) [preauth] Feb 20 08:07:42 np0005625201 runuser[102838]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:42 np0005625201 runuser[102916]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:42 np0005625201 runuser[102916]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:47 np0005625201 sshd[103022]: Invalid user config from 185.246.128.171 port 33907 Feb 20 08:07:48 np0005625201 sshd[103022]: Disconnecting invalid user config 185.246.128.171 port 33907: Change of username or service not allowed: (config,ssh-connection) -> (craft,ssh-connection) [preauth] Feb 20 08:07:49 np0005625201 sudo[103434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:07:49 np0005625201 sudo[103434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:07:49 np0005625201 sudo[103434]: pam_unix(sudo:session): session closed for user root Feb 20 08:07:49 np0005625201 sudo[103461]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:07:49 np0005625201 sudo[103461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:07:50 np0005625201 sudo[103461]: pam_unix(sudo:session): session closed for user root Feb 20 08:07:50 np0005625201 sshd[103385]: Invalid user craft from 185.246.128.171 port 32643 Feb 20 08:07:51 np0005625201 sshd[103385]: Disconnecting invalid user craft 185.246.128.171 port 32643: Change of username or service not allowed: (craft,ssh-connection) -> (rob,ssh-connection) [preauth] Feb 20 08:07:53 np0005625201 sshd[103596]: Invalid user rob from 185.246.128.171 port 56761 Feb 20 08:07:53 np0005625201 sshd[103596]: Disconnecting invalid user rob 185.246.128.171 port 56761: Change of username or service not allowed: (rob,ssh-connection) -> (accounting,ssh-connection) [preauth] Feb 20 08:07:53 np0005625201 runuser[103650]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:54 np0005625201 sudo[103713]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:07:54 np0005625201 sudo[103713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:07:54 np0005625201 sudo[103713]: pam_unix(sudo:session): session closed for user root Feb 20 08:07:54 np0005625201 runuser[103650]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:54 np0005625201 runuser[103752]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:55 np0005625201 runuser[103752]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:55 np0005625201 runuser[103875]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:07:55 np0005625201 sshd[103707]: Invalid user accounting from 185.246.128.171 port 20299 Feb 20 08:07:55 np0005625201 sshd[103707]: Disconnecting invalid user accounting 185.246.128.171 port 20299: Change of username or service not allowed: (accounting,ssh-connection) -> (monitoring,ssh-connection [preauth] Feb 20 08:07:55 np0005625201 runuser[103875]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:07:57 np0005625201 sshd[103971]: Invalid user monitoring from 185.246.128.171 port 44627 Feb 20 08:07:58 np0005625201 sshd[103971]: Disconnecting invalid user monitoring 185.246.128.171 port 44627: Change of username or service not allowed: (monitoring,ssh-connection) -> (cindy,ssh-connection) [preauth] Feb 20 08:08:00 np0005625201 sshd[104077]: Invalid user cindy from 185.246.128.171 port 11718 Feb 20 08:08:00 np0005625201 sshd[104160]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:08:01 np0005625201 sshd[104077]: Disconnecting invalid user cindy 185.246.128.171 port 11718: Change of username or service not allowed: (cindy,ssh-connection) -> (sipv,ssh-connection) [preauth] Feb 20 08:08:02 np0005625201 sshd[104226]: Invalid user oracle from 122.166.49.42 port 53820 Feb 20 08:08:03 np0005625201 sshd[104226]: Received disconnect from 122.166.49.42 port 53820:11: Bye Bye [preauth] Feb 20 08:08:03 np0005625201 sshd[104226]: Disconnected from invalid user oracle 122.166.49.42 port 53820 [preauth] Feb 20 08:08:03 np0005625201 sshd[104269]: Invalid user sipv from 185.246.128.171 port 52764 Feb 20 08:08:04 np0005625201 sshd[104269]: Disconnecting invalid user sipv 185.246.128.171 port 52764: Change of username or service not allowed: (sipv,ssh-connection) -> (squid,ssh-connection) [preauth] Feb 20 08:08:06 np0005625201 sshd[104335]: Invalid user squid from 185.246.128.171 port 21187 Feb 20 08:08:06 np0005625201 runuser[104385]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:06 np0005625201 sshd[104335]: Disconnecting invalid user squid 185.246.128.171 port 21187: Change of username or service not allowed: (squid,ssh-connection) -> (sample,ssh-connection) [preauth] Feb 20 08:08:07 np0005625201 runuser[104385]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:07 np0005625201 runuser[104504]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:07 np0005625201 sshd[104484]: Invalid user sample from 185.246.128.171 port 37463 Feb 20 08:08:07 np0005625201 runuser[104504]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:07 np0005625201 runuser[104582]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:08 np0005625201 sshd[104484]: Disconnecting invalid user sample 185.246.128.171 port 37463: Change of username or service not allowed: (sample,ssh-connection) -> (zomboid,ssh-connection) [preauth] Feb 20 08:08:08 np0005625201 runuser[104582]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:14 np0005625201 sshd[104663]: Invalid user zomboid from 185.246.128.171 port 59848 Feb 20 08:08:15 np0005625201 sshd[104663]: Disconnecting invalid user zomboid 185.246.128.171 port 59848: Change of username or service not allowed: (zomboid,ssh-connection) -> (worker,ssh-connection) [preauth] Feb 20 08:08:18 np0005625201 sshd[105149]: Invalid user worker from 185.246.128.171 port 36542 Feb 20 08:08:19 np0005625201 sshd[105149]: Disconnecting invalid user worker 185.246.128.171 port 36542: Change of username or service not allowed: (worker,ssh-connection) -> (lucas,ssh-connection) [preauth] Feb 20 08:08:19 np0005625201 runuser[105286]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:19 np0005625201 runuser[105286]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:20 np0005625201 runuser[105412]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:20 np0005625201 runuser[105412]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:20 np0005625201 runuser[105479]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:21 np0005625201 runuser[105479]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:22 np0005625201 sshd[105599]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:08:22 np0005625201 sshd[105457]: Invalid user lucas from 185.246.128.171 port 64760 Feb 20 08:08:22 np0005625201 sshd[105457]: Disconnecting invalid user lucas 185.246.128.171 port 64760: Change of username or service not allowed: (lucas,ssh-connection) -> (chef,ssh-connection) [preauth] Feb 20 08:08:23 np0005625201 sshd[105641]: Invalid user miner from 92.118.39.72 port 42110 Feb 20 08:08:23 np0005625201 sshd[105641]: Connection closed by invalid user miner 92.118.39.72 port 42110 [preauth] Feb 20 08:08:26 np0005625201 sshd[105693]: Invalid user n8n from 194.87.216.133 port 53988 Feb 20 08:08:26 np0005625201 sshd[105693]: Received disconnect from 194.87.216.133 port 53988:11: Bye Bye [preauth] Feb 20 08:08:26 np0005625201 sshd[105693]: Disconnected from invalid user n8n 194.87.216.133 port 53988 [preauth] Feb 20 08:08:26 np0005625201 sshd[105651]: Invalid user chef from 185.246.128.171 port 41466 Feb 20 08:08:27 np0005625201 sshd[105651]: Disconnecting invalid user chef 185.246.128.171 port 41466: Change of username or service not allowed: (chef,ssh-connection) -> (mahmoud,ssh-connection) [preauth] Feb 20 08:08:28 np0005625201 sshd[105719]: Invalid user n8n from 103.183.75.204 port 57576 Feb 20 08:08:28 np0005625201 sshd[105719]: Received disconnect from 103.183.75.204 port 57576:11: Bye Bye [preauth] Feb 20 08:08:28 np0005625201 sshd[105719]: Disconnected from invalid user n8n 103.183.75.204 port 57576 [preauth] Feb 20 08:08:28 np0005625201 sshd[105747]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:08:30 np0005625201 sshd[105834]: Invalid user mahmoud from 185.246.128.171 port 40036 Feb 20 08:08:30 np0005625201 sshd[105834]: Disconnecting invalid user mahmoud 185.246.128.171 port 40036: Change of username or service not allowed: (mahmoud,ssh-connection) -> (hscroot,ssh-connection) [preauth] Feb 20 08:08:32 np0005625201 runuser[105996]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:32 np0005625201 sshd[105966]: Invalid user hscroot from 185.246.128.171 port 60712 Feb 20 08:08:32 np0005625201 sshd[105966]: Disconnecting invalid user hscroot 185.246.128.171 port 60712: Change of username or service not allowed: (hscroot,ssh-connection) -> (hive,ssh-connection) [preauth] Feb 20 08:08:32 np0005625201 runuser[105996]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:32 np0005625201 runuser[106097]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:33 np0005625201 runuser[106097]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:33 np0005625201 runuser[106177]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:34 np0005625201 runuser[106177]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:34 np0005625201 sshd[106150]: Invalid user hive from 185.246.128.171 port 24532 Feb 20 08:08:35 np0005625201 sshd[106150]: Disconnecting invalid user hive 185.246.128.171 port 24532: Change of username or service not allowed: (hive,ssh-connection) -> (airflow,ssh-connection) [preauth] Feb 20 08:08:39 np0005625201 sshd[106307]: Invalid user airflow from 185.246.128.171 port 1327 Feb 20 08:08:40 np0005625201 sshd[106307]: Disconnecting invalid user airflow 185.246.128.171 port 1327: Change of username or service not allowed: (airflow,ssh-connection) -> (denis,ssh-connection) [preauth] Feb 20 08:08:43 np0005625201 sshd[106750]: Invalid user denis from 185.246.128.171 port 60424 Feb 20 08:08:44 np0005625201 sshd[106750]: Disconnecting invalid user denis 185.246.128.171 port 60424: Change of username or service not allowed: (denis,ssh-connection) -> (avax,ssh-connection) [preauth] Feb 20 08:08:45 np0005625201 runuser[106845]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:45 np0005625201 runuser[106845]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:45 np0005625201 runuser[106931]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:46 np0005625201 runuser[106931]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:46 np0005625201 runuser[106993]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:47 np0005625201 runuser[106993]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:47 np0005625201 sshd[107077]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:08:49 np0005625201 sshd[106840]: Invalid user avax from 185.246.128.171 port 37534 Feb 20 08:08:49 np0005625201 sshd[106840]: Disconnecting invalid user avax 185.246.128.171 port 37534: Change of username or service not allowed: (avax,ssh-connection) -> (saeed,ssh-connection) [preauth] Feb 20 08:08:52 np0005625201 sshd[107441]: Invalid user saeed from 185.246.128.171 port 40406 Feb 20 08:08:53 np0005625201 sshd[107441]: Disconnecting invalid user saeed 185.246.128.171 port 40406: Change of username or service not allowed: (saeed,ssh-connection) -> (proxy,ssh-connection) [preauth] Feb 20 08:08:54 np0005625201 sudo[107582]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:08:54 np0005625201 sudo[107582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:54 np0005625201 sudo[107582]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:54 np0005625201 sudo[107597]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 08:08:54 np0005625201 sudo[107597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:55 np0005625201 sudo[107597]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:56 np0005625201 sudo[107805]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:08:56 np0005625201 sudo[107805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:56 np0005625201 sudo[107805]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:56 np0005625201 sudo[107828]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:08:56 np0005625201 sudo[107828]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:56 np0005625201 sudo[107828]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:56 np0005625201 sudo[107891]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:08:56 np0005625201 sudo[107891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:56 np0005625201 sudo[107891]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:56 np0005625201 sudo[107906]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 08:08:56 np0005625201 sudo[107906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:57 np0005625201 sshd[107576]: Invalid user proxy from 185.246.128.171 port 20219 Feb 20 08:08:57 np0005625201 sudo[107906]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:57 np0005625201 sshd[107925]: Received disconnect from 35.188.112.111 port 48126:11: Bye Bye [preauth] Feb 20 08:08:57 np0005625201 sshd[107925]: Disconnected from authenticating user root 35.188.112.111 port 48126 [preauth] Feb 20 08:08:57 np0005625201 sudo[107959]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:08:57 np0005625201 sudo[107959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:57 np0005625201 sudo[107959]: pam_unix(sudo:session): session closed for user root Feb 20 08:08:57 np0005625201 sudo[107974]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 -- inventory --format=json-pretty --filter-for-batch Feb 20 08:08:57 np0005625201 sudo[107974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:08:58 np0005625201 runuser[108020]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:58 np0005625201 runuser[108020]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:58 np0005625201 sshd[107576]: Disconnecting invalid user proxy 185.246.128.171 port 20219: Change of username or service not allowed: (proxy,ssh-connection) -> (cirros,ssh-connection) [preauth] Feb 20 08:08:58 np0005625201 runuser[108186]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:59 np0005625201 runuser[108186]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:08:59 np0005625201 runuser[108855]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:08:59 np0005625201 sudo[107974]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:00 np0005625201 runuser[108855]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:00 np0005625201 sudo[109415]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:09:00 np0005625201 sudo[109415]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:09:00 np0005625201 sudo[109415]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:04 np0005625201 sshd[109438]: Invalid user cirros from 185.246.128.171 port 39330 Feb 20 08:09:04 np0005625201 sshd[109438]: Disconnecting invalid user cirros 185.246.128.171 port 39330: Change of username or service not allowed: (cirros,ssh-connection) -> (joe,ssh-connection) [preauth] Feb 20 08:09:07 np0005625201 sshd[109617]: Invalid user joe from 185.246.128.171 port 17595 Feb 20 08:09:07 np0005625201 sshd[109643]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:09:07 np0005625201 sshd[109617]: Disconnecting invalid user joe 185.246.128.171 port 17595: Change of username or service not allowed: (joe,ssh-connection) -> (wikijs,ssh-connection) [preauth] Feb 20 08:09:11 np0005625201 runuser[109972]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:11 np0005625201 sshd[109947]: Invalid user titu from 212.233.136.201 port 38132 Feb 20 08:09:11 np0005625201 runuser[109972]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:11 np0005625201 sshd[109947]: Received disconnect from 212.233.136.201 port 38132:11: Bye Bye [preauth] Feb 20 08:09:11 np0005625201 sshd[109947]: Disconnected from invalid user titu 212.233.136.201 port 38132 [preauth] Feb 20 08:09:11 np0005625201 runuser[110167]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:12 np0005625201 runuser[110167]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:12 np0005625201 runuser[110237]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:13 np0005625201 sshd[109831]: Invalid user wikijs from 185.246.128.171 port 11396 Feb 20 08:09:13 np0005625201 sshd[109831]: Disconnecting invalid user wikijs 185.246.128.171 port 11396: Change of username or service not allowed: (wikijs,ssh-connection) -> (USERID,ssh-connection) [preauth] Feb 20 08:09:13 np0005625201 runuser[110237]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:15 np0005625201 sshd[110335]: Invalid user USERID from 185.246.128.171 port 7124 Feb 20 08:09:16 np0005625201 sshd[110335]: Disconnecting invalid user USERID 185.246.128.171 port 7124: Change of username or service not allowed: (USERID,ssh-connection) -> (gits,ssh-connection) [preauth] Feb 20 08:09:18 np0005625201 sudo[110478]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iaboquyeogafwunttqgkitsvlqlqakle ; /usr/bin/python3 Feb 20 08:09:18 np0005625201 sudo[110478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:18 np0005625201 sudo[110478]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:18 np0005625201 sudo[110535]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkfmccxewlssuypfcembujvxviqlzfod ; /usr/bin/python3 Feb 20 08:09:18 np0005625201 sudo[110535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:19 np0005625201 sudo[110535]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:20 np0005625201 sudo[110716]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nihjcrrewwtnpytaizwlitrtukydwhfm ; /usr/bin/python3 Feb 20 08:09:20 np0005625201 sudo[110716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:20 np0005625201 sudo[110716]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:20 np0005625201 sshd[110459]: Invalid user gits from 185.246.128.171 port 54480 Feb 20 08:09:21 np0005625201 sudo[110770]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-daanixcqaserrzdyveiagscppxkfuemm ; /usr/bin/python3 Feb 20 08:09:21 np0005625201 sudo[110770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:21 np0005625201 sudo[110770]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:21 np0005625201 sshd[110459]: Disconnecting invalid user gits 185.246.128.171 port 54480: Change of username or service not allowed: (gits,ssh-connection) -> (liqing,ssh-connection) [preauth] Feb 20 08:09:21 np0005625201 sudo[110845]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsrfdmsmewkywxxjkhzdprqnyrtgrnjr ; /usr/bin/python3 Feb 20 08:09:21 np0005625201 sudo[110845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:22 np0005625201 sudo[110845]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:23 np0005625201 sshd[110822]: Invalid user liqing from 185.246.128.171 port 31168 Feb 20 08:09:23 np0005625201 runuser[110929]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:23 np0005625201 sudo[110951]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-teixywdraluoeyqozpzdvpqbmxrjcioj ; /usr/bin/python3 Feb 20 08:09:23 np0005625201 sudo[110951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:24 np0005625201 sshd[110822]: Disconnecting invalid user liqing 185.246.128.171 port 31168: Change of username or service not allowed: (liqing,ssh-connection) -> (huawei,ssh-connection) [preauth] Feb 20 08:09:24 np0005625201 sudo[111067]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:09:24 np0005625201 sudo[111067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:09:24 np0005625201 runuser[110929]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:24 np0005625201 sudo[111067]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:24 np0005625201 sudo[110951]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:24 np0005625201 runuser[111147]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:25 np0005625201 sudo[111266]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rholpsexmdqbhluebzskdlazyjfdaixd ; /usr/bin/python3 Feb 20 08:09:25 np0005625201 sudo[111266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:25 np0005625201 sudo[111266]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:25 np0005625201 sudo[111340]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wgwuzvwqkgxpeuvstpurfvdvkwfnruci ; /usr/bin/python3 Feb 20 08:09:25 np0005625201 sudo[111340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:25 np0005625201 runuser[111147]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:25 np0005625201 runuser[111357]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:25 np0005625201 sudo[111340]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:25 np0005625201 sudo[111479]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yljaisvdfqipfrnnbkjydgfvsjumxmog ; /usr/bin/python3 Feb 20 08:09:25 np0005625201 sudo[111479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:26 np0005625201 runuser[111357]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:26 np0005625201 sudo[111479]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:26 np0005625201 sudo[111513]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bnrhugusukzkafenudfulpuvztrapzxb ; /usr/bin/python3 Feb 20 08:09:26 np0005625201 sudo[111513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:26 np0005625201 sudo[111513]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:27 np0005625201 sudo[111592]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kwakyvgxuledrqkbctteouxvuvbstvfd ; /usr/bin/python3 Feb 20 08:09:27 np0005625201 sudo[111592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:28 np0005625201 sudo[111592]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:28 np0005625201 sshd[111273]: Invalid user huawei from 185.246.128.171 port 8178 Feb 20 08:09:28 np0005625201 sudo[111705]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmxialddxvswfgvarmymfgrpnesmtwri ; /usr/bin/python3 Feb 20 08:09:28 np0005625201 sudo[111705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:28 np0005625201 sudo[111705]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:29 np0005625201 sudo[111737]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nejtiqtitoprawqjlsaiejeibwnefsyy ; /usr/bin/python3 Feb 20 08:09:29 np0005625201 sudo[111737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:29 np0005625201 sudo[111737]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:30 np0005625201 sudo[111822]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oewlaqvswilcctselpebexjzaamamnzh ; /usr/bin/python3 Feb 20 08:09:30 np0005625201 sudo[111822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:30 np0005625201 sshd[111273]: Disconnecting invalid user huawei 185.246.128.171 port 8178: Change of username or service not allowed: (huawei,ssh-connection) -> (mohamed,ssh-connection) [preauth] Feb 20 08:09:30 np0005625201 sudo[111822]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:32 np0005625201 sudo[111989]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ihrzdhscykczezkcifywxyeeyxjgmufj ; /usr/bin/python3 Feb 20 08:09:32 np0005625201 sudo[111989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:32 np0005625201 sshd[111966]: Invalid user mohamed from 185.246.128.171 port 20451 Feb 20 08:09:32 np0005625201 sudo[112068]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:09:32 np0005625201 sudo[112068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:09:32 np0005625201 sudo[112068]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:32 np0005625201 sudo[111989]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:33 np0005625201 sudo[112216]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-edjkdgjvmqudklliaqmscdmmgduveikq ; /usr/bin/python3 Feb 20 08:09:33 np0005625201 sudo[112216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:33 np0005625201 sudo[112216]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:33 np0005625201 sudo[112240]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-meenctosrkvgfcfindwkokmzqfwmbzwa ; /usr/bin/python3 Feb 20 08:09:33 np0005625201 sudo[112240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:33 np0005625201 sshd[111966]: Disconnecting invalid user mohamed 185.246.128.171 port 20451: Change of username or service not allowed: (mohamed,ssh-connection) -> (btf,ssh-connection) [preauth] Feb 20 08:09:33 np0005625201 sudo[112240]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:33 np0005625201 sshd[112242]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:09:34 np0005625201 sudo[112335]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-arsqbztrtiinupbxbyiwhgfvxtfdnjyg ; /usr/bin/python3 Feb 20 08:09:34 np0005625201 sudo[112335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:34 np0005625201 sudo[112335]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:34 np0005625201 sudo[112367]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ubvftlbibpmmjicjixswveshooxxzclg ; /usr/bin/python3 Feb 20 08:09:34 np0005625201 sudo[112367]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:34 np0005625201 sudo[112367]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:35 np0005625201 sudo[112444]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nohsyxgiloxqbnagyposvhijwyrdgvyj ; /usr/bin/python3 Feb 20 08:09:35 np0005625201 sudo[112444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:36 np0005625201 sudo[112444]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:36 np0005625201 runuser[112539]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:36 np0005625201 sudo[112597]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hukfgiqidijmdwyoqhzpahgptqwbazaf ; /usr/bin/python3 Feb 20 08:09:36 np0005625201 sudo[112597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:37 np0005625201 sudo[112597]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:37 np0005625201 sudo[112636]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-meygruqauadjavobotekkxwjqfsfkpsa ; /usr/bin/python3 Feb 20 08:09:37 np0005625201 sudo[112636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:37 np0005625201 runuser[112539]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:37 np0005625201 sudo[112636]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:37 np0005625201 runuser[112659]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:38 np0005625201 sudo[112745]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-barpgprqqnsmvyosfbxzdpdeomvrwfzu ; /usr/bin/python3 Feb 20 08:09:38 np0005625201 sudo[112745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:38 np0005625201 runuser[112659]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:38 np0005625201 runuser[112757]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:38 np0005625201 sudo[112745]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:38 np0005625201 runuser[112757]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:39 np0005625201 sshd[112881]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:09:40 np0005625201 sshd[112905]: Invalid user bot2 from 162.19.250.18 port 52844 Feb 20 08:09:40 np0005625201 sshd[112905]: Received disconnect from 162.19.250.18 port 52844:11: Bye Bye [preauth] Feb 20 08:09:40 np0005625201 sshd[112905]: Disconnected from invalid user bot2 162.19.250.18 port 52844 [preauth] Feb 20 08:09:40 np0005625201 sudo[112989]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vtftyvmtvvykrioybogkwdcdjqxjifth ; /usr/bin/python3 Feb 20 08:09:40 np0005625201 sudo[112989]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:40 np0005625201 sshd[112430]: Invalid user btf from 185.246.128.171 port 5846 Feb 20 08:09:40 np0005625201 sshd[112430]: Disconnecting invalid user btf 185.246.128.171 port 5846: Change of username or service not allowed: (btf,ssh-connection) -> (github,ssh-connection) [preauth] Feb 20 08:09:40 np0005625201 sudo[113105]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:09:40 np0005625201 sudo[113105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:09:40 np0005625201 sudo[113105]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:41 np0005625201 sudo[112989]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:41 np0005625201 sudo[113177]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jkvghiouyqaqlmuzeahaqpstuqimtfpb ; /usr/bin/python3 Feb 20 08:09:41 np0005625201 sudo[113177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:41 np0005625201 sudo[113177]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:41 np0005625201 sudo[113325]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jcqhgmcgelkuclojqfblbrzzbymtlyuh ; /usr/bin/python3 Feb 20 08:09:41 np0005625201 sudo[113325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:41 np0005625201 sudo[113325]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:41 np0005625201 sshd[113145]: Invalid user github from 185.246.128.171 port 4174 Feb 20 08:09:42 np0005625201 sudo[113407]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eqroivaqfaitgkfemwrfzmamcftrmzsu ; /usr/bin/python3 Feb 20 08:09:42 np0005625201 sudo[113407]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:42 np0005625201 sudo[113407]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:42 np0005625201 sudo[113431]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dmnkhdocoiabcnbjrzveivktrsernaat ; /usr/bin/python3 Feb 20 08:09:42 np0005625201 sudo[113431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:42 np0005625201 sshd[113145]: Disconnecting invalid user github 185.246.128.171 port 4174: Change of username or service not allowed: (github,ssh-connection) -> (test,ssh-connection) [preauth] Feb 20 08:09:43 np0005625201 sudo[113431]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:43 np0005625201 sudo[113516]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-civocnidrtbfvtatqfqbdvfeskzfppnp ; /usr/bin/python3 Feb 20 08:09:43 np0005625201 sudo[113516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:44 np0005625201 sshd[113477]: Invalid user test from 185.246.128.171 port 29196 Feb 20 08:09:45 np0005625201 sudo[113516]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:46 np0005625201 sudo[113645]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ubilkghywvvfjicpplszfhbcjjemimyk ; /usr/bin/python3 Feb 20 08:09:46 np0005625201 sudo[113645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:46 np0005625201 sudo[113645]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:46 np0005625201 sudo[113711]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yyvbsiuqdcwtgbespzldbpxklvxugvaf ; /usr/bin/python3 Feb 20 08:09:46 np0005625201 sudo[113711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:46 np0005625201 sudo[113711]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:47 np0005625201 sudo[113737]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fxyefzkzybayuwkplfotcpesoppmmcrg ; /usr/bin/python3 Feb 20 08:09:47 np0005625201 sudo[113737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:47 np0005625201 sudo[113737]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:47 np0005625201 sshd[113477]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.171 port 29196 ssh2 [preauth] Feb 20 08:09:47 np0005625201 sshd[113477]: Disconnecting invalid user test 185.246.128.171 port 29196: Too many authentication failures [preauth] Feb 20 08:09:47 np0005625201 sudo[113860]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fvtrdoqccevuhxhikynuhxxrufuqihxu ; ANSIBLE_ASYNC_DIR=/tmp/.ansible_async /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574987.4185083-108744-38704716670862/async_wrapper.py 588571491976 3600 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771574987.4185083-108744-38704716670862/AnsiballZ_command.py _ Feb 20 08:09:47 np0005625201 sudo[113860]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 08:09:47 np0005625201 sudo[113860]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:48 np0005625201 sudo[113926]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cwjmfgcgyqxqdikkiksqrbybzurjlnvl ; /usr/bin/python3 Feb 20 08:09:48 np0005625201 sudo[113926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:48 np0005625201 sudo[113926]: pam_unix(sudo:session): session closed for user root Feb 20 08:09:49 np0005625201 sshd[113838]: Invalid user test from 185.246.128.171 port 16554 Feb 20 08:09:49 np0005625201 sshd[113969]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:09:49 np0005625201 runuser[113991]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:50 np0005625201 runuser[113991]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:50 np0005625201 runuser[114266]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:51 np0005625201 runuser[114266]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:51 np0005625201 runuser[114412]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:09:51 np0005625201 runuser[114412]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:09:52 np0005625201 sshd[113838]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.171 port 16554 ssh2 [preauth] Feb 20 08:09:52 np0005625201 sshd[113838]: Disconnecting invalid user test 185.246.128.171 port 16554: Too many authentication failures [preauth] Feb 20 08:09:56 np0005625201 sshd[114677]: Invalid user test from 185.246.128.171 port 18999 Feb 20 08:09:58 np0005625201 sudo[115113]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-guwkijcsaeecivrtzepwlfunjxoktbte ; /usr/bin/python3 Feb 20 08:09:58 np0005625201 sudo[115113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:09:58 np0005625201 sudo[115113]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:00 np0005625201 sshd[114677]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.171 port 18999 ssh2 [preauth] Feb 20 08:10:00 np0005625201 sshd[114677]: Disconnecting invalid user test 185.246.128.171 port 18999: Too many authentication failures [preauth] Feb 20 08:10:01 np0005625201 sudo[115285]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:10:01 np0005625201 sudo[115285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:10:01 np0005625201 sudo[115285]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:01 np0005625201 sudo[115301]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 08:10:01 np0005625201 sudo[115301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:10:01 np0005625201 sudo[115301]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:01 np0005625201 sudo[115387]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:10:01 np0005625201 sudo[115387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:10:01 np0005625201 sudo[115387]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:01 np0005625201 sudo[115410]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:10:01 np0005625201 sudo[115410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:10:02 np0005625201 runuser[115470]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:02 np0005625201 sudo[115410]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:02 np0005625201 sshd[115276]: Invalid user test from 185.246.128.171 port 35238 Feb 20 08:10:03 np0005625201 runuser[115470]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:03 np0005625201 runuser[115552]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:03 np0005625201 runuser[115552]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:03 np0005625201 runuser[115622]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:04 np0005625201 runuser[115622]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:06 np0005625201 sudo[115877]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:10:06 np0005625201 sudo[115877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:10:06 np0005625201 sudo[115877]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:06 np0005625201 sshd[115276]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.171 port 35238 ssh2 [preauth] Feb 20 08:10:06 np0005625201 sshd[115276]: Disconnecting invalid user test 185.246.128.171 port 35238: Too many authentication failures [preauth] Feb 20 08:10:08 np0005625201 sshd[115918]: Invalid user test from 185.246.128.171 port 42845 Feb 20 08:10:08 np0005625201 sudo[115974]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ceznbyovqdkaepvqqamcvxqaryixnmsv ; /usr/bin/python3 Feb 20 08:10:08 np0005625201 sudo[115974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:08 np0005625201 sudo[115974]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:09 np0005625201 sudo[116017]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yedlsivtuugzcrgzcnjkcaecbkjimegt ; /usr/bin/python3 Feb 20 08:10:09 np0005625201 sudo[116017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:09 np0005625201 sudo[116017]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:09 np0005625201 sudo[116134]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bwveholhlxkzbjtdzfaawwwnokchhbfg ; /usr/bin/python3 Feb 20 08:10:09 np0005625201 sudo[116134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:10 np0005625201 sudo[116134]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:10 np0005625201 sshd[115918]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.171 port 42845 ssh2 [preauth] Feb 20 08:10:10 np0005625201 sshd[115918]: Disconnecting invalid user test 185.246.128.171 port 42845: Too many authentication failures [preauth] Feb 20 08:10:10 np0005625201 sudo[116245]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srwrwfpeufojjiwogcucsgiblrshwdio ; /usr/bin/python3 Feb 20 08:10:10 np0005625201 sudo[116245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:10 np0005625201 sudo[116245]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:10 np0005625201 sudo[116371]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qyvxojounumxbwbwzmaeafuktqgqjhhb ; /usr/bin/python3 Feb 20 08:10:10 np0005625201 sudo[116371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:10 np0005625201 sudo[116371]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:11 np0005625201 sudo[116410]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lesbarckdbrmmemtcyxohlaobthtpqwh ; /usr/bin/python3 Feb 20 08:10:11 np0005625201 sudo[116410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:11 np0005625201 sudo[116410]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:11 np0005625201 sudo[116457]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ezxwvetofinsjjrcrzmiaqewjtclskws ; /usr/bin/python3 Feb 20 08:10:11 np0005625201 sudo[116457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:12 np0005625201 sudo[116457]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:12 np0005625201 sudo[116697]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vwhozwbetfgjzuqazrpkbilnejuzoiwo ; /usr/bin/python3 Feb 20 08:10:12 np0005625201 sudo[116697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:12 np0005625201 sudo[116697]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:13 np0005625201 sudo[116732]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djzshvijrjgyuhpxqqqkgafjzccyomjd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:13 np0005625201 sudo[116732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:13 np0005625201 sshd[116357]: Invalid user test from 185.246.128.171 port 14498 Feb 20 08:10:13 np0005625201 sudo[116732]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:13 np0005625201 sudo[116756]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbqhrvodqxuaujlnctibtzknlwyhzqzf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:13 np0005625201 sudo[116756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:13 np0005625201 sudo[116756]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:14 np0005625201 sudo[116788]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lbirupcgqipbpgorcpamepxcuudnubhe ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:14 np0005625201 sudo[116788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:14 np0005625201 sudo[116788]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:14 np0005625201 sudo[116853]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bbywcrkxlgqpurodslwkvtorsgnmrjap ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:14 np0005625201 sudo[116853]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:14 np0005625201 sudo[116853]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:15 np0005625201 sudo[116879]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srnqzxpxvjutwdjvftqprlrsvpgtarfd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:15 np0005625201 sudo[116879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:15 np0005625201 sudo[116879]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:15 np0005625201 sshd[116357]: Disconnecting invalid user test 185.246.128.171 port 14498: Change of username or service not allowed: (test,ssh-connection) -> (vyos,ssh-connection) [preauth] Feb 20 08:10:15 np0005625201 runuser[116919]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:15 np0005625201 sudo[117006]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yatcodzjqhmmozhcesukwhgjayrkteph ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:15 np0005625201 sudo[117006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:15 np0005625201 sudo[117006]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:15 np0005625201 sudo[117024]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzhwjpnaykjjnudhpxpyajeopcwpmhif ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:15 np0005625201 sudo[117024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:15 np0005625201 sudo[117024]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:15 np0005625201 runuser[116919]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:16 np0005625201 runuser[117087]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:16 np0005625201 sudo[117163]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qnqgegkdrelhoexautsfdmbxkugoprij ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:16 np0005625201 sudo[117163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:16 np0005625201 sudo[117163]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:16 np0005625201 sudo[117190]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvptmnwdvpimmgjlmviukqenebwmlwll ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:16 np0005625201 sudo[117190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:16 np0005625201 sudo[117190]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:16 np0005625201 runuser[117087]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:16 np0005625201 runuser[117216]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:17 np0005625201 sudo[117324]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jwfqpjctkxeonpvruunujowljhyfufuu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:17 np0005625201 sudo[117324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:17 np0005625201 sudo[117324]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:17 np0005625201 sudo[117350]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ghbiukivurkyshxejmnrezmfxrtzzrjm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:17 np0005625201 sudo[117350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:17 np0005625201 runuser[117216]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:17 np0005625201 sudo[117350]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:17 np0005625201 sshd[117365]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:10:17 np0005625201 sudo[117396]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yvwuzmhxctfujidthrwzfaniguxqcvhp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:17 np0005625201 sudo[117396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:18 np0005625201 sudo[117396]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:18 np0005625201 sudo[117506]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-brckupqmdenovejpseuxottnbjfbbbgd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:18 np0005625201 sudo[117506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:18 np0005625201 sudo[117506]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:19 np0005625201 sudo[117532]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wgweigjgoqmqopdqqrdwoasldbvguxbs ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:19 np0005625201 sudo[117532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:19 np0005625201 sshd[117166]: Invalid user vyos from 185.246.128.171 port 11404 Feb 20 08:10:19 np0005625201 sudo[117532]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:19 np0005625201 sshd[117166]: Disconnecting invalid user vyos 185.246.128.171 port 11404: Change of username or service not allowed: (vyos,ssh-connection) -> (bkp,ssh-connection) [preauth] Feb 20 08:10:19 np0005625201 sudo[117610]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nqzcxzlsrdfhzivanhfvwkmeywdputzg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:19 np0005625201 sudo[117610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:19 np0005625201 sudo[117610]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:19 np0005625201 sudo[117629]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uhplptzygkmxgvatsbpmaksbiaqhlykn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:19 np0005625201 sudo[117629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:19 np0005625201 sudo[117629]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:20 np0005625201 sudo[117675]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nyaxgnewzxncqbraztgkvceyxmjbukau ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:20 np0005625201 sudo[117675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:20 np0005625201 sudo[117675]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:21 np0005625201 sshd[117613]: Invalid user bkp from 185.246.128.171 port 45800 Feb 20 08:10:21 np0005625201 sudo[117851]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sszukubsujzcjwhsyujwmkbdzfhytfcu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:21 np0005625201 sudo[117851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:21 np0005625201 sshd[117613]: Disconnecting invalid user bkp 185.246.128.171 port 45800: Change of username or service not allowed: (bkp,ssh-connection) -> (alan,ssh-connection) [preauth] Feb 20 08:10:21 np0005625201 sudo[117851]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:21 np0005625201 sudo[117956]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ilzybwrgbdmhjkgnuitnhsegqjkqhzsr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:21 np0005625201 sudo[117956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:22 np0005625201 sudo[117956]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:23 np0005625201 sudo[118049]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkpmrqqfiykqobzznqzovdonusievnau ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:23 np0005625201 sudo[118049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:23 np0005625201 sshd[117972]: Invalid user alan from 185.246.128.171 port 7700 Feb 20 08:10:24 np0005625201 sudo[118315]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:24 np0005625201 sudo[118315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:24 np0005625201 sudo[118318]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:24 np0005625201 sudo[118318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:24 np0005625201 sudo[118315]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:24 np0005625201 sudo[118318]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:24 np0005625201 sudo[118374]: aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:24 np0005625201 sudo[118374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402) Feb 20 08:10:24 np0005625201 sudo[118374]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:24 np0005625201 sudo[118465]: aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:24 np0005625201 sudo[118465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402) Feb 20 08:10:24 np0005625201 sudo[118465]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:24 np0005625201 sudo[118507]: aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:24 np0005625201 sudo[118507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402) Feb 20 08:10:24 np0005625201 sudo[118507]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:24 np0005625201 sshd[117972]: Disconnecting invalid user alan 185.246.128.171 port 7700: Change of username or service not allowed: (alan,ssh-connection) -> (1,ssh-connection) [preauth] Feb 20 08:10:25 np0005625201 sudo[118806]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:25 np0005625201 sudo[118806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:25 np0005625201 sudo[118852]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:25 np0005625201 sudo[118852]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405) Feb 20 08:10:25 np0005625201 sudo[118806]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:25 np0005625201 sudo[118852]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:25 np0005625201 sudo[118919]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:25 np0005625201 sshd[118693]: Invalid user user from 92.118.39.72 port 52452 Feb 20 08:10:25 np0005625201 sudo[118919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405) Feb 20 08:10:26 np0005625201 sudo[118919]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:26 np0005625201 sshd[118693]: Connection closed by invalid user user 92.118.39.72 port 52452 [preauth] Feb 20 08:10:26 np0005625201 sudo[119059]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:26 np0005625201 sudo[119059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:26 np0005625201 sudo[119059]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:26 np0005625201 sudo[119161]: cinder : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:26 np0005625201 sudo[119161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42407) Feb 20 08:10:26 np0005625201 sshd[118561]: Invalid user 1 from 185.246.128.171 port 40061 Feb 20 08:10:26 np0005625201 sudo[119161]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:26 np0005625201 sshd[118561]: Disconnecting invalid user 1 185.246.128.171 port 40061: Change of username or service not allowed: (1,ssh-connection) -> (vps,ssh-connection) [preauth] Feb 20 08:10:27 np0005625201 sudo[119426]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:27 np0005625201 sudo[119426]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:27 np0005625201 sudo[119453]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:27 np0005625201 sudo[119453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:27 np0005625201 sudo[119426]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:27 np0005625201 sudo[119453]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:27 np0005625201 sudo[119567]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:27 np0005625201 sudo[119567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:27 np0005625201 sudo[119567]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:27 np0005625201 sudo[119717]: heat : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:28 np0005625201 sudo[119717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42418) Feb 20 08:10:28 np0005625201 sudo[119717]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:28 np0005625201 runuser[119810]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:28 np0005625201 sudo[119953]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:28 np0005625201 sudo[119953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:28 np0005625201 sudo[119953]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:28 np0005625201 sudo[119984]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:28 np0005625201 sudo[119984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:28 np0005625201 sudo[119984]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:28 np0005625201 sudo[120024]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:28 np0005625201 sudo[120024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:28 np0005625201 sudo[120034]: manila : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:28 np0005625201 sudo[120034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42429) Feb 20 08:10:28 np0005625201 sudo[120034]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:28 np0005625201 sudo[120024]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:29 np0005625201 sudo[120257]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:29 np0005625201 sudo[120257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Feb 20 08:10:29 np0005625201 sudo[120257]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:29 np0005625201 runuser[119810]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:29 np0005625201 sudo[120424]: nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:29 np0005625201 sudo[120424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436) Feb 20 08:10:29 np0005625201 runuser[120430]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:29 np0005625201 sudo[120424]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:29 np0005625201 sudo[120488]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:29 np0005625201 sudo[120488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:29 np0005625201 sudo[120485]: nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:29 np0005625201 sudo[120485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436) Feb 20 08:10:30 np0005625201 sudo[120485]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:30 np0005625201 sudo[120488]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:30 np0005625201 sshd[119881]: Invalid user vps from 185.246.128.171 port 12288 Feb 20 08:10:30 np0005625201 sudo[120710]: nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:30 np0005625201 sudo[120710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436) Feb 20 08:10:30 np0005625201 sudo[120710]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:30 np0005625201 sshd[119881]: Disconnecting invalid user vps 185.246.128.171 port 12288: Change of username or service not allowed: (vps,ssh-connection) -> (peter,ssh-connection) [preauth] Feb 20 08:10:30 np0005625201 sudo[120926]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:30 np0005625201 sudo[120926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:31 np0005625201 sudo[120926]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:31 np0005625201 sudo[120972]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:31 np0005625201 sudo[120972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:31 np0005625201 sudo[120972]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:31 np0005625201 sudo[121016]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:31 np0005625201 sudo[121016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:31 np0005625201 sudo[121016]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:31 np0005625201 sudo[121061]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:31 np0005625201 sudo[121061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:31 np0005625201 runuser[120430]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:31 np0005625201 runuser[121113]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:31 np0005625201 sudo[121061]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:31 np0005625201 sudo[121378]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:31 np0005625201 sudo[121378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:32 np0005625201 sudo[121378]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:32 np0005625201 sudo[121437]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:32 np0005625201 sudo[121437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:32 np0005625201 sudo[121465]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:32 np0005625201 sudo[121465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:32 np0005625201 sudo[121465]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:32 np0005625201 sudo[121437]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:32 np0005625201 sudo[121682]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:32 np0005625201 sudo[121682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:32 np0005625201 sudo[121685]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:32 np0005625201 sudo[121685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:32 np0005625201 sudo[121682]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:32 np0005625201 runuser[121113]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:32 np0005625201 sudo[121685]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:33 np0005625201 sudo[121817]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:33 np0005625201 sudo[121817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:33 np0005625201 sudo[121817]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:33 np0005625201 sudo[121874]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:33 np0005625201 sudo[121874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:33 np0005625201 sudo[121874]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:33 np0005625201 sudo[121956]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:33 np0005625201 sudo[121956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:33 np0005625201 sudo[121956]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:33 np0005625201 sudo[121978]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:33 np0005625201 sudo[121978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:33 np0005625201 sudo[121978]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:34 np0005625201 sudo[122255]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:34 np0005625201 sudo[122255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:34 np0005625201 sshd[122230]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:10:34 np0005625201 sudo[122255]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:34 np0005625201 systemd[122345]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:35 np0005625201 sshd[121564]: Invalid user peter from 185.246.128.171 port 55418 Feb 20 08:10:35 np0005625201 sudo[122665]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:35 np0005625201 sudo[122665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:35 np0005625201 sudo[122680]: glance : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:35 np0005625201 sudo[122680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42415) Feb 20 08:10:35 np0005625201 sudo[122665]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:35 np0005625201 sudo[122703]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:35 np0005625201 sudo[122703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:35 np0005625201 sudo[122680]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:35 np0005625201 sudo[122747]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:35 np0005625201 sudo[122747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:35 np0005625201 sudo[122753]: glance : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:35 np0005625201 sudo[122753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42415) Feb 20 08:10:35 np0005625201 sudo[122753]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:35 np0005625201 sudo[122703]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:35 np0005625201 sudo[122747]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:35 np0005625201 sshd[121564]: Disconnecting invalid user peter 185.246.128.171 port 55418: Change of username or service not allowed: (peter,ssh-connection) -> (clouduser,ssh-connection) [preauth] Feb 20 08:10:36 np0005625201 sudo[123045]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:36 np0005625201 sudo[123045]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:36 np0005625201 sudo[123045]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:36 np0005625201 sudo[123059]: swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:36 np0005625201 sudo[123059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445) Feb 20 08:10:36 np0005625201 sudo[123059]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:37 np0005625201 sudo[123297]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:37 np0005625201 sudo[123297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:37 np0005625201 sudo[123297]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:38 np0005625201 sudo[123429]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:10:38 np0005625201 sudo[123429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:10:38 np0005625201 sudo[123429]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:38 np0005625201 sudo[118049]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:38 np0005625201 sudo[123490]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ojwjiqxvnpoglhiwzmnqtmnmiypagyxm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:38 np0005625201 sudo[123490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:38 np0005625201 sshd[123146]: Invalid user clouduser from 185.246.128.171 port 37471 Feb 20 08:10:38 np0005625201 sshd[123146]: Disconnecting invalid user clouduser 185.246.128.171 port 37471: Change of username or service not allowed: (clouduser,ssh-connection) -> (user3,ssh-connection) [preauth] Feb 20 08:10:39 np0005625201 sudo[123490]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:39 np0005625201 sudo[123542]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mnlfowloturzvarimgzempzdupbjczyl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:39 np0005625201 sudo[123542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:39 np0005625201 sudo[123542]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:39 np0005625201 sudo[123566]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iglvxajajwvxvnckygkymxvfefozgnpv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:39 np0005625201 sudo[123566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:39 np0005625201 sudo[123566]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:39 np0005625201 sudo[123583]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-obklqcsddoxjpbdutagvfvxgaizsopgh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:39 np0005625201 sudo[123583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:39 np0005625201 sudo[123583]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:39 np0005625201 sudo[123616]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hnxeqqpwllwbmbnljrynzvucinjfehvc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:39 np0005625201 sudo[123616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:40 np0005625201 sudo[123616]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:40 np0005625201 sudo[123659]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fuwiapyrbkrtnqilwhvlcxufaddnihiw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:40 np0005625201 sudo[123659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:40 np0005625201 sudo[123659]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:40 np0005625201 sudo[123684]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jaiiuvldgxwayhrhouohdejmraewqlfa ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:40 np0005625201 sudo[123684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:40 np0005625201 sudo[123684]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:40 np0005625201 sudo[123753]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nyycrkkypwrewrxrdtkpeilqgfoiwyqm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:40 np0005625201 sudo[123753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:40 np0005625201 sudo[123753]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:41 np0005625201 sudo[123826]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dwhlmlcafhihholazvsexhsvejymicaq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:41 np0005625201 sudo[123826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:41 np0005625201 sudo[123826]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:41 np0005625201 sudo[123849]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-etbltxjxnrviveldaddqtspbdyvvkidf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:41 np0005625201 sudo[123849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:41 np0005625201 sudo[123849]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:41 np0005625201 sshd[123569]: Invalid user user3 from 185.246.128.171 port 64337 Feb 20 08:10:41 np0005625201 sudo[123866]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ixnlaffemnyevkbrqpptulsgorncyqbu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:41 np0005625201 sudo[123866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:41 np0005625201 sudo[123866]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:41 np0005625201 sudo[123918]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkjanxsfkxrzkhvyutwmvgfosciyjnvq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:41 np0005625201 sudo[123918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:42 np0005625201 sudo[123918]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:42 np0005625201 sudo[123974]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jqyvrlmtaxojvofcljcylnqkyynhhoie ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:42 np0005625201 sudo[123974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:42 np0005625201 sudo[123974]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:42 np0005625201 sudo[123998]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-irchotkcxawoidmhdpqzulwropppykeh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:42 np0005625201 sudo[123998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:42 np0005625201 sshd[123569]: Disconnecting invalid user user3 185.246.128.171 port 64337: Change of username or service not allowed: (user3,ssh-connection) -> (vyatta,ssh-connection) [preauth] Feb 20 08:10:42 np0005625201 sudo[123998]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:42 np0005625201 sudo[124092]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jwzqtuyffagfrccrfgvufqfetwqtffnu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:42 np0005625201 sudo[124092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:42 np0005625201 sudo[124092]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:42 np0005625201 sudo[124139]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-atbyouvoqldhyjwxzadujiqartfaunkq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:42 np0005625201 sudo[124139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:43 np0005625201 sudo[124139]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:43 np0005625201 sudo[124155]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-toxujryeopnomjhguzigzynoglqnosja ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:43 np0005625201 sudo[124155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:43 np0005625201 runuser[124170]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:43 np0005625201 sudo[124155]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:43 np0005625201 sudo[124228]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fffmaecgezxctdyucexuckvqrulcoihq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:43 np0005625201 sudo[124228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:43 np0005625201 sudo[124228]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:43 np0005625201 sudo[124245]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xpxqfrwvkmdmmmnzqvkvcsffnxwetifr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:43 np0005625201 sudo[124245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:44 np0005625201 runuser[124170]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:44 np0005625201 sudo[124245]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:44 np0005625201 sudo[124293]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zbywiqnilxkoilzajqdmmdpritzfpdia ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:44 np0005625201 sudo[124293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:44 np0005625201 runuser[124296]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:44 np0005625201 sudo[124293]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:44 np0005625201 sudo[124354]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smlzjqaevecouuxovdiriipjghmunxrr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:44 np0005625201 sudo[124354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:44 np0005625201 sudo[124354]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:44 np0005625201 sudo[124378]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-allpyqqgmvfatoavktehbusrzfphaflb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:44 np0005625201 sudo[124378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:44 np0005625201 sudo[124378]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:44 np0005625201 sudo[124398]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aizjgvbgfmpkoyxivywxfkofibpalhqd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:44 np0005625201 sudo[124398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:44 np0005625201 runuser[124296]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:44 np0005625201 runuser[124406]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:44 np0005625201 sudo[124398]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:45 np0005625201 sudo[124484]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uqqxwsalfgmlcnbvszwkmifgeupxxqwz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:45 np0005625201 sudo[124484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:45 np0005625201 sudo[124484]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:45 np0005625201 sudo[124500]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oylnyjzkgrmspeaizgsfqveijrqnrrfv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:45 np0005625201 sudo[124500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:45 np0005625201 sudo[124500]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:45 np0005625201 sudo[124533]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mdseawmkhchgkbolhzmykszxuyfbjtuk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:45 np0005625201 sudo[124533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:45 np0005625201 runuser[124406]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:45 np0005625201 sudo[124533]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:45 np0005625201 sudo[124550]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ypnsfohiuoyxhvyhjvyocvwqtqwgavfx ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:45 np0005625201 sudo[124550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:46 np0005625201 sudo[124550]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:46 np0005625201 sudo[124583]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-odqywswjkwjiwomxafdzxhsfnquuzpfp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:46 np0005625201 sudo[124583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:46 np0005625201 sudo[124583]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:46 np0005625201 sudo[124599]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jfwzdsoazndflnhzzolipwxlwabktvoi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:46 np0005625201 sudo[124599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:46 np0005625201 sudo[124599]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:46 np0005625201 sudo[124623]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qvcsriayzmempxolcveyjmkvbxwskmtn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:46 np0005625201 sudo[124623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:46 np0005625201 sudo[124623]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:47 np0005625201 sudo[124639]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ogglfesrqijfxhddqwrvxdnfopjegeft ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:47 np0005625201 sudo[124639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:47 np0005625201 sudo[124639]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:47 np0005625201 sudo[124671]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vvysmszyvlplstfcoasowmgstjqauquo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:47 np0005625201 sudo[124671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:47 np0005625201 sudo[124671]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:47 np0005625201 sudo[124697]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zuyuimasjjeegviikkavdanljdekrqsr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:47 np0005625201 sudo[124697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:47 np0005625201 sudo[124697]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:47 np0005625201 sudo[124713]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ehqhjufhbwokphkokzsmmokedzughgqv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:47 np0005625201 sudo[124713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:48 np0005625201 sudo[124713]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:48 np0005625201 sudo[124729]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ikmbkorbkbuftwnzdopuekkdhgpqyygx ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:48 np0005625201 sudo[124729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:48 np0005625201 sudo[124729]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:48 np0005625201 sudo[124797]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-onydfayuleztzgeeqodhnczgzyceuetg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:48 np0005625201 sudo[124797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:48 np0005625201 sudo[124797]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:48 np0005625201 sudo[124821]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zegmqhudxtoarbkzgmaaxwcnbkydsxtl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:48 np0005625201 sudo[124821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:48 np0005625201 sudo[124821]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:48 np0005625201 sudo[124837]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-peulzsmkcmfcfjtppncxdksajggmafsy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:48 np0005625201 sudo[124837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:49 np0005625201 sudo[124837]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:49 np0005625201 sudo[124869]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iqlyuygpsqfoscafvphzstyhncxgefxc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:49 np0005625201 sudo[124869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:49 np0005625201 sudo[124869]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:49 np0005625201 sudo[124885]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lfabqmfylgxlkuebpmezxzkfypkesvkd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:49 np0005625201 sudo[124885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:49 np0005625201 sudo[124885]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:49 np0005625201 sshd[124230]: Invalid user vyatta from 185.246.128.171 port 42951 Feb 20 08:10:49 np0005625201 sudo[124909]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jzliedlwnthjiarydlknrfxflmonttar ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:49 np0005625201 sudo[124909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:49 np0005625201 sudo[124909]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:49 np0005625201 sudo[124959]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-frmznncdoqubrrjuwpjzzgnyidqwbphm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:49 np0005625201 sudo[124959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:50 np0005625201 sudo[124959]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:50 np0005625201 sudo[125062]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mwojzzcugvfioboabvwhsedffxvbkgqw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:50 np0005625201 sudo[125062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:50 np0005625201 sudo[125062]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:50 np0005625201 sshd[124230]: Disconnecting invalid user vyatta 185.246.128.171 port 42951: Change of username or service not allowed: (vyatta,ssh-connection) -> (sysadmin,ssh-connection) [preauth] Feb 20 08:10:50 np0005625201 sudo[125100]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrbtajytrymjujuxwukjxvgxafllfjkl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:50 np0005625201 sudo[125100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:50 np0005625201 sudo[125100]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:50 np0005625201 sudo[125127]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xwjvtnvykmuxfdqqehpbbnsltktvpoho ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:50 np0005625201 sudo[125127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:50 np0005625201 sudo[125127]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:50 np0005625201 sudo[125195]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pgtqkpxqrqabvqgeffprlvajpcfhtpol ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:50 np0005625201 sudo[125195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:51 np0005625201 sudo[125195]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:51 np0005625201 sudo[125268]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tfszkovezhrasgcqdwmxmeqfplrdbkrl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:51 np0005625201 sudo[125268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:51 np0005625201 sudo[125268]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:51 np0005625201 sudo[125284]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-itmgowamoneefeuoxtgsoixxvqvwoqqg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:51 np0005625201 sudo[125284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:51 np0005625201 sudo[125284]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:51 np0005625201 sudo[125347]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-riuvdqozjlazwbfxhujvcdsnhffdxatw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:51 np0005625201 sudo[125347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:51 np0005625201 sshd[125111]: Invalid user sysadmin from 185.246.128.171 port 51927 Feb 20 08:10:51 np0005625201 sudo[125347]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:52 np0005625201 sudo[125404]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xwueforayowdwlwqilviqdlippfqbyhd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:52 np0005625201 sudo[125404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:52 np0005625201 sshd[125111]: Disconnecting invalid user sysadmin 185.246.128.171 port 51927: Change of username or service not allowed: (sysadmin,ssh-connection) -> (ftpadmin,ssh-connection) [preauth] Feb 20 08:10:52 np0005625201 sudo[125404]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:52 np0005625201 sudo[125435]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-obudlnenosjxfjcefcrbwqoceaddxmit ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:52 np0005625201 sudo[125435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:52 np0005625201 sudo[125435]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:52 np0005625201 sudo[125452]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkqhsuimkamjjyaswzhspzjgylredvtx ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:52 np0005625201 sudo[125452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:52 np0005625201 sudo[125452]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:52 np0005625201 sudo[125476]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bckavutspltefjiyellxplzdcaxrqmen ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:52 np0005625201 sudo[125476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:52 np0005625201 sudo[125476]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:53 np0005625201 sudo[125492]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-inetdngglabdovyomquebtqvuixoqdax ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:53 np0005625201 sudo[125492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:53 np0005625201 sudo[125492]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:53 np0005625201 sudo[125525]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-krrzpkubwbbqiqbzqixyaacojhxiaaam ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:53 np0005625201 sudo[125525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:53 np0005625201 sudo[125525]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:53 np0005625201 sudo[125542]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uxfaloxrjvsakinddidnxqkptdrpjjqf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:53 np0005625201 sudo[125542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:53 np0005625201 sudo[125542]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:53 np0005625201 sudo[125566]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znjppvifpfadrxzevyklgpsdnspzsjul ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:53 np0005625201 sudo[125566]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:54 np0005625201 sudo[125566]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:54 np0005625201 sudo[125583]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-undmfsqfemrlcogpkszodtppoyhikbra ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:54 np0005625201 sudo[125583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:54 np0005625201 sudo[125583]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:54 np0005625201 sudo[125615]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ckoxieoyemnxtsgjikjhhjlzukxdtysm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:54 np0005625201 sudo[125615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:54 np0005625201 sudo[125615]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:54 np0005625201 sudo[125639]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gkkprfkuqrbietwxdcqugkeeenabiygc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:54 np0005625201 sudo[125639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:54 np0005625201 sudo[125639]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:55 np0005625201 sudo[125672]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdwgnrkxzrtdbyqmflkgursdkhwgqxiw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:55 np0005625201 sudo[125672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:55 np0005625201 sudo[125672]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:55 np0005625201 sudo[125688]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lfsmumcwsxxtxbydqdrutaejqqronrhz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:55 np0005625201 sudo[125688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:55 np0005625201 sudo[125688]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:55 np0005625201 sudo[125785]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qqgwwzwpbpuvrrztkxcvxutauuianjqh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:55 np0005625201 sudo[125785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:55 np0005625201 sshd[125506]: Invalid user ftpadmin from 185.246.128.171 port 15942 Feb 20 08:10:55 np0005625201 sudo[125785]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:55 np0005625201 sudo[125823]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-npzrqncsiotobmvnggvfotjfetbgrala ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:55 np0005625201 sudo[125823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:56 np0005625201 sudo[125823]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:56 np0005625201 sudo[125897]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cfjaxfvkrcgzafyhvvpduagmdzocfljn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:56 np0005625201 sudo[125897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:56 np0005625201 runuser[125904]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:56 np0005625201 sudo[125897]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:56 np0005625201 sudo[125970]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xqigyuptujtrotmfcovtexlopnxqkmuc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:56 np0005625201 sudo[125970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:56 np0005625201 sudo[125970]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:56 np0005625201 sudo[126075]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hqjdcjmpramxazbsqiaeiljbzqlsesrw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:56 np0005625201 sudo[126075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:56 np0005625201 sudo[126075]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:56 np0005625201 sudo[126136]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vhozejgxklzpcgtcalkeleleleskifuj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:56 np0005625201 sudo[126136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:56 np0005625201 runuser[125904]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:57 np0005625201 sudo[126136]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:57 np0005625201 runuser[126171]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:57 np0005625201 sudo[126175]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nykulogxscfkisvblxbwtmnysohwddcu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:57 np0005625201 sudo[126175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:57 np0005625201 sudo[126175]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:57 np0005625201 sudo[126250]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ncumhccyxwgnwqmtuwyspbmisrylavhe ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:57 np0005625201 sudo[126250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:57 np0005625201 sudo[126250]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:57 np0005625201 sudo[126267]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lgghfoclzoyhppalrybdlarblseyfqxe ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:57 np0005625201 sudo[126267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:57 np0005625201 runuser[126171]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:57 np0005625201 runuser[126287]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:10:57 np0005625201 sshd[125506]: Disconnecting invalid user ftpadmin 185.246.128.171 port 15942: Change of username or service not allowed: (ftpadmin,ssh-connection) -> (oscar,ssh-connection) [preauth] Feb 20 08:10:57 np0005625201 sudo[126267]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:58 np0005625201 sudo[126364]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yrpbhxueszkgqopxmodxthhdvyjohjxb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:58 np0005625201 sudo[126364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:58 np0005625201 sudo[126364]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:58 np0005625201 sudo[126380]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nnbexhofbffhyrnultwhmrmxbtdively ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:58 np0005625201 sudo[126380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:58 np0005625201 sudo[126380]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:58 np0005625201 sudo[126442]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-whbztchdblyymhuwurttfzfjeqjvkpac ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:58 np0005625201 sudo[126442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:58 np0005625201 runuser[126287]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:10:58 np0005625201 sudo[126442]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:58 np0005625201 sudo[126496]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bqvioksxgicvsutowecqjfmjwdxuvpiv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:58 np0005625201 sudo[126496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:59 np0005625201 sudo[126496]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:59 np0005625201 sudo[126541]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hvivqktrzgtztjdqwmyoyznjwwmthgxo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:59 np0005625201 sudo[126541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:59 np0005625201 sudo[126541]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:59 np0005625201 sudo[126587]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ervjtzmjpxsywadtefrhlwtufszkwosv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:59 np0005625201 sudo[126587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:59 np0005625201 sudo[126587]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:59 np0005625201 sudo[126619]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mzbpobxycdqqypzcihfqwasgamuoxnvr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:59 np0005625201 sudo[126619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:10:59 np0005625201 sudo[126619]: pam_unix(sudo:session): session closed for user root Feb 20 08:10:59 np0005625201 sudo[126714]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kfvlrvmtbkxrkiexutqlfjtebvpcekom ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:10:59 np0005625201 sudo[126714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:00 np0005625201 sudo[126714]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:00 np0005625201 sudo[126737]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qzgmokibvxenjujsbaoidsitjnpkwdzi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:00 np0005625201 sudo[126737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:00 np0005625201 sudo[126737]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:00 np0005625201 sudo[126754]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-voecnngyluwdegeycspgqznvxxsdtlxy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:00 np0005625201 sudo[126754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:00 np0005625201 sudo[126754]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:00 np0005625201 sudo[126832]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkmnygbfqriusgfuthovmawwniczvpsv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:00 np0005625201 sudo[126832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:00 np0005625201 sudo[126832]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:01 np0005625201 sudo[126909]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-atiupelswozhlgjaxezzmjnibvcktyec ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:01 np0005625201 sudo[126909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:01 np0005625201 sudo[126909]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:01 np0005625201 sudo[126966]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iokpozgejmtsczafujjswrvmxfsgrgya ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:01 np0005625201 sudo[126966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:01 np0005625201 sshd[126736]: Invalid user oscar from 185.246.128.171 port 22373 Feb 20 08:11:01 np0005625201 sudo[126966]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:01 np0005625201 sudo[126990]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzoepjlnymjyatwnkrbznmosrwltbmug ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:01 np0005625201 sudo[126990]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:01 np0005625201 sudo[126990]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:01 np0005625201 sudo[127039]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-obuzxkgnzxhkodhvwgjgucxvgaipeaye ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:01 np0005625201 sudo[127039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:02 np0005625201 sudo[127039]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:02 np0005625201 sudo[127138]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-glcvgmdffzizdkfvmtnqtrmkrxobmkdc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:02 np0005625201 sudo[127138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:02 np0005625201 sudo[127138]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:02 np0005625201 sshd[126736]: Disconnecting invalid user oscar 185.246.128.171 port 22373: Change of username or service not allowed: (oscar,ssh-connection) -> (odoo17,ssh-connection) [preauth] Feb 20 08:11:02 np0005625201 sudo[127197]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lgusgqtbzenkqkawbismifoomsvtyrhw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:02 np0005625201 sudo[127197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:02 np0005625201 sudo[127197]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:03 np0005625201 sshd[127203]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:11:03 np0005625201 sudo[127278]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jvfswebrlirevechgslupfridzmltssb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:03 np0005625201 sudo[127278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:03 np0005625201 sudo[127278]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:03 np0005625201 sudo[127297]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xqgegtxawblhbydtsrfbujruvhcydivc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:03 np0005625201 sudo[127297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:03 np0005625201 sudo[127297]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:04 np0005625201 sudo[127382]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ppnntepaxaxzwztlywfrabdazdhhkkku ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:04 np0005625201 sudo[127382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:04 np0005625201 sudo[127382]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:04 np0005625201 sudo[127519]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzmumuernidqjqisoajtwzcfbvgsgila ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:04 np0005625201 sudo[127519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:04 np0005625201 sudo[127519]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:05 np0005625201 sshd[127388]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:11:05 np0005625201 sudo[127598]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bbwpdwsrojspvwzhrdwapfxjoltvzerp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:05 np0005625201 sudo[127598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:05 np0005625201 sudo[127598]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:05 np0005625201 sudo[127635]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-enbxejcjmuaawdiutbqgjsxppmxhnclz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:05 np0005625201 sudo[127635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:05 np0005625201 sshd[127300]: Invalid user odoo17 from 185.246.128.171 port 62476 Feb 20 08:11:05 np0005625201 sudo[127635]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:06 np0005625201 sudo[127768]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uycwdutvgynydcknmypsazvmtujmtpcf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:06 np0005625201 sudo[127768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:06 np0005625201 sudo[127768]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:06 np0005625201 sudo[127774]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:11:06 np0005625201 sudo[127774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:11:06 np0005625201 sudo[127774]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:06 np0005625201 sudo[127839]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mimbcbvxmrxtopolvuydvhfilljjsquy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:06 np0005625201 sudo[127839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:06 np0005625201 sudo[127826]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:11:06 np0005625201 sudo[127826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:11:06 np0005625201 sshd[127300]: Disconnecting invalid user odoo17 185.246.128.171 port 62476: Change of username or service not allowed: (odoo17,ssh-connection) -> (riad,ssh-connection) [preauth] Feb 20 08:11:06 np0005625201 sudo[127839]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:07 np0005625201 sudo[127932]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iqlfmcwwvuecvedxgymchgcwcfjbuohf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:07 np0005625201 sudo[127932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:07 np0005625201 sudo[127826]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:07 np0005625201 sudo[127932]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:07 np0005625201 sudo[127992]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pnjnctxkaluznuuszxwzucvqwvdiucow ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:07 np0005625201 sudo[127992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:07 np0005625201 sudo[128006]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:11:07 np0005625201 sudo[128006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:11:07 np0005625201 sudo[128006]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:08 np0005625201 sudo[127992]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:08 np0005625201 sshd[127897]: Invalid user riad from 185.246.128.171 port 37164 Feb 20 08:11:08 np0005625201 sshd[127897]: Disconnecting invalid user riad 185.246.128.171 port 37164: Change of username or service not allowed: (riad,ssh-connection) -> (adsl,ssh-connection) [preauth] Feb 20 08:11:08 np0005625201 sudo[128091]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hxxixfgghoexcjpwhcehulgubapjzvjy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:08 np0005625201 sudo[128091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:08 np0005625201 sudo[128091]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:08 np0005625201 sudo[128165]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-akcscnyknyfxurcmyrfowuuysajwnrmi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:08 np0005625201 sudo[128165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:09 np0005625201 sudo[128165]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:09 np0005625201 runuser[128199]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:09 np0005625201 sudo[128270]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mlpiecrxkhiiyfemgjsepzgytqdempvf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:09 np0005625201 sudo[128270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:09 np0005625201 sudo[128270]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:09 np0005625201 sshd[128115]: Invalid user adsl from 185.246.128.171 port 52409 Feb 20 08:11:09 np0005625201 runuser[128199]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:09 np0005625201 sudo[128331]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrqypxakdwhqrwrnjukxcgiobebkwxam ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:09 np0005625201 sudo[128331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:10 np0005625201 runuser[128387]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:10 np0005625201 sudo[128331]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:10 np0005625201 sshd[128115]: Disconnecting invalid user adsl 185.246.128.171 port 52409: Change of username or service not allowed: (adsl,ssh-connection) -> (server,ssh-connection) [preauth] Feb 20 08:11:10 np0005625201 sudo[128482]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mdazsceeliseuvbrebmrleiyelyzbwnd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:10 np0005625201 sudo[128482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:10 np0005625201 runuser[128387]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:10 np0005625201 sudo[128482]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:10 np0005625201 runuser[128515]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:10 np0005625201 sshd[128445]: Invalid user roman from 194.87.216.133 port 52822 Feb 20 08:11:10 np0005625201 sshd[128445]: Received disconnect from 194.87.216.133 port 52822:11: Bye Bye [preauth] Feb 20 08:11:10 np0005625201 sshd[128445]: Disconnected from invalid user roman 194.87.216.133 port 52822 [preauth] Feb 20 08:11:10 np0005625201 sudo[128604]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-layufwpeatvlbfigekyddopeibiqqilw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:10 np0005625201 sudo[128604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:11 np0005625201 sudo[128604]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:11 np0005625201 runuser[128515]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:11 np0005625201 sudo[128746]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ktyinxvxqanldlrhsedrbysbleffpdgr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:11 np0005625201 sudo[128746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:11 np0005625201 sudo[128746]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:12 np0005625201 sudo[128795]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qhbasxwkvznefqsmqdzbeneqpoljwdsz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:12 np0005625201 sudo[128795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:12 np0005625201 sshd[128732]: Invalid user server from 185.246.128.171 port 17908 Feb 20 08:11:12 np0005625201 sudo[128795]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:12 np0005625201 sshd[128732]: Disconnecting invalid user server 185.246.128.171 port 17908: Change of username or service not allowed: (server,ssh-connection) -> (doge,ssh-connection) [preauth] Feb 20 08:11:12 np0005625201 sudo[128890]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnnkusblwjrwdvxfepbnxtaeksvzmqnn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:12 np0005625201 sudo[128890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:12 np0005625201 sudo[128890]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:13 np0005625201 sudo[128964]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zytspzwggdwafmeeoegxiejqamhjkzee ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:13 np0005625201 sudo[128964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:13 np0005625201 sudo[128964]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:13 np0005625201 sudo[129060]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fiozbeeahlmwznldcmgtzmbkvrhwudfk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:13 np0005625201 sudo[129060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:13 np0005625201 sudo[129060]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:13 np0005625201 sshd[128893]: Invalid user doge from 185.246.128.171 port 33508 Feb 20 08:11:14 np0005625201 sudo[129105]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iefoefljpiimtugfigxeicjsmznfiwmr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:14 np0005625201 sudo[129105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:14 np0005625201 sshd[128893]: Disconnecting invalid user doge 185.246.128.171 port 33508: Change of username or service not allowed: (doge,ssh-connection) -> (alexandra,ssh-connection) [preauth] Feb 20 08:11:14 np0005625201 sudo[129105]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:14 np0005625201 sudo[129142]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aprbakqxrjrljfdoyquppfycayqzvuba ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:14 np0005625201 sudo[129142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:14 np0005625201 sudo[129142]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:15 np0005625201 sudo[129187]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ifxhxvxoixttnzxcnqambpavdvbwzijz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:15 np0005625201 sudo[129187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:15 np0005625201 sudo[129187]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:15 np0005625201 sudo[129226]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gynxsgzafiemggfhwmgbtahvwojzaeqh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:15 np0005625201 sudo[129226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:15 np0005625201 sudo[129226]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:16 np0005625201 sudo[129271]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bepckmnuhtrsdouhhlctizccwwutoxoj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:16 np0005625201 sudo[129271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:16 np0005625201 sudo[129271]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:16 np0005625201 sshd[129198]: Invalid user alexandra from 185.246.128.171 port 61754 Feb 20 08:11:16 np0005625201 sudo[129308]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pcdgrusxevzscrbpoyawjwoymehotfta ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:16 np0005625201 sudo[129308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:17 np0005625201 sudo[129308]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:17 np0005625201 sshd[129198]: Disconnecting invalid user alexandra 185.246.128.171 port 61754: Change of username or service not allowed: (alexandra,ssh-connection) -> (download,ssh-connection) [preauth] Feb 20 08:11:17 np0005625201 sudo[129357]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spiusgwjbykdhgyosudmtlhxxrjyjplr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:17 np0005625201 sudo[129357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:17 np0005625201 sudo[129357]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:17 np0005625201 sudo[129396]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imvqstgfcsuzcxzfcvnuugfhhtwybcyg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:17 np0005625201 sudo[129396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:18 np0005625201 sshd[129381]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:11:18 np0005625201 sudo[129396]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:18 np0005625201 sudo[129449]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vazzqlcwxgvjanneasjxccxqsjgurdfp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:18 np0005625201 sudo[129449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:18 np0005625201 sudo[129449]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:18 np0005625201 sudo[129478]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxumtfdinoodfiqdhuwwgkxijvbgrbvb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:18 np0005625201 sudo[129478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:19 np0005625201 sudo[129478]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:19 np0005625201 sudo[129531]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tizujwngeyckjajqnnutjibckwocyfvl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:19 np0005625201 sudo[129531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:19 np0005625201 sudo[129531]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:19 np0005625201 sshd[129369]: Invalid user download from 185.246.128.171 port 25519 Feb 20 08:11:20 np0005625201 sudo[129560]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-twsoozqjmkvcjnlexjbqkibdgmbnyidj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:20 np0005625201 sudo[129560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:20 np0005625201 sudo[129560]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:20 np0005625201 sudo[129613]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ndzaclbjiqiasqumziryqwbmalzillla ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:20 np0005625201 sudo[129613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:20 np0005625201 sudo[129613]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:21 np0005625201 sudo[129643]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzjbppfxltgimqpcjjaycavosgiswvkp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:21 np0005625201 sudo[129643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:21 np0005625201 sudo[129643]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:21 np0005625201 sudo[129789]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpwiuqvkgtfaoaabyynleebyaevtedht ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:21 np0005625201 sudo[129789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:21 np0005625201 sudo[129789]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:21 np0005625201 sshd[129369]: Disconnecting invalid user download 185.246.128.171 port 25519: Change of username or service not allowed: (download,ssh-connection) -> (sapadm,ssh-connection) [preauth] Feb 20 08:11:21 np0005625201 runuser[129804]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:22 np0005625201 sudo[129906]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-orlrfmdkgixwydfxreilppkmephudgzu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:22 np0005625201 sudo[129906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:22 np0005625201 sudo[129906]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:22 np0005625201 sudo[130001]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qngulphwozugbmlujjontwgszqqmhpfm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:22 np0005625201 sudo[130001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:22 np0005625201 runuser[129804]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:22 np0005625201 sudo[130001]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:22 np0005625201 runuser[130020]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:23 np0005625201 sudo[130091]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fkpbizutexdwfypiiacbvysapbfugvvd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:23 np0005625201 sudo[130091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:23 np0005625201 sudo[130091]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:23 np0005625201 runuser[130020]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:23 np0005625201 runuser[130140]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:23 np0005625201 sudo[130168]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-czbjaqdwwjcptvsxydxhokhgzwcophur ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:23 np0005625201 sudo[130168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:23 np0005625201 sudo[130168]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:24 np0005625201 sudo[130231]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jbnwqyjephddojycvnreeqjvnntqgszr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:24 np0005625201 sudo[130231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:24 np0005625201 runuser[130140]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:24 np0005625201 sudo[130231]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:24 np0005625201 sudo[130295]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smcduwlllyisufewjlckgjdomasoonzy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:24 np0005625201 sudo[130295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:24 np0005625201 sshd[130203]: Invalid user sapadm from 185.246.128.171 port 24286 Feb 20 08:11:24 np0005625201 sudo[130295]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:25 np0005625201 sshd[130203]: Disconnecting invalid user sapadm 185.246.128.171 port 24286: Change of username or service not allowed: (sapadm,ssh-connection) -> (test2,ssh-connection) [preauth] Feb 20 08:11:25 np0005625201 sudo[130335]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yoopjafghkcwcucyfyqeczegugkkedos ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:25 np0005625201 sudo[130335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:25 np0005625201 sudo[130335]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:25 np0005625201 sudo[130395]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mynjxrdzqiymhqahknbhkxlwceibsvmo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:25 np0005625201 sudo[130395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:25 np0005625201 sudo[130395]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:26 np0005625201 sudo[130510]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tkwlslhtrszrmgroudrwwzljqwtzwrgz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:26 np0005625201 sudo[130510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:26 np0005625201 sudo[130510]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:27 np0005625201 sudo[130596]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qkgwiajtkupinosadayuzafpbhkddtfd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:27 np0005625201 sudo[130596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:27 np0005625201 sudo[130596]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:27 np0005625201 sudo[130722]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-assmcwzhkltfyhteririspldaqtnydcw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:27 np0005625201 sudo[130722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:27 np0005625201 sudo[130722]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:27 np0005625201 sudo[130739]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzqgcojkzpincwwnezxueenarsjipysj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:27 np0005625201 sudo[130739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:28 np0005625201 sudo[130739]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:28 np0005625201 sshd[130397]: Invalid user test2 from 185.246.128.171 port 46383 Feb 20 08:11:29 np0005625201 sudo[130899]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iygengniqqibdofdxkxcxelbmlxfanfq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:29 np0005625201 sudo[130899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:30 np0005625201 sudo[130899]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:31 np0005625201 sudo[131177]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pbxgxaycjlloolrsmpohkzlhmnrbouon ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:31 np0005625201 sudo[131177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:32 np0005625201 sudo[131177]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:32 np0005625201 sudo[131428]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dwprmulckamlemsuudmrgqscoyucimrv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:32 np0005625201 sudo[131428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:32 np0005625201 sshd[130397]: Disconnecting invalid user test2 185.246.128.171 port 46383: Change of username or service not allowed: (test2,ssh-connection) -> (Daniel,ssh-connection) [preauth] Feb 20 08:11:33 np0005625201 sudo[131428]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:34 np0005625201 sudo[131670]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-svptqgibrunrprasvqftvssvazicghre ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:34 np0005625201 sudo[131670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:34 np0005625201 runuser[131791]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:35 np0005625201 sudo[131670]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:35 np0005625201 runuser[131791]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:35 np0005625201 runuser[131963]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:36 np0005625201 sudo[132079]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hlgnbnsukcokxfkdprmtbbpgiotieuwq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:36 np0005625201 sudo[132079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:36 np0005625201 runuser[131963]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:36 np0005625201 runuser[132109]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:37 np0005625201 sudo[132079]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:37 np0005625201 runuser[132109]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:37 np0005625201 sshd[131886]: Invalid user Daniel from 185.246.128.171 port 20932 Feb 20 08:11:37 np0005625201 sshd[131886]: Disconnecting invalid user Daniel 185.246.128.171 port 20932: Change of username or service not allowed: (Daniel,ssh-connection) -> (marco,ssh-connection) [preauth] Feb 20 08:11:38 np0005625201 sudo[132325]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rklcomlnthmibyruynjpikugsnvfdszs ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:38 np0005625201 sudo[132325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:38 np0005625201 sudo[132325]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:39 np0005625201 sudo[132526]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rsohgrbpaorijqyvkrgxxrdzzbcklxys ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:39 np0005625201 sudo[132526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:40 np0005625201 sudo[132526]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:41 np0005625201 sudo[132690]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkcheghkhtybwpztpanjuwpnknzvzspn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:41 np0005625201 sudo[132690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:41 np0005625201 sshd[132488]: Invalid user marco from 185.246.128.171 port 3685 Feb 20 08:11:41 np0005625201 sshd[132488]: Disconnecting invalid user marco 185.246.128.171 port 3685: Change of username or service not allowed: (marco,ssh-connection) -> (device,ssh-connection) [preauth] Feb 20 08:11:42 np0005625201 sudo[132690]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:43 np0005625201 sudo[132986]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qifzprfxurgakhapalxibmbyfresbzic ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:43 np0005625201 sudo[132986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:44 np0005625201 sshd[132872]: Invalid user device from 185.246.128.171 port 32656 Feb 20 08:11:44 np0005625201 sudo[132986]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:44 np0005625201 sshd[133156]: Invalid user jorge from 35.188.112.111 port 37968 Feb 20 08:11:44 np0005625201 sshd[133156]: Received disconnect from 35.188.112.111 port 37968:11: Bye Bye [preauth] Feb 20 08:11:44 np0005625201 sshd[133156]: Disconnected from invalid user jorge 35.188.112.111 port 37968 [preauth] Feb 20 08:11:44 np0005625201 sshd[132872]: Disconnecting invalid user device 185.246.128.171 port 32656: Change of username or service not allowed: (device,ssh-connection) -> (git,ssh-connection) [preauth] Feb 20 08:11:44 np0005625201 sudo[133187]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eqhdprigcodcjzcfkkltkgwpttpdzhnf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:44 np0005625201 sudo[133187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:47 np0005625201 sudo[133187]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:47 np0005625201 sudo[133315]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-upjprvyyycjqqqzjrhqedwasmhjtdzyf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:47 np0005625201 sudo[133315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:47 np0005625201 runuser[133330]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:48 np0005625201 sudo[133315]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:48 np0005625201 runuser[133330]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:48 np0005625201 sshd[133268]: Invalid user git from 185.246.128.171 port 19554 Feb 20 08:11:48 np0005625201 sshd[133465]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:11:48 np0005625201 runuser[133507]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:49 np0005625201 sudo[133581]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ehrzbkietyicbcluzkpseucriynvwxky ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:49 np0005625201 sudo[133581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:49 np0005625201 runuser[133507]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:49 np0005625201 runuser[133593]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:11:50 np0005625201 sudo[133581]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:50 np0005625201 runuser[133593]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:11:50 np0005625201 sshd[133268]: Disconnecting invalid user git 185.246.128.171 port 19554: Change of username or service not allowed: (git,ssh-connection) -> (training,ssh-connection) [preauth] Feb 20 08:11:50 np0005625201 sshd[133500]: Received disconnect from 122.166.49.42 port 59862:11: Bye Bye [preauth] Feb 20 08:11:50 np0005625201 sshd[133500]: Disconnected from authenticating user root 122.166.49.42 port 59862 [preauth] Feb 20 08:11:51 np0005625201 sudo[133883]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mamsldxzcuhdsvovlmflofmtkaeeshlo ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:51 np0005625201 sudo[133883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:52 np0005625201 sshd[133865]: Invalid user training from 185.246.128.171 port 2600 Feb 20 08:11:52 np0005625201 sudo[133883]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:52 np0005625201 sshd[133865]: Disconnecting invalid user training 185.246.128.171 port 2600: Change of username or service not allowed: (training,ssh-connection) -> (matrix,ssh-connection) [preauth] Feb 20 08:11:52 np0005625201 sudo[134117]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mpbnunjlxacukkqotiilvbbdlzgbetzy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:52 np0005625201 sudo[134117]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:53 np0005625201 sudo[134117]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:54 np0005625201 sudo[134272]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gopdgdlaiburmnrzkhwphsuumunzsyzf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:54 np0005625201 sudo[134272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:55 np0005625201 sshd[134233]: Invalid user matrix from 185.246.128.171 port 32303 Feb 20 08:11:55 np0005625201 sudo[134272]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:55 np0005625201 sshd[134233]: Disconnecting invalid user matrix 185.246.128.171 port 32303: Change of username or service not allowed: (matrix,ssh-connection) -> (monitor,ssh-connection) [preauth] Feb 20 08:11:56 np0005625201 sudo[134412]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-segxssvjdsogvdpnufxgzkvzjcqzltkz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:56 np0005625201 sudo[134412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:57 np0005625201 sudo[134412]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:57 np0005625201 sudo[134581]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tkqyatzavtdhsdaqazrxiolwjbiwebjy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:57 np0005625201 sudo[134581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:11:58 np0005625201 sshd[134526]: Invalid user monitor from 185.246.128.171 port 3284 Feb 20 08:11:58 np0005625201 sudo[134581]: pam_unix(sudo:session): session closed for user root Feb 20 08:11:59 np0005625201 sudo[134890]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sbytoutuuuincbzbngczioghslgtjiqp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:11:59 np0005625201 sudo[134890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:00 np0005625201 sudo[134890]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:00 np0005625201 sshd[134526]: Disconnecting invalid user monitor 185.246.128.171 port 3284: Change of username or service not allowed: (monitor,ssh-connection) -> (pi,ssh-connection) [preauth] Feb 20 08:12:01 np0005625201 runuser[135120]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:01 np0005625201 sudo[135235]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eoglyjrezjwnawvtbxjriagehcqlxmer ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:01 np0005625201 sudo[135235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:01 np0005625201 runuser[135120]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:01 np0005625201 runuser[135360]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:02 np0005625201 sudo[135235]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:02 np0005625201 runuser[135360]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:02 np0005625201 runuser[135528]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:03 np0005625201 sudo[135590]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rscmsojxacmgtazfpbblwiugparftabc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:03 np0005625201 sudo[135590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:03 np0005625201 sshd[135359]: Invalid user pi from 185.246.128.171 port 59223 Feb 20 08:12:03 np0005625201 sshd[135575]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:12:03 np0005625201 runuser[135528]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:04 np0005625201 sudo[135590]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:04 np0005625201 sudo[135877]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-unlthqdvkbvlhjbvhrfsxyggxzmvaitp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:04 np0005625201 sudo[135877]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:05 np0005625201 sudo[135877]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:06 np0005625201 sshd[135359]: error: maximum authentication attempts exceeded for invalid user pi from 185.246.128.171 port 59223 ssh2 [preauth] Feb 20 08:12:06 np0005625201 sshd[135359]: Disconnecting invalid user pi 185.246.128.171 port 59223: Too many authentication failures [preauth] Feb 20 08:12:06 np0005625201 sudo[136141]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xregbcwkxhprejyxdkrbusuueuitfksi ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:06 np0005625201 sudo[136141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:07 np0005625201 sudo[136141]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:08 np0005625201 sudo[136318]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djqwsekwgsfjsooeakpeczjyvexuhzvu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:08 np0005625201 sudo[136318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:08 np0005625201 sudo[136320]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:12:08 np0005625201 sudo[136320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:12:08 np0005625201 sudo[136320]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:08 np0005625201 sudo[136352]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:12:08 np0005625201 sudo[136352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:12:08 np0005625201 sudo[136352]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:09 np0005625201 sudo[136318]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:09 np0005625201 sudo[136593]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wgbzjtkxlhcuxwhownpovneguzfwrpft ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:09 np0005625201 sudo[136593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:10 np0005625201 sudo[136708]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:12:10 np0005625201 sudo[136708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:12:10 np0005625201 sudo[136708]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:11 np0005625201 sudo[136593]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:11 np0005625201 sudo[136868]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jahesymsssisuifumctzaxhgskomwyjb ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:11 np0005625201 sudo[136868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:12 np0005625201 sshd[136275]: Invalid user pi from 185.246.128.171 port 61852 Feb 20 08:12:12 np0005625201 sudo[136868]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:13 np0005625201 sshd[136275]: Disconnecting invalid user pi 185.246.128.171 port 61852: Change of username or service not allowed: (pi,ssh-connection) -> (apache,ssh-connection) [preauth] Feb 20 08:12:13 np0005625201 sudo[137053]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vusltkiirotqdfnknsjpjxdismqbhgfs ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:13 np0005625201 sudo[137053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:13 np0005625201 runuser[137089]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:14 np0005625201 sshd[137056]: Invalid user apache from 185.246.128.171 port 63616 Feb 20 08:12:14 np0005625201 sshd[137056]: Disconnecting invalid user apache 185.246.128.171 port 63616: Change of username or service not allowed: (apache,ssh-connection) -> (gg,ssh-connection) [preauth] Feb 20 08:12:14 np0005625201 sudo[137053]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:14 np0005625201 runuser[137089]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:14 np0005625201 runuser[137303]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:15 np0005625201 sudo[137372]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kmmxtpkxaesnregzupxvtkstielmugkr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:15 np0005625201 sudo[137372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:15 np0005625201 runuser[137303]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:15 np0005625201 runuser[137385]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:16 np0005625201 sudo[137372]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:16 np0005625201 runuser[137385]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:17 np0005625201 sudo[137552]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rxlfncibratihnwpdsgfxzfyfacoacqz ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:17 np0005625201 sudo[137552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:18 np0005625201 sshd[137356]: Invalid user gg from 185.246.128.171 port 17978 Feb 20 08:12:18 np0005625201 sudo[137552]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:18 np0005625201 sshd[137356]: Disconnecting invalid user gg 185.246.128.171 port 17978: Change of username or service not allowed: (gg,ssh-connection) -> (kernel,ssh-connection) [preauth] Feb 20 08:12:18 np0005625201 sudo[137646]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fschcmdhualqzzsdkcxuxrgbcvqjbmbr ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:18 np0005625201 sudo[137646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:20 np0005625201 sudo[137646]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:21 np0005625201 sshd[137749]: Invalid user kernel from 185.246.128.171 port 10929 Feb 20 08:12:21 np0005625201 sudo[137844]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nxvjffgzdunnvrebebzvwaakiwvyduui ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:21 np0005625201 sudo[137844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:21 np0005625201 sshd[137749]: Disconnecting invalid user kernel 185.246.128.171 port 10929: Change of username or service not allowed: (kernel,ssh-connection) -> (usr,ssh-connection) [preauth] Feb 20 08:12:22 np0005625201 sudo[137844]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:23 np0005625201 sudo[138084]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxjsikgtbyfhbhumkfvdpddlbdjlftmk ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:23 np0005625201 sudo[138084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:24 np0005625201 sudo[138084]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:24 np0005625201 sshd[138057]: Invalid user usr from 185.246.128.171 port 42884 Feb 20 08:12:24 np0005625201 sudo[138227]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ljzdcabdeoshfsgnrexhxehpbyiwerce ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:24 np0005625201 sudo[138227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:24 np0005625201 sshd[138057]: Disconnecting invalid user usr 185.246.128.171 port 42884: Change of username or service not allowed: (usr,ssh-connection) -> (jane,ssh-connection) [preauth] Feb 20 08:12:25 np0005625201 sudo[138227]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:26 np0005625201 sudo[138420]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rnipscwwxrvvyggkyndkizjtbyjajmlh ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:26 np0005625201 sudo[138420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:26 np0005625201 sshd[138313]: Invalid user jane from 185.246.128.171 port 18356 Feb 20 08:12:27 np0005625201 runuser[138492]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:27 np0005625201 sshd[138313]: Disconnecting invalid user jane 185.246.128.171 port 18356: Change of username or service not allowed: (jane,ssh-connection) -> (ftp_inst,ssh-connection) [preauth] Feb 20 08:12:27 np0005625201 runuser[138492]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:27 np0005625201 sudo[138420]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:27 np0005625201 runuser[138644]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:28 np0005625201 sudo[138733]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kihvjwlactudhrqndptiozgrlgqzdvhq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:28 np0005625201 sudo[138733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:28 np0005625201 runuser[138644]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:28 np0005625201 runuser[138741]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:28 np0005625201 sshd[138613]: Invalid user ftp_inst from 185.246.128.171 port 38744 Feb 20 08:12:28 np0005625201 sshd[138613]: Disconnecting invalid user ftp_inst 185.246.128.171 port 38744: Change of username or service not allowed: (ftp_inst,ssh-connection) -> (rahul,ssh-connection) [preauth] Feb 20 08:12:29 np0005625201 runuser[138741]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:29 np0005625201 sudo[138733]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:29 np0005625201 sshd[138956]: Received disconnect from 162.19.250.18 port 45386:11: Bye Bye [preauth] Feb 20 08:12:29 np0005625201 sshd[138956]: Disconnected from authenticating user root 162.19.250.18 port 45386 [preauth] Feb 20 08:12:30 np0005625201 sshd[138705]: Received disconnect from 103.183.75.204 port 47018:11: Bye Bye [preauth] Feb 20 08:12:30 np0005625201 sshd[138705]: Disconnected from authenticating user root 103.183.75.204 port 47018 [preauth] Feb 20 08:12:30 np0005625201 sshd[138966]: Invalid user rahul from 185.246.128.171 port 57528 Feb 20 08:12:30 np0005625201 sudo[139088]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cgypkrdbgoxcuiofhdhndaykyplejeph ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:30 np0005625201 sudo[139088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:30 np0005625201 sshd[138966]: Disconnecting invalid user rahul 185.246.128.171 port 57528: Change of username or service not allowed: (rahul,ssh-connection) -> (VYOS,ssh-connection) [preauth] Feb 20 08:12:31 np0005625201 sudo[139088]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:32 np0005625201 sudo[139463]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rmlfapbpwsepbfgqtyjwikboqvbofode ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:32 np0005625201 sudo[139463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:33 np0005625201 sudo[139463]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:33 np0005625201 sshd[139374]: Invalid user VYOS from 185.246.128.171 port 25616 Feb 20 08:12:34 np0005625201 sudo[139623]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyptbechaosrpguopelfmcxbmrqyexbd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:34 np0005625201 sudo[139623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:34 np0005625201 sshd[139374]: Disconnecting invalid user VYOS 185.246.128.171 port 25616: Change of username or service not allowed: (VYOS,ssh-connection) -> (user03,ssh-connection) [preauth] Feb 20 08:12:34 np0005625201 sshd[139695]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:12:35 np0005625201 sudo[139623]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:35 np0005625201 sudo[139941]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkdhkvjhacopdhmblxlthjqiapwvxzsq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:35 np0005625201 sudo[139941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:36 np0005625201 sshd[139778]: Invalid user user03 from 185.246.128.171 port 64243 Feb 20 08:12:36 np0005625201 sshd[139778]: Disconnecting invalid user user03 185.246.128.171 port 64243: Change of username or service not allowed: (user03,ssh-connection) -> (anonymous,ssh-connection) [preauth] Feb 20 08:12:37 np0005625201 sudo[139941]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:37 np0005625201 sudo[140198]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhztkupbbxubhipsrsapqibizcsuvwsc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:37 np0005625201 sudo[140198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:38 np0005625201 sshd[140133]: Invalid user anonymous from 185.246.128.171 port 27170 Feb 20 08:12:38 np0005625201 sudo[140198]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:39 np0005625201 sshd[140269]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:12:39 np0005625201 sudo[140394]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tzwcctraueaiambkxifabcubhzbpcnvt ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:39 np0005625201 sudo[140394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:39 np0005625201 runuser[140455]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:40 np0005625201 runuser[140455]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:40 np0005625201 sudo[140394]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:40 np0005625201 runuser[140602]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:41 np0005625201 runuser[140602]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:41 np0005625201 runuser[140678]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:41 np0005625201 sudo[140675]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gtshlmwphhprtdcnjasldgjqeqfdadpc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:41 np0005625201 sudo[140675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:42 np0005625201 runuser[140678]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:42 np0005625201 sudo[140675]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:43 np0005625201 sudo[140984]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-exkxbvswwqfyxkxiahmfuiefxzmxyrif ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:43 np0005625201 sudo[140984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:43 np0005625201 sshd[140133]: error: maximum authentication attempts exceeded for invalid user anonymous from 185.246.128.171 port 27170 ssh2 [preauth] Feb 20 08:12:43 np0005625201 sshd[140133]: Disconnecting invalid user anonymous 185.246.128.171 port 27170: Too many authentication failures [preauth] Feb 20 08:12:43 np0005625201 sudo[140984]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:44 np0005625201 sudo[141142]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jgoibihoucqpgouwzmwqzhhnnofsaskp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:44 np0005625201 sudo[141142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:45 np0005625201 sudo[141142]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:45 np0005625201 sshd[141104]: Invalid user anonymous from 185.246.128.171 port 56582 Feb 20 08:12:46 np0005625201 sudo[141329]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkxfhuvjgfyuhtaznfokgdwfytnqbjaw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:46 np0005625201 sudo[141329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:47 np0005625201 sudo[141329]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:48 np0005625201 sudo[141446]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbhndanjxmeycphvhaoyzktinrtzqgir ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:12:48 np0005625201 sudo[141446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:49 np0005625201 sudo[141446]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:49 np0005625201 sudo[141589]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imxijsomnjggeyoqkddplujgqwsspfhb ; /usr/bin/python3 Feb 20 08:12:49 np0005625201 sudo[141589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:49 np0005625201 sshd[141104]: Disconnecting invalid user anonymous 185.246.128.171 port 56582: Change of username or service not allowed: (anonymous,ssh-connection) -> (fff,ssh-connection) [preauth] Feb 20 08:12:49 np0005625201 sudo[141589]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:49 np0005625201 sshd[141575]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:12:50 np0005625201 sudo[141662]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nteljcngcbfkgrllpvyfgyfqwjjnwodu ; /usr/bin/python3 Feb 20 08:12:50 np0005625201 sudo[141662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:50 np0005625201 sudo[141662]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:50 np0005625201 sudo[141833]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-owyiuowellqkuonnfgqersuhakthoxnt ; /usr/bin/python3 Feb 20 08:12:50 np0005625201 sudo[141833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:50 np0005625201 sudo[141833]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:50 np0005625201 sudo[141879]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zulbzmaoitgkvppgexdfwzbkilgcoucu ; /usr/bin/python3 Feb 20 08:12:50 np0005625201 sudo[141879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:51 np0005625201 sudo[141879]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:51 np0005625201 sudo[141903]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-khvtlqftktjtuyokghjmdhhihyyvooun ; /usr/bin/python3 Feb 20 08:12:51 np0005625201 sudo[141903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:51 np0005625201 sudo[141903]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:51 np0005625201 sudo[141976]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-haqpyjmzurdmsyndzklstmqnukckwkau ; /usr/bin/python3 Feb 20 08:12:51 np0005625201 sudo[141976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:12:52 np0005625201 sudo[141976]: pam_unix(sudo:session): session closed for user root Feb 20 08:12:52 np0005625201 sshd[141665]: Invalid user fff from 185.246.128.171 port 24822 Feb 20 08:12:52 np0005625201 sshd[141665]: Disconnecting invalid user fff 185.246.128.171 port 24822: Change of username or service not allowed: (fff,ssh-connection) -> (devops,ssh-connection) [preauth] Feb 20 08:12:52 np0005625201 runuser[142085]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:53 np0005625201 runuser[142085]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:53 np0005625201 runuser[142172]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:54 np0005625201 runuser[142172]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:54 np0005625201 runuser[142280]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:12:55 np0005625201 runuser[142280]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:12:55 np0005625201 sshd[142106]: Invalid user devops from 185.246.128.171 port 2997 Feb 20 08:12:57 np0005625201 sshd[142106]: Disconnecting invalid user devops 185.246.128.171 port 2997: Change of username or service not allowed: (devops,ssh-connection) -> (support1,ssh-connection) [preauth] Feb 20 08:13:00 np0005625201 sshd[142540]: Invalid user support1 from 185.246.128.171 port 25491 Feb 20 08:13:00 np0005625201 sshd[142540]: Disconnecting invalid user support1 185.246.128.171 port 25491: Change of username or service not allowed: (support1,ssh-connection) -> (Administrator,ssh-connectio [preauth] Feb 20 08:13:03 np0005625201 sshd[142805]: Invalid user Administrator from 185.246.128.171 port 60568 Feb 20 08:13:05 np0005625201 runuser[143425]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:06 np0005625201 sshd[142805]: Disconnecting invalid user Administrator 185.246.128.171 port 60568: Change of username or service not allowed: (Administrator,ssh-connection) -> (sc,ssh-connection) [preauth] Feb 20 08:13:06 np0005625201 runuser[143425]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:06 np0005625201 runuser[143526]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:07 np0005625201 runuser[143526]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:07 np0005625201 runuser[143610]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:08 np0005625201 runuser[143610]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:11 np0005625201 sudo[144079]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:13:11 np0005625201 sudo[144079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:13:11 np0005625201 sudo[144079]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:11 np0005625201 sudo[144094]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:13:11 np0005625201 sudo[144094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:13:11 np0005625201 sudo[144094]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:12 np0005625201 sshd[143809]: Invalid user sc from 185.246.128.171 port 27031 Feb 20 08:13:12 np0005625201 sshd[143809]: Disconnecting invalid user sc 185.246.128.171 port 27031: Change of username or service not allowed: (sc,ssh-connection) -> (openmediavault,ssh-connection) [preauth] Feb 20 08:13:12 np0005625201 sudo[144316]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:13:12 np0005625201 sudo[144316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:13:12 np0005625201 sudo[144316]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:16 np0005625201 sshd[144485]: Invalid user openmediavault from 185.246.128.171 port 62750 Feb 20 08:13:16 np0005625201 sudo[144654]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oaoimikeksmwijmpsdidyjkmxopygysk ; /usr/bin/python3 Feb 20 08:13:16 np0005625201 sudo[144654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:16 np0005625201 sshd[144485]: Disconnecting invalid user openmediavault 185.246.128.171 port 62750: Change of username or service not allowed: (openmediavault,ssh-connection) -> (rafael,ssh-connection [preauth] Feb 20 08:13:16 np0005625201 sudo[144654]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:16 np0005625201 sudo[144715]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-galgwljajzhlppjmxlfvugvpagspvblv ; /usr/bin/python3 Feb 20 08:13:16 np0005625201 sudo[144715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:16 np0005625201 sudo[144715]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:17 np0005625201 sudo[144773]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gxaxbbtoejegzngngggeqjokhorkocof ; /usr/bin/python3 Feb 20 08:13:17 np0005625201 sudo[144773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:17 np0005625201 sshd[144718]: Invalid user rafael from 185.246.128.171 port 47165 Feb 20 08:13:18 np0005625201 sshd[144718]: Disconnecting invalid user rafael 185.246.128.171 port 47165: Change of username or service not allowed: (rafael,ssh-connection) -> (toto,ssh-connection) [preauth] Feb 20 08:13:18 np0005625201 sudo[144773]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:18 np0005625201 sudo[144812]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ulxsnwtdtjnnfjsctfemiboutmthminf ; /usr/bin/python3 Feb 20 08:13:18 np0005625201 sudo[144812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:18 np0005625201 runuser[144824]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:19 np0005625201 runuser[144824]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:19 np0005625201 runuser[144899]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:20 np0005625201 sshd[144786]: Invalid user toto from 185.246.128.171 port 8561 Feb 20 08:13:20 np0005625201 runuser[144899]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:20 np0005625201 runuser[144987]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:20 np0005625201 sshd[144786]: Disconnecting invalid user toto 185.246.128.171 port 8561: Change of username or service not allowed: (toto,ssh-connection) -> (lenovo,ssh-connection) [preauth] Feb 20 08:13:21 np0005625201 sshd[145057]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:13:21 np0005625201 runuser[144987]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:24 np0005625201 sshd[145297]: Invalid user lenovo from 185.246.128.171 port 12929 Feb 20 08:13:25 np0005625201 sshd[145297]: Disconnecting invalid user lenovo 185.246.128.171 port 12929: Change of username or service not allowed: (lenovo,ssh-connection) -> (mc1,ssh-connection) [preauth] Feb 20 08:13:26 np0005625201 sudo[144812]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:26 np0005625201 sudo[145494]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmpdckhriqvzxdrspgwyampsyticagpp ; /usr/bin/python3 Feb 20 08:13:26 np0005625201 sudo[145494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:27 np0005625201 sudo[145494]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:27 np0005625201 sudo[145556]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uguxynrxsvofkihxeawcgtxrlpbalqkh ; /usr/bin/python3 Feb 20 08:13:27 np0005625201 sudo[145556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:27 np0005625201 sudo[145556]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:27 np0005625201 sudo[145667]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zprchxqmjwdhovdfazebydmquxsghtek ; /usr/bin/python3 Feb 20 08:13:27 np0005625201 sudo[145667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:28 np0005625201 sudo[145667]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:28 np0005625201 sudo[145699]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fabvolsfbvntmtvlebdketdavcwtwrvi ; /usr/bin/python3 Feb 20 08:13:28 np0005625201 sudo[145699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:29 np0005625201 sudo[145699]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:29 np0005625201 sudo[145741]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbkzdttbyoszuibenkxvfvdwvinoymwg ; /usr/bin/python3 Feb 20 08:13:29 np0005625201 sudo[145741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:29 np0005625201 sshd[145480]: Invalid user mc1 from 185.246.128.171 port 16007 Feb 20 08:13:30 np0005625201 sshd[145480]: Disconnecting invalid user mc1 185.246.128.171 port 16007: Change of username or service not allowed: (mc1,ssh-connection) -> (spark,ssh-connection) [preauth] Feb 20 08:13:32 np0005625201 runuser[146153]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:33 np0005625201 sshd[146002]: Invalid user spark from 185.246.128.171 port 27792 Feb 20 08:13:33 np0005625201 runuser[146153]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:33 np0005625201 runuser[146482]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:33 np0005625201 sshd[146002]: Disconnecting invalid user spark 185.246.128.171 port 27792: Change of username or service not allowed: (spark,ssh-connection) -> (mika,ssh-connection) [preauth] Feb 20 08:13:34 np0005625201 runuser[146482]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:34 np0005625201 runuser[146613]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:34 np0005625201 runuser[146613]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:35 np0005625201 sshd[146586]: Invalid user mika from 185.246.128.171 port 6680 Feb 20 08:13:35 np0005625201 sshd[146586]: Disconnecting invalid user mika 185.246.128.171 port 6680: Change of username or service not allowed: (mika,ssh-connection) -> (adriana,ssh-connection) [preauth] Feb 20 08:13:36 np0005625201 sudo[145741]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:36 np0005625201 sudo[146960]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mlyndvdvnljtaxeooejlqgesykpmtegh ; /usr/bin/python3 Feb 20 08:13:36 np0005625201 sudo[146960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:36 np0005625201 sudo[146960]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:36 np0005625201 sshd[146965]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:13:36 np0005625201 sudo[146983]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sqqlcmuljthchexkhgijcilndmuialcm ; /usr/bin/python3 Feb 20 08:13:36 np0005625201 sudo[146983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:37 np0005625201 sudo[146983]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:37 np0005625201 sudo[147019]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nnfvalirbtkckhqlgbzlwjdfdqrmfard ; /usr/bin/python3 Feb 20 08:13:37 np0005625201 sudo[147019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:37 np0005625201 sudo[147019]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:38 np0005625201 sudo[147158]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qenakmjenvmzpphksaufhirocjrzibdc ; /usr/bin/python3 Feb 20 08:13:38 np0005625201 sudo[147158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:38 np0005625201 sshd[146964]: Invalid user adriana from 185.246.128.171 port 54070 Feb 20 08:13:39 np0005625201 sudo[147158]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:39 np0005625201 sudo[147219]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qxmeehaaknhpmaumrqmfmbyxwzubmtai ; /usr/bin/python3 Feb 20 08:13:39 np0005625201 sudo[147219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:39 np0005625201 sshd[146964]: Disconnecting invalid user adriana 185.246.128.171 port 54070: Change of username or service not allowed: (adriana,ssh-connection) -> (publicuser,ssh-connection) [preauth] Feb 20 08:13:43 np0005625201 sshd[147404]: Invalid user publicuser from 185.246.128.171 port 21070 Feb 20 08:13:44 np0005625201 sshd[147404]: Disconnecting invalid user publicuser 185.246.128.171 port 21070: Change of username or service not allowed: (publicuser,ssh-connection) -> (paul,ssh-connection) [preauth] Feb 20 08:13:45 np0005625201 sudo[147219]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:45 np0005625201 runuser[147860]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:45 np0005625201 sudo[147876]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-krdicovsovtwhgdywwiaarybhurglfbo ; /usr/bin/python3 Feb 20 08:13:45 np0005625201 sudo[147876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:45 np0005625201 sudo[147876]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:46 np0005625201 sudo[148006]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrjqzlnratarghdqrkwbijdpqsuuipce ; /usr/bin/python3 Feb 20 08:13:46 np0005625201 sudo[148006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:46 np0005625201 runuser[147860]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:46 np0005625201 runuser[148040]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:46 np0005625201 sudo[148006]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:46 np0005625201 sudo[148104]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ktofmpsnzbcqnwzhnbtrwbabuntmthbs ; /usr/bin/python3 Feb 20 08:13:46 np0005625201 sudo[148104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:46 np0005625201 sudo[148104]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:47 np0005625201 runuser[148040]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:47 np0005625201 runuser[148144]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:47 np0005625201 sudo[148213]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gahovpudzzsviytldkiwqmpypqwxpwfn ; /usr/bin/python3 Feb 20 08:13:47 np0005625201 sudo[148213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:47 np0005625201 sudo[148213]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:48 np0005625201 runuser[148144]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:48 np0005625201 sudo[148288]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agmtbxbaqquvbeukgazkqcwgtoadtsun ; /usr/bin/python3 Feb 20 08:13:48 np0005625201 sudo[148288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:48 np0005625201 sudo[148288]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:48 np0005625201 sshd[148090]: Invalid user paul from 185.246.128.171 port 10009 Feb 20 08:13:48 np0005625201 sudo[148350]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ycekshkdsjepxyjpwtpiounfoutenzmx ; /usr/bin/python3 Feb 20 08:13:48 np0005625201 sudo[148350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:49 np0005625201 sshd[148090]: Disconnecting invalid user paul 185.246.128.171 port 10009: Change of username or service not allowed: (paul,ssh-connection) -> (ss,ssh-connection) [preauth] Feb 20 08:13:49 np0005625201 sudo[148350]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:49 np0005625201 sudo[148441]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qwdvxbzrbnreagabyetzklejgpmqsopq ; /usr/bin/python3 Feb 20 08:13:49 np0005625201 sudo[148441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:49 np0005625201 sudo[148441]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:49 np0005625201 sudo[148507]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zomwndmrmhhhrlslkokpsnsauydtlrwc ; /usr/bin/python3 Feb 20 08:13:49 np0005625201 sudo[148507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:50 np0005625201 sudo[148507]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:50 np0005625201 sudo[148570]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mkjuajejavuvqagzzyihahbuxrjjupze ; /usr/bin/python3 Feb 20 08:13:50 np0005625201 sudo[148570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:50 np0005625201 sudo[148570]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:50 np0005625201 sshd[148480]: Invalid user ss from 185.246.128.171 port 1316 Feb 20 08:13:51 np0005625201 sudo[148764]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-efjhpagldhdvbheqvdylvpbhjsrpaldy ; /usr/bin/python3 Feb 20 08:13:51 np0005625201 sudo[148764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:51 np0005625201 sudo[148764]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:51 np0005625201 sudo[148825]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrtzhiylufkwlilnjmrmqeroxpwusmpi ; /usr/bin/python3 Feb 20 08:13:51 np0005625201 sudo[148825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:51 np0005625201 sshd[148480]: Disconnecting invalid user ss 185.246.128.171 port 1316: Change of username or service not allowed: (ss,ssh-connection) -> (orangepi,ssh-connection) [preauth] Feb 20 08:13:52 np0005625201 sudo[148825]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:52 np0005625201 sudo[148919]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rdyjivuskxwjvjkxcqfgkoftwrovdqoo ; /usr/bin/python3 Feb 20 08:13:52 np0005625201 sudo[148919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:52 np0005625201 sudo[148919]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:52 np0005625201 sudo[149035]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mirlrctnaiyfiotthcjscsymugmkrwkh ; /usr/bin/python3 Feb 20 08:13:52 np0005625201 sudo[149035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:53 np0005625201 sudo[149035]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:53 np0005625201 sudo[149130]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yowyxglzgngysugecsnvzkikqksnjxnx ; /usr/bin/python3 Feb 20 08:13:53 np0005625201 sudo[149130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:53 np0005625201 sudo[149130]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:53 np0005625201 sudo[149193]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-idtahkpqklxuvjlabysdyrnwdgueradb ; /usr/bin/python3 Feb 20 08:13:53 np0005625201 sudo[149193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:54 np0005625201 sudo[149193]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:54 np0005625201 sudo[149249]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-twcpsbzjjydydqkdmpkbsiklhrmdvwwk ; /usr/bin/python3 Feb 20 08:13:54 np0005625201 sudo[149249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:54 np0005625201 sudo[149249]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:54 np0005625201 sshd[149038]: Invalid user orangepi from 185.246.128.171 port 1340 Feb 20 08:13:55 np0005625201 sudo[149311]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fajptllxauhqisesyctflsyvmmzvimsu ; /usr/bin/python3 Feb 20 08:13:55 np0005625201 sudo[149311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:55 np0005625201 sudo[149311]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:55 np0005625201 sudo[149413]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntgxmgamlogidjsflwqytcgvomcouqym ; /usr/bin/python3 Feb 20 08:13:55 np0005625201 sudo[149413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:55 np0005625201 sudo[149413]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:56 np0005625201 sudo[149479]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvupivuebjqrcotxmksmqothtyvpuuuq ; /usr/bin/python3 Feb 20 08:13:56 np0005625201 sudo[149479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:56 np0005625201 sshd[149038]: Disconnecting invalid user orangepi 185.246.128.171 port 1340: Change of username or service not allowed: (orangepi,ssh-connection) -> (jumpserver,ssh-connection) [preauth] Feb 20 08:13:56 np0005625201 sudo[149479]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:56 np0005625201 sudo[149504]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-laqgllmsevhbbbdtbddrvljwxknhgpyn ; /usr/bin/python3 Feb 20 08:13:56 np0005625201 sudo[149504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:56 np0005625201 sudo[149504]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:57 np0005625201 sudo[149702]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yronjbtilicmbowidlxaodqvzpidqwud ; ANSIBLE_ASYNC_DIR=/tmp/.ansible_async /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771575237.0738132-115331-28376338721694/async_wrapper.py 481158707377 3600 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771575237.0738132-115331-28376338721694/AnsiballZ_command.py _ Feb 20 08:13:57 np0005625201 sudo[149702]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 08:13:57 np0005625201 sudo[149702]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:57 np0005625201 sudo[149812]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mxoligjqzmqiluvyxyatubapazezscwp ; /usr/bin/python3 Feb 20 08:13:57 np0005625201 sudo[149812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:13:58 np0005625201 sudo[149812]: pam_unix(sudo:session): session closed for user root Feb 20 08:13:58 np0005625201 runuser[149856]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:13:59 np0005625201 runuser[149856]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:13:59 np0005625201 runuser[149943]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:00 np0005625201 runuser[149943]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:00 np0005625201 runuser[150076]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:01 np0005625201 runuser[150076]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:01 np0005625201 sshd[149829]: Invalid user jumpserver from 185.246.128.171 port 42735 Feb 20 08:14:01 np0005625201 sshd[150212]: Invalid user dixi from 194.87.216.133 port 45618 Feb 20 08:14:01 np0005625201 sshd[150212]: Received disconnect from 194.87.216.133 port 45618:11: Bye Bye [preauth] Feb 20 08:14:01 np0005625201 sshd[150212]: Disconnected from invalid user dixi 194.87.216.133 port 45618 [preauth] Feb 20 08:14:02 np0005625201 sshd[149829]: Disconnecting invalid user jumpserver 185.246.128.171 port 42735: Change of username or service not allowed: (jumpserver,ssh-connection) -> (sybase,ssh-connection) [preauth] Feb 20 08:14:07 np0005625201 sshd[150757]: Invalid user sybase from 185.246.128.171 port 37823 Feb 20 08:14:07 np0005625201 sshd[150757]: Disconnecting invalid user sybase 185.246.128.171 port 37823: Change of username or service not allowed: (sybase,ssh-connection) -> (musicbot,ssh-connection) [preauth] Feb 20 08:14:08 np0005625201 sudo[151214]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pxtueovdzyzguiyzbhuccoypwsfiuozn ; /usr/bin/python3 Feb 20 08:14:08 np0005625201 sudo[151214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:08 np0005625201 sudo[151214]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:08 np0005625201 sshd[151233]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:14:08 np0005625201 sudo[151269]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-otuslmbgsvkrgxmgbnlstqrqerxfryjq ; /usr/bin/python3 Feb 20 08:14:08 np0005625201 sudo[151269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:09 np0005625201 sudo[151269]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:09 np0005625201 sudo[151306]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjuwldlyrdcmielkdlczzjbllfhglffz ; /usr/bin/python3 Feb 20 08:14:09 np0005625201 sudo[151306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:09 np0005625201 sudo[151306]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:09 np0005625201 sudo[151391]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwlubivnzshjbemrjoutcejrhoxuipcv ; /usr/bin/python3 Feb 20 08:14:09 np0005625201 sudo[151391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:09 np0005625201 sudo[151391]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:10 np0005625201 sudo[151437]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mopmhjmtebqneijkshjyvncsvgcretln ; /usr/bin/python3 Feb 20 08:14:10 np0005625201 sudo[151437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:10 np0005625201 sshd[151274]: Invalid user musicbot from 185.246.128.171 port 32805 Feb 20 08:14:10 np0005625201 sudo[151437]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:10 np0005625201 sudo[151483]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cicqhfgfzckjqulvwyfhjogagpigyptw ; /usr/bin/python3 Feb 20 08:14:10 np0005625201 sudo[151483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:10 np0005625201 sudo[151483]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:10 np0005625201 sshd[151274]: Disconnecting invalid user musicbot 185.246.128.171 port 32805: Change of username or service not allowed: (musicbot,ssh-connection) -> (ravi,ssh-connection) [preauth] Feb 20 08:14:10 np0005625201 sudo[151584]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbcwxtbzewctozgpfubzgvzgngwcmvyd ; /usr/bin/python3 Feb 20 08:14:10 np0005625201 sudo[151584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:11 np0005625201 sudo[151584]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:11 np0005625201 sudo[151770]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hdhbtbyxremtrwjissuqkrsvowdkcivw ; /usr/bin/python3 Feb 20 08:14:11 np0005625201 sudo[151770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:11 np0005625201 sudo[151770]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:11 np0005625201 runuser[151790]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:12 np0005625201 sudo[151848]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qdtgdyxcyhnwjyreswpdwfnepysfcwzf ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:12 np0005625201 sudo[151848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:12 np0005625201 sshd[151756]: Invalid user ravi from 185.246.128.171 port 28018 Feb 20 08:14:12 np0005625201 sudo[151848]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:12 np0005625201 runuser[151790]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:12 np0005625201 sshd[151756]: Disconnecting invalid user ravi 185.246.128.171 port 28018: Change of username or service not allowed: (ravi,ssh-connection) -> (lucy,ssh-connection) [preauth] Feb 20 08:14:12 np0005625201 sudo[151929]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymlyvfusgccezxpgtxbzrxcjsyxwabsc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:12 np0005625201 sudo[151929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:12 np0005625201 runuser[151959]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:12 np0005625201 sudo[151929]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:12 np0005625201 sudo[152014]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:14:12 np0005625201 sudo[152014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:14:12 np0005625201 sudo[152014]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:12 np0005625201 sudo[152029]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:14:12 np0005625201 sudo[152029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:14:13 np0005625201 sudo[152111]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cimaqygvycgsftqhovsevfiukdgqyrln ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:13 np0005625201 sudo[152111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:13 np0005625201 sudo[152111]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:13 np0005625201 sshd[151967]: Invalid user ubuntu from 212.233.136.201 port 44990 Feb 20 08:14:13 np0005625201 runuser[151959]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:13 np0005625201 runuser[152204]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:13 np0005625201 sudo[152029]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:13 np0005625201 sshd[151967]: Received disconnect from 212.233.136.201 port 44990:11: Bye Bye [preauth] Feb 20 08:14:13 np0005625201 sshd[151967]: Disconnected from invalid user ubuntu 212.233.136.201 port 44990 [preauth] Feb 20 08:14:13 np0005625201 sudo[152316]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qfthrjlcukemjynevpcgwsfqjshwsfrg ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:13 np0005625201 sudo[152316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:13 np0005625201 sudo[152316]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:13 np0005625201 sudo[152334]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vtzbbdbtileikvuhojmvasdvlpexspnm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:13 np0005625201 sudo[152334]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:14 np0005625201 sudo[152337]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:14:14 np0005625201 sudo[152337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:14:14 np0005625201 sudo[152337]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:14 np0005625201 sudo[152334]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:14 np0005625201 runuser[152204]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:14 np0005625201 sshd[151785]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:14:14 np0005625201 sudo[152438]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zcotbpierdnfiivkuaubezqshaaljqtw ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:14 np0005625201 sudo[152438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:14 np0005625201 sshd[152092]: Invalid user lucy from 185.246.128.171 port 2034 Feb 20 08:14:14 np0005625201 sudo[152438]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:14 np0005625201 sudo[152456]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vtgjdteudqxlxowswwfoksgkpeodtjum ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:14 np0005625201 sudo[152456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:14 np0005625201 sudo[152456]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:15 np0005625201 sudo[152583]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mgvonhuirsaamsswwaztxcxsdnsffjul ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:15 np0005625201 sudo[152583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:15 np0005625201 sudo[152583]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:15 np0005625201 sshd[152092]: Disconnecting invalid user lucy 185.246.128.171 port 2034: Change of username or service not allowed: (lucy,ssh-connection) -> (raj,ssh-connection) [preauth] Feb 20 08:14:15 np0005625201 sudo[152609]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zwzeewufslanxfylkeodcownlqowyqfy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:15 np0005625201 sudo[152609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:15 np0005625201 sudo[152609]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:16 np0005625201 sudo[152725]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bxgexaxkczoiwfvldeikakqqzjtxaicl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:16 np0005625201 sudo[152725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:16 np0005625201 sudo[152725]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:16 np0005625201 sudo[152783]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xdbbxcfcntuvrcahzvzwtmljjmasgogl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:16 np0005625201 sudo[152783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:16 np0005625201 sudo[152783]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:16 np0005625201 sudo[152821]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cyyshkxxfitmamofhbfjumlwwphbgzcc ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:16 np0005625201 sudo[152821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:17 np0005625201 sudo[152821]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:18 np0005625201 sudo[152953]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-easlxlxaxfkkywoljdjcajuvikwwudxv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:18 np0005625201 sudo[152953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:18 np0005625201 sshd[152843]: Invalid user raj from 185.246.128.171 port 36876 Feb 20 08:14:18 np0005625201 sudo[152953]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:18 np0005625201 sudo[152987]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkedybehpklzpuusumsxmibstlogmebj ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:18 np0005625201 sudo[152987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:18 np0005625201 sudo[152987]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:18 np0005625201 sshd[152843]: Disconnecting invalid user raj 185.246.128.171 port 36876: Change of username or service not allowed: (raj,ssh-connection) -> (binance,ssh-connection) [preauth] Feb 20 08:14:19 np0005625201 sudo[153057]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rqflvxezfwsqzqmuvzurxkeatdzdvyvy ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:19 np0005625201 sudo[153057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:19 np0005625201 sudo[153057]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:19 np0005625201 sudo[153083]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oherprjgbpfyourvpgfqbuwobadnrftv ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:19 np0005625201 sudo[153083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:19 np0005625201 sudo[153083]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:19 np0005625201 sudo[153130]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmjvokyfxapmggjomcgxqojknnumqpqd ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:19 np0005625201 sudo[153130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:20 np0005625201 sudo[153130]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:20 np0005625201 sshd[153108]: Invalid user binance from 185.246.128.171 port 35378 Feb 20 08:14:21 np0005625201 sshd[153108]: Disconnecting invalid user binance 185.246.128.171 port 35378: Change of username or service not allowed: (binance,ssh-connection) -> (test5,ssh-connection) [preauth] Feb 20 08:14:21 np0005625201 sudo[153229]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jswxjnbshsnsuqacnzrzofcgxpvoyqvl ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:21 np0005625201 sudo[153229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:21 np0005625201 sudo[153229]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:21 np0005625201 sudo[153261]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iycxtguqilzqsxkjekgjxvtcwlsbgqbn ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:21 np0005625201 sudo[153261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:22 np0005625201 sudo[153261]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:23 np0005625201 sshd[153262]: Invalid user test5 from 185.246.128.171 port 12459 Feb 20 08:14:24 np0005625201 sudo[153498]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qreeoamtwkjwuktpdesrgcplmoyxonii ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:24 np0005625201 sudo[153498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:24 np0005625201 sshd[153262]: Disconnecting invalid user test5 185.246.128.171 port 12459: Change of username or service not allowed: (test5,ssh-connection) -> (prueba,ssh-connection) [preauth] Feb 20 08:14:24 np0005625201 runuser[153572]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:24 np0005625201 sshd[153575]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:14:24 np0005625201 sudo[153626]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:24 np0005625201 sudo[153626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:14:25 np0005625201 sudo[153626]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:25 np0005625201 sshd[153467]: Received disconnect from 111.68.98.152 port 41018:11: Bye Bye [preauth] Feb 20 08:14:25 np0005625201 sshd[153467]: Disconnected from authenticating user root 111.68.98.152 port 41018 [preauth] Feb 20 08:14:25 np0005625201 runuser[153572]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:25 np0005625201 runuser[153862]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:25 np0005625201 sudo[153961]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:25 np0005625201 sudo[153961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:25 np0005625201 sudo[153968]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:25 np0005625201 sudo[153970]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:25 np0005625201 sudo[153970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:25 np0005625201 sudo[153968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:14:25 np0005625201 sudo[153961]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:25 np0005625201 sudo[153970]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:25 np0005625201 sudo[153968]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:26 np0005625201 runuser[153862]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:26 np0005625201 runuser[154206]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:26 np0005625201 sudo[154230]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:26 np0005625201 sudo[154230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:14:26 np0005625201 sudo[154230]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:26 np0005625201 sshd[153628]: Invalid user prueba from 185.246.128.171 port 26002 Feb 20 08:14:27 np0005625201 sudo[153498]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:27 np0005625201 sudo[154347]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cghpkccbmwpevtstgnbnmfxhnabgivpu ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:27 np0005625201 sudo[154347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:27 np0005625201 sudo[154347]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:27 np0005625201 runuser[154206]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:27 np0005625201 sudo[154399]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tnznvfkquuiblufzncumzabkkjsonuez ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:27 np0005625201 sudo[154399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:27 np0005625201 sudo[154399]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:27 np0005625201 sudo[154437]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uvaeujwvkotjlszavsgfdqjehyvufbbq ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:27 np0005625201 sudo[154437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:27 np0005625201 sudo[154437]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:27 np0005625201 sudo[154505]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aiwubduojbdgkeismxqgrufjidzyciot ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:27 np0005625201 sudo[154505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:28 np0005625201 sudo[154505]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:28 np0005625201 sudo[154551]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ddtzdkcxemhmrvdzcgcnsycmlzxpvpkm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:28 np0005625201 sudo[154551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:28 np0005625201 sudo[154551]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:28 np0005625201 sshd[153628]: Disconnecting invalid user prueba 185.246.128.171 port 26002: Change of username or service not allowed: (prueba,ssh-connection) -> (debianuser,ssh-connection) [preauth] Feb 20 08:14:28 np0005625201 sudo[154567]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-farjdxfvizcrcxoxnuhwysjpwkytpjly ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:28 np0005625201 sudo[154567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:28 np0005625201 sudo[154567]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:29 np0005625201 sudo[154644]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oplkxtzrxoddgxlnjczavxerkehwvyfp ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:29 np0005625201 sudo[154644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:29 np0005625201 sudo[154644]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:29 np0005625201 sudo[154683]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tuzurxbyqffbpbroqodevypqvgqcjhva ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:29 np0005625201 sudo[154683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:29 np0005625201 sudo[154683]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:30 np0005625201 sudo[154728]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fjxtdfdhnltbvxffcydfffqcjqcvzxpm ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:30 np0005625201 sudo[154728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:30 np0005625201 sudo[154728]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:30 np0005625201 sudo[154752]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxzeeytnkuvbglqstypvoicnjyhppsaa ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:30 np0005625201 sudo[154752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:31 np0005625201 sudo[154752]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:31 np0005625201 sshd[154647]: Invalid user debianuser from 185.246.128.171 port 1060 Feb 20 08:14:31 np0005625201 sshd[154647]: Disconnecting invalid user debianuser 185.246.128.171 port 1060: Change of username or service not allowed: (debianuser,ssh-connection) -> (antminermonitor,ssh-conne [preauth] Feb 20 08:14:32 np0005625201 sudo[155037]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kjiitgysfvyvykaxgbrjeuzqbklaftfe ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:32 np0005625201 sudo[155037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:33 np0005625201 sudo[155037]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:34 np0005625201 sudo[155373]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smcsxreumcitycfssfmxtcrdepsydqym ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:34 np0005625201 sudo[155373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:34 np0005625201 sshd[155129]: Invalid user antminermonitor from 185.246.128.171 port 25555 Feb 20 08:14:34 np0005625201 sshd[155129]: Disconnecting invalid user antminermonitor 185.246.128.171 port 25555: Change of username or service not allowed: (antminermonitor,ssh-connection) -> (maria,ssh-connection [preauth] Feb 20 08:14:35 np0005625201 sudo[155373]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:36 np0005625201 sudo[155602]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gurstbdjsvpgjweztcwqufscdgwcjoou ; TRIPLEO_MINOR_UPDATE=False /usr/bin/python3 Feb 20 08:14:36 np0005625201 sudo[155602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:36 np0005625201 sshd[155571]: Invalid user maria from 185.246.128.171 port 28817 Feb 20 08:14:36 np0005625201 sshd[155571]: Disconnecting invalid user maria 185.246.128.171 port 28817: Change of username or service not allowed: (maria,ssh-connection) -> (timothy,ssh-connection) [preauth] Feb 20 08:14:37 np0005625201 sudo[155880]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:37 np0005625201 sudo[155880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:37 np0005625201 sudo[155602]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:37 np0005625201 sudo[155880]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:37 np0005625201 sudo[155975]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-joeynhydrnadhdcebjpvtmywyyvinjax ; /usr/bin/python3 Feb 20 08:14:37 np0005625201 sudo[155975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:37 np0005625201 sudo[155975]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:37 np0005625201 sshd[155978]: Invalid user username from 35.188.112.111 port 35350 Feb 20 08:14:37 np0005625201 sshd[155978]: Received disconnect from 35.188.112.111 port 35350:11: Bye Bye [preauth] Feb 20 08:14:37 np0005625201 sshd[155978]: Disconnected from invalid user username 35.188.112.111 port 35350 [preauth] Feb 20 08:14:38 np0005625201 runuser[156052]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:38 np0005625201 sudo[156078]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjyyymqdxduaxvwymclgugdokjuwqdby ; /usr/bin/python3 Feb 20 08:14:38 np0005625201 sudo[156078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:38 np0005625201 sshd[155709]: Invalid user timothy from 185.246.128.171 port 61733 Feb 20 08:14:38 np0005625201 sudo[156078]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:38 np0005625201 sudo[156226]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lmwdzuwwgbeurlbcpkhjaqgoxrlqopch ; /usr/bin/python3 Feb 20 08:14:38 np0005625201 sudo[156226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:38 np0005625201 sudo[156226]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:38 np0005625201 runuser[156052]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:38 np0005625201 sshd[155709]: Disconnecting invalid user timothy 185.246.128.171 port 61733: Change of username or service not allowed: (timothy,ssh-connection) -> (daniel,ssh-connection) [preauth] Feb 20 08:14:38 np0005625201 runuser[156278]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:38 np0005625201 sudo[156324]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lvojjdbismgomfbqxeyvreimdkbazwgg ; /usr/bin/python3 Feb 20 08:14:38 np0005625201 sudo[156324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:39 np0005625201 sudo[156374]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:39 np0005625201 sudo[156374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:39 np0005625201 sudo[156374]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:39 np0005625201 sudo[156324]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:39 np0005625201 runuser[156278]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:39 np0005625201 runuser[156460]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:39 np0005625201 sudo[156457]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cngwsihcbuzdsbtfdazmasslyoerlhsi ; /usr/bin/python3 Feb 20 08:14:39 np0005625201 sudo[156457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:39 np0005625201 sudo[156457]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:39 np0005625201 sudo[156534]: tripleo-admin : PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-upwtjmutajelvacjpiaurqrtlbfyksqr ; /usr/bin/python3 Feb 20 08:14:39 np0005625201 sudo[156534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1003) Feb 20 08:14:40 np0005625201 sudo[156534]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:40 np0005625201 runuser[156460]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:41 np0005625201 sudo[156749]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:41 np0005625201 sudo[156749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:41 np0005625201 sudo[156749]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:43 np0005625201 sudo[157012]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:43 np0005625201 sudo[157012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:43 np0005625201 sudo[157012]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:44 np0005625201 sshd[156742]: Invalid user daniel from 185.246.128.171 port 56498 Feb 20 08:14:44 np0005625201 sshd[156742]: Disconnecting invalid user daniel 185.246.128.171 port 56498: Change of username or service not allowed: (daniel,ssh-connection) -> (manish,ssh-connection) [preauth] Feb 20 08:14:45 np0005625201 sudo[157261]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:45 np0005625201 sudo[157261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:45 np0005625201 sudo[157261]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:46 np0005625201 sshd[157189]: Invalid user manish from 185.246.128.171 port 37849 Feb 20 08:14:46 np0005625201 sshd[157189]: Disconnecting invalid user manish 185.246.128.171 port 37849: Change of username or service not allowed: (manish,ssh-connection) -> (ubnt,ssh-connection) [preauth] Feb 20 08:14:47 np0005625201 sudo[157505]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:47 np0005625201 sudo[157505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:47 np0005625201 sudo[157505]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:48 np0005625201 sshd[157453]: Invalid user ubnt from 185.246.128.171 port 41331 Feb 20 08:14:49 np0005625201 sudo[157662]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:49 np0005625201 sudo[157662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:49 np0005625201 sudo[157662]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:50 np0005625201 runuser[157789]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:51 np0005625201 sudo[157964]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:51 np0005625201 sudo[157964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:51 np0005625201 sudo[157964]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:51 np0005625201 runuser[157789]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:51 np0005625201 runuser[158018]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:52 np0005625201 runuser[158018]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:52 np0005625201 runuser[158094]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:14:53 np0005625201 runuser[158094]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:14:53 np0005625201 sudo[158283]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:53 np0005625201 sudo[158283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:53 np0005625201 sudo[158283]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:53 np0005625201 sshd[157453]: error: maximum authentication attempts exceeded for invalid user ubnt from 185.246.128.171 port 41331 ssh2 [preauth] Feb 20 08:14:53 np0005625201 sshd[157453]: Disconnecting invalid user ubnt 185.246.128.171 port 41331: Too many authentication failures [preauth] Feb 20 08:14:55 np0005625201 sshd[158406]: Invalid user ubnt from 185.246.128.171 port 17890 Feb 20 08:14:55 np0005625201 sudo[158471]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:14:55 np0005625201 sudo[158471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416) Feb 20 08:14:55 np0005625201 sudo[158471]: pam_unix(sudo:session): session closed for user root Feb 20 08:14:55 np0005625201 sshd[30930]: Received disconnect from 192.168.122.100 port 51756:11: disconnected by user Feb 20 08:14:55 np0005625201 sshd[30930]: Disconnected from user zuul 192.168.122.100 port 51756 Feb 20 08:14:55 np0005625201 sshd[30926]: pam_unix(sshd:session): session closed for user zuul Feb 20 08:14:56 np0005625201 sshd[158519]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:14:58 np0005625201 sshd[158406]: Disconnecting invalid user ubnt 185.246.128.171 port 17890: Change of username or service not allowed: (ubnt,ssh-connection) -> (amir,ssh-connection) [preauth] Feb 20 08:15:00 np0005625201 sshd[158838]: Invalid user amir from 185.246.128.171 port 40930 Feb 20 08:15:01 np0005625201 sudo[159034]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Feb 20 08:15:01 np0005625201 systemd[159057]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:15:01 np0005625201 sudo[159034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:15:02 np0005625201 sudo[159034]: pam_unix(sudo:session): session closed for user root Feb 20 08:15:02 np0005625201 sshd[158838]: Disconnecting invalid user amir 185.246.128.171 port 40930: Change of username or service not allowed: (amir,ssh-connection) -> (1111,ssh-connection) [preauth] Feb 20 08:15:04 np0005625201 runuser[159563]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:04 np0005625201 runuser[159563]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:04 np0005625201 runuser[159651]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:05 np0005625201 sshd[159439]: Invalid user 1111 from 185.246.128.171 port 36897 Feb 20 08:15:05 np0005625201 runuser[159651]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:05 np0005625201 runuser[159898]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:06 np0005625201 runuser[159898]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:06 np0005625201 sshd[159439]: Disconnecting invalid user 1111 185.246.128.171 port 36897: Change of username or service not allowed: (1111,ssh-connection) -> (student,ssh-connection) [preauth] Feb 20 08:15:07 np0005625201 sshd[159988]: Invalid user student from 185.246.128.171 port 8217 Feb 20 08:15:08 np0005625201 sshd[159988]: Disconnecting invalid user student 185.246.128.171 port 8217: Change of username or service not allowed: (student,ssh-connection) -> (byte,ssh-connection) [preauth] Feb 20 08:15:10 np0005625201 sshd[160463]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:15:11 np0005625201 sshd[160355]: Invalid user byte from 185.246.128.171 port 40720 Feb 20 08:15:12 np0005625201 sshd[160355]: Disconnecting invalid user byte 185.246.128.171 port 40720: Change of username or service not allowed: (byte,ssh-connection) -> (ftp_test,ssh-connection) [preauth] Feb 20 08:15:14 np0005625201 sudo[160867]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:15:14 np0005625201 sudo[160867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:15:14 np0005625201 sudo[160867]: pam_unix(sudo:session): session closed for user root Feb 20 08:15:14 np0005625201 sudo[160882]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:15:14 np0005625201 sudo[160882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:15:14 np0005625201 sshd[160726]: Invalid user ftp_test from 185.246.128.171 port 7727 Feb 20 08:15:14 np0005625201 sshd[160726]: Disconnecting invalid user ftp_test 185.246.128.171 port 7727: Change of username or service not allowed: (ftp_test,ssh-connection) -> (pa,ssh-connection) [preauth] Feb 20 08:15:15 np0005625201 sudo[160882]: pam_unix(sudo:session): session closed for user root Feb 20 08:15:15 np0005625201 sudo[160962]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:15:15 np0005625201 sudo[160962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:15:15 np0005625201 sudo[160962]: pam_unix(sudo:session): session closed for user root Feb 20 08:15:16 np0005625201 runuser[161070]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:16 np0005625201 sshd[160945]: Invalid user pa from 185.246.128.171 port 13820 Feb 20 08:15:17 np0005625201 sshd[160945]: Disconnecting invalid user pa 185.246.128.171 port 13820: Change of username or service not allowed: (pa,ssh-connection) -> (share,ssh-connection) [preauth] Feb 20 08:15:17 np0005625201 runuser[161070]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:17 np0005625201 runuser[161229]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:18 np0005625201 runuser[161229]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:18 np0005625201 runuser[161319]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:19 np0005625201 sshd[161226]: Invalid user share from 185.246.128.171 port 12107 Feb 20 08:15:19 np0005625201 runuser[161319]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:19 np0005625201 sshd[161226]: Connection closed by invalid user share 185.246.128.171 port 12107 [preauth] Feb 20 08:15:27 np0005625201 sshd[161762]: Received disconnect from 162.19.250.18 port 34286:11: Bye Bye [preauth] Feb 20 08:15:27 np0005625201 sshd[161762]: Disconnected from authenticating user root 162.19.250.18 port 34286 [preauth] Feb 20 08:15:29 np0005625201 runuser[162063]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:30 np0005625201 runuser[162063]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:30 np0005625201 runuser[162140]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:31 np0005625201 runuser[162140]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:31 np0005625201 runuser[162292]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:32 np0005625201 runuser[162292]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:39 np0005625201 sshd[163022]: Invalid user raj from 122.166.49.42 port 37668 Feb 20 08:15:40 np0005625201 sshd[163022]: Received disconnect from 122.166.49.42 port 37668:11: Bye Bye [preauth] Feb 20 08:15:40 np0005625201 sshd[163022]: Disconnected from invalid user raj 122.166.49.42 port 37668 [preauth] Feb 20 08:15:42 np0005625201 sshd[163541]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:15:42 np0005625201 runuser[163564]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:43 np0005625201 runuser[163564]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:43 np0005625201 runuser[163673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:44 np0005625201 runuser[163673]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:44 np0005625201 runuser[163865]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:45 np0005625201 runuser[163865]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:47 np0005625201 sshd[164023]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:15:55 np0005625201 sshd[164651]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:15:55 np0005625201 runuser[164673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:56 np0005625201 runuser[164673]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:56 np0005625201 runuser[164758]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:57 np0005625201 runuser[164758]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:15:57 np0005625201 runuser[164829]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:15:58 np0005625201 runuser[164829]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:08 np0005625201 runuser[165893]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:09 np0005625201 runuser[165893]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:09 np0005625201 runuser[166238]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:10 np0005625201 runuser[166238]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:10 np0005625201 runuser[166329]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:11 np0005625201 runuser[166329]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:15 np0005625201 sudo[166957]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:16:15 np0005625201 sudo[166957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:16:15 np0005625201 sudo[166957]: pam_unix(sudo:session): session closed for user root Feb 20 08:16:16 np0005625201 sudo[166980]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:16:16 np0005625201 sudo[166980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:16:16 np0005625201 sudo[166980]: pam_unix(sudo:session): session closed for user root Feb 20 08:16:17 np0005625201 sudo[167074]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:16:17 np0005625201 sudo[167074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:16:17 np0005625201 sudo[167074]: pam_unix(sudo:session): session closed for user root Feb 20 08:16:21 np0005625201 runuser[167317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:22 np0005625201 runuser[167317]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:22 np0005625201 runuser[167402]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:23 np0005625201 runuser[167402]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:23 np0005625201 runuser[167513]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:24 np0005625201 runuser[167513]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:28 np0005625201 sshd[167771]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:16:29 np0005625201 sshd[167789]: Invalid user socksuser from 103.183.75.204 port 45484 Feb 20 08:16:30 np0005625201 sshd[167789]: Received disconnect from 103.183.75.204 port 45484:11: Bye Bye [preauth] Feb 20 08:16:30 np0005625201 sshd[167789]: Disconnected from invalid user socksuser 103.183.75.204 port 45484 [preauth] Feb 20 08:16:34 np0005625201 runuser[168346]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:35 np0005625201 runuser[168346]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:35 np0005625201 runuser[168540]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:36 np0005625201 runuser[168540]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:36 np0005625201 runuser[168610]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:37 np0005625201 runuser[168610]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:40 np0005625201 sshd[169218]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:16:47 np0005625201 runuser[169733]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:48 np0005625201 runuser[169733]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:48 np0005625201 runuser[169940]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:49 np0005625201 runuser[169940]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:49 np0005625201 runuser[170010]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:16:49 np0005625201 runuser[170010]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:16:52 np0005625201 sshd[170315]: Invalid user test from 194.87.216.133 port 47230 Feb 20 08:16:52 np0005625201 sshd[170315]: Received disconnect from 194.87.216.133 port 47230:11: Bye Bye [preauth] Feb 20 08:16:52 np0005625201 sshd[170315]: Disconnected from invalid user test 194.87.216.133 port 47230 [preauth] Feb 20 08:17:00 np0005625201 runuser[170789]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:01 np0005625201 runuser[170789]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:01 np0005625201 runuser[170874]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:02 np0005625201 runuser[170874]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:02 np0005625201 runuser[170994]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:02 np0005625201 runuser[170994]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:11 np0005625201 sshd[172149]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:17:13 np0005625201 runuser[172254]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:14 np0005625201 runuser[172254]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:14 np0005625201 runuser[172542]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:15 np0005625201 runuser[172542]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:15 np0005625201 runuser[172715]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:15 np0005625201 runuser[172715]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:17 np0005625201 sudo[172849]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:17:17 np0005625201 sudo[172849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:17:17 np0005625201 sudo[172849]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:17 np0005625201 sudo[172864]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:17:17 np0005625201 sudo[172864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:17:18 np0005625201 sudo[172864]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:18 np0005625201 sudo[172938]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:17:18 np0005625201 sudo[172938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:17:18 np0005625201 sudo[172938]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:20 np0005625201 sshd[173114]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:17:24 np0005625201 sshd[173280]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:17:26 np0005625201 runuser[173421]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:27 np0005625201 runuser[173421]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:27 np0005625201 runuser[173506]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:28 np0005625201 runuser[173506]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:28 np0005625201 runuser[173578]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:28 np0005625201 runuser[173578]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:30 np0005625201 sshd[173676]: Accepted publickey for zuul from 192.168.122.100 port 40730 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:17:30 np0005625201 systemd[173679]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:17:30 np0005625201 sshd[173676]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:17:30 np0005625201 sshd[173762]: Invalid user x from 35.188.112.111 port 33300 Feb 20 08:17:30 np0005625201 sshd[173762]: Received disconnect from 35.188.112.111 port 33300:11: Bye Bye [preauth] Feb 20 08:17:30 np0005625201 sshd[173762]: Disconnected from invalid user x 35.188.112.111 port 33300 [preauth] Feb 20 08:17:31 np0005625201 sudo[173889]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bmazvzirqehqojgmrpcbtzmyclmdoixe ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771575450.5233026-42405-49042400147374/AnsiballZ_setup.py Feb 20 08:17:31 np0005625201 sudo[173889]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:17:34 np0005625201 sudo[173889]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:38 np0005625201 sudo[174776]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tdxdynkiqipxjvkdcxedzbxkaatghiew ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771575457.925693-42501-162001019317593/AnsiballZ_dnf.py Feb 20 08:17:38 np0005625201 sudo[174776]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:17:39 np0005625201 runuser[174814]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:40 np0005625201 runuser[174814]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:40 np0005625201 runuser[175063]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:41 np0005625201 runuser[175063]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:41 np0005625201 runuser[175144]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:41 np0005625201 sudo[174776]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:41 np0005625201 runuser[175144]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:46 np0005625201 sudo[176061]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nkwabfpocffabemhdpwrkqaseybtzvyi ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771575465.8381343-42554-170251585871211/AnsiballZ_iptables.py Feb 20 08:17:46 np0005625201 sudo[176061]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:17:46 np0005625201 sudo[176061]: pam_unix(sudo:session): session closed for user root Feb 20 08:17:52 np0005625201 runuser[176563]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:53 np0005625201 runuser[176563]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:53 np0005625201 runuser[176643]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:53 np0005625201 runuser[176643]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:53 np0005625201 runuser[176746]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:17:54 np0005625201 runuser[176746]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:17:56 np0005625201 sshd[176954]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:18:05 np0005625201 runuser[177499]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:05 np0005625201 runuser[177499]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:06 np0005625201 runuser[177655]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:06 np0005625201 runuser[177655]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:06 np0005625201 runuser[177772]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:07 np0005625201 runuser[177772]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:11 np0005625201 sshd[178121]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:18:18 np0005625201 runuser[179052]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:18 np0005625201 runuser[179052]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:19 np0005625201 runuser[179149]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:19 np0005625201 sudo[179129]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:18:19 np0005625201 sudo[179129]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:18:19 np0005625201 sudo[179129]: pam_unix(sudo:session): session closed for user root Feb 20 08:18:19 np0005625201 sudo[179210]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:18:19 np0005625201 sudo[179210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:18:19 np0005625201 runuser[179149]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:19 np0005625201 sudo[179210]: pam_unix(sudo:session): session closed for user root Feb 20 08:18:19 np0005625201 runuser[179291]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:20 np0005625201 sudo[179412]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:18:20 np0005625201 sudo[179412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:18:20 np0005625201 sudo[179412]: pam_unix(sudo:session): session closed for user root Feb 20 08:18:20 np0005625201 runuser[179291]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:22 np0005625201 sshd[179533]: Invalid user ali from 162.19.250.18 port 59602 Feb 20 08:18:23 np0005625201 sshd[179533]: Received disconnect from 162.19.250.18 port 59602:11: Bye Bye [preauth] Feb 20 08:18:23 np0005625201 sshd[179533]: Disconnected from invalid user ali 162.19.250.18 port 59602 [preauth] Feb 20 08:18:31 np0005625201 runuser[179962]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:31 np0005625201 runuser[179962]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:32 np0005625201 runuser[180039]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:32 np0005625201 runuser[180039]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:32 np0005625201 runuser[180175]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:33 np0005625201 runuser[180175]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:36 np0005625201 sshd[180587]: Accepted publickey for zuul from 38.102.83.114 port 35010 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:18:36 np0005625201 sshd[180587]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:18:37 np0005625201 sudo[180658]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gnoasgllbkqsyyfeoksuzjwphtptetpu ; /usr/bin/python3 Feb 20 08:18:37 np0005625201 sudo[180658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 08:18:38 np0005625201 sshd[180698]: Invalid user ftptest from 111.68.98.152 port 43392 Feb 20 08:18:39 np0005625201 sshd[180698]: Received disconnect from 111.68.98.152 port 43392:11: Bye Bye [preauth] Feb 20 08:18:39 np0005625201 sshd[180698]: Disconnected from invalid user ftptest 111.68.98.152 port 43392 [preauth] Feb 20 08:18:42 np0005625201 sshd[181107]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:18:44 np0005625201 runuser[181389]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:44 np0005625201 runuser[181389]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:44 np0005625201 runuser[181618]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:45 np0005625201 runuser[181618]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:45 np0005625201 runuser[181729]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:46 np0005625201 runuser[181729]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:46 np0005625201 sshd[173676]: pam_unix(sshd:session): session closed for user zuul Feb 20 08:18:51 np0005625201 sshd[182246]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:18:54 np0005625201 sudo[180658]: pam_unix(sudo:session): session closed for user root Feb 20 08:18:56 np0005625201 sshd[184130]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:18:56 np0005625201 runuser[184144]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:57 np0005625201 runuser[184144]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:57 np0005625201 runuser[184229]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:58 np0005625201 runuser[184229]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:18:58 np0005625201 runuser[184301]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:18:59 np0005625201 runuser[184301]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:08 np0005625201 sshd[185010]: Invalid user botuser from 212.233.136.201 port 51816 Feb 20 08:19:08 np0005625201 sshd[185010]: Received disconnect from 212.233.136.201 port 51816:11: Bye Bye [preauth] Feb 20 08:19:08 np0005625201 sshd[185010]: Disconnected from invalid user botuser 212.233.136.201 port 51816 [preauth] Feb 20 08:19:09 np0005625201 runuser[185181]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:10 np0005625201 runuser[185181]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:10 np0005625201 runuser[185265]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:11 np0005625201 runuser[185265]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:11 np0005625201 runuser[185328]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:12 np0005625201 runuser[185328]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:15 np0005625201 sudo[186066]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qerdpnehpbualqsmertymdiwftdmsvwr ; /usr/bin/python3 Feb 20 08:19:15 np0005625201 sudo[186066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 08:19:20 np0005625201 sudo[186066]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:20 np0005625201 sudo[186643]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:19:20 np0005625201 sudo[186643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:19:20 np0005625201 sudo[186643]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:20 np0005625201 sudo[186660]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 08:19:20 np0005625201 sudo[186660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:19:22 np0005625201 sudo[186660]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:22 np0005625201 sudo[187008]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:19:22 np0005625201 sudo[187008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:19:22 np0005625201 sudo[187008]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:22 np0005625201 sudo[187023]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:19:22 np0005625201 sudo[187023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:19:22 np0005625201 runuser[187075]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:23 np0005625201 sudo[187023]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:23 np0005625201 runuser[187075]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:23 np0005625201 runuser[187167]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:24 np0005625201 runuser[187167]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:24 np0005625201 runuser[187256]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:24 np0005625201 sudo[187355]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:19:24 np0005625201 sudo[187355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:19:24 np0005625201 sudo[187355]: pam_unix(sudo:session): session closed for user root Feb 20 08:19:25 np0005625201 runuser[187256]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:27 np0005625201 sshd[187443]: Received disconnect from 122.166.49.42 port 43722:11: Bye Bye [preauth] Feb 20 08:19:27 np0005625201 sshd[187443]: Disconnected from authenticating user root 122.166.49.42 port 43722 [preauth] Feb 20 08:19:29 np0005625201 sshd[187577]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:19:35 np0005625201 runuser[187888]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:36 np0005625201 runuser[187888]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:36 np0005625201 runuser[188026]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:37 np0005625201 runuser[188026]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:37 np0005625201 runuser[188221]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:38 np0005625201 runuser[188221]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:43 np0005625201 sshd[188601]: Invalid user x from 194.87.216.133 port 52502 Feb 20 08:19:43 np0005625201 sshd[188601]: Received disconnect from 194.87.216.133 port 52502:11: Bye Bye [preauth] Feb 20 08:19:43 np0005625201 sshd[188601]: Disconnected from invalid user x 194.87.216.133 port 52502 [preauth] Feb 20 08:19:43 np0005625201 sshd[188662]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:19:48 np0005625201 runuser[189536]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:49 np0005625201 runuser[189536]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:49 np0005625201 runuser[189613]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:50 np0005625201 sudo[189723]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qrzaovuzedgyrupudimjozpgvqlsiqzd ; /usr/bin/python3 Feb 20 08:19:50 np0005625201 sudo[189723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 08:19:50 np0005625201 runuser[189613]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:50 np0005625201 runuser[189735]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:19:51 np0005625201 runuser[189735]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:19:57 np0005625201 sudo[189723]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:01 np0005625201 runuser[190741]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:02 np0005625201 runuser[190741]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:02 np0005625201 runuser[190819]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:03 np0005625201 runuser[190819]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:03 np0005625201 runuser[190923]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:04 np0005625201 runuser[190923]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:14 np0005625201 runuser[192053]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:15 np0005625201 runuser[192053]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:15 np0005625201 runuser[192179]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:16 np0005625201 runuser[192179]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:16 np0005625201 runuser[192249]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:17 np0005625201 sshd[192316]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:20:17 np0005625201 runuser[192249]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:19 np0005625201 sshd[192698]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:20:25 np0005625201 sudo[193200]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:20:25 np0005625201 sudo[193200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:20:25 np0005625201 sudo[193200]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:25 np0005625201 sudo[193221]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 08:20:25 np0005625201 sudo[193221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:20:25 np0005625201 sudo[193221]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:25 np0005625201 sudo[193326]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:20:25 np0005625201 sudo[193326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:20:25 np0005625201 sudo[193326]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:26 np0005625201 sudo[193349]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:20:26 np0005625201 sudo[193349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:20:26 np0005625201 sudo[193349]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:27 np0005625201 sudo[193476]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:20:27 np0005625201 sudo[193476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:20:27 np0005625201 sudo[193476]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:28 np0005625201 runuser[193519]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:28 np0005625201 sshd[193393]: Received disconnect from 103.183.75.204 port 37570:11: Bye Bye [preauth] Feb 20 08:20:28 np0005625201 sshd[193393]: Disconnected from authenticating user root 103.183.75.204 port 37570 [preauth] Feb 20 08:20:28 np0005625201 runuser[193519]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:29 np0005625201 runuser[193598]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:29 np0005625201 runuser[193598]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:29 np0005625201 runuser[193672]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:30 np0005625201 runuser[193672]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:31 np0005625201 sshd[193766]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:20:31 np0005625201 sshd[193768]: Invalid user n8n from 35.188.112.111 port 53958 Feb 20 08:20:31 np0005625201 sshd[193768]: Received disconnect from 35.188.112.111 port 53958:11: Bye Bye [preauth] Feb 20 08:20:31 np0005625201 sshd[193768]: Disconnected from invalid user n8n 35.188.112.111 port 53958 [preauth] Feb 20 08:20:41 np0005625201 runuser[194402]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:41 np0005625201 runuser[194402]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:41 np0005625201 sudo[194484]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yarilngvjdcelwwocjydqgrcztzwtptd ; /usr/bin/python3 Feb 20 08:20:41 np0005625201 sudo[194484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 08:20:41 np0005625201 runuser[194538]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:42 np0005625201 runuser[194538]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:42 np0005625201 runuser[194678]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:43 np0005625201 runuser[194678]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:48 np0005625201 sudo[194484]: pam_unix(sudo:session): session closed for user root Feb 20 08:20:53 np0005625201 runuser[196316]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:54 np0005625201 runuser[196316]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:54 np0005625201 runuser[196401]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:55 np0005625201 runuser[196401]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:20:55 np0005625201 runuser[196512]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:20:56 np0005625201 runuser[196512]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:04 np0005625201 sshd[196911]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:21:07 np0005625201 runuser[197090]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:07 np0005625201 runuser[197090]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:07 np0005625201 runuser[197277]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:08 np0005625201 runuser[197277]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:08 np0005625201 runuser[197348]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:09 np0005625201 runuser[197348]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:17 np0005625201 sshd[198292]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:21:20 np0005625201 runuser[198646]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:20 np0005625201 runuser[198646]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:20 np0005625201 runuser[198723]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:21 np0005625201 runuser[198723]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:21 np0005625201 runuser[198971]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:22 np0005625201 runuser[198971]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:25 np0005625201 sshd[199253]: Received disconnect from 162.19.250.18 port 48284:11: Bye Bye [preauth] Feb 20 08:21:25 np0005625201 sshd[199253]: Disconnected from authenticating user root 162.19.250.18 port 48284 [preauth] Feb 20 08:21:27 np0005625201 sudo[199414]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:21:27 np0005625201 sudo[199414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:21:27 np0005625201 sudo[199414]: pam_unix(sudo:session): session closed for user root Feb 20 08:21:27 np0005625201 sudo[199434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:21:27 np0005625201 sudo[199434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:21:28 np0005625201 sudo[199434]: pam_unix(sudo:session): session closed for user root Feb 20 08:21:28 np0005625201 sudo[199561]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:21:28 np0005625201 sudo[199561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:21:28 np0005625201 sudo[199561]: pam_unix(sudo:session): session closed for user root Feb 20 08:21:33 np0005625201 runuser[199742]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:33 np0005625201 runuser[199742]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:33 np0005625201 runuser[199819]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:34 np0005625201 runuser[199819]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:34 np0005625201 runuser[199897]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:35 np0005625201 runuser[199897]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:44 np0005625201 sshd[200643]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:21:46 np0005625201 runuser[200787]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:46 np0005625201 runuser[200787]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:46 np0005625201 runuser[200905]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:47 np0005625201 runuser[200905]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:47 np0005625201 runuser[201146]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:48 np0005625201 runuser[201146]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:49 np0005625201 sshd[201320]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:21:58 np0005625201 runuser[202453]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:21:59 np0005625201 runuser[202453]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:21:59 np0005625201 runuser[202538]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:00 np0005625201 runuser[202538]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:00 np0005625201 runuser[202608]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:00 np0005625201 runuser[202608]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:03 np0005625201 sshd[202733]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:22:11 np0005625201 runuser[203176]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:12 np0005625201 runuser[203176]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:12 np0005625201 runuser[203450]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:13 np0005625201 runuser[203450]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:13 np0005625201 runuser[203518]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:13 np0005625201 runuser[203518]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:22 np0005625201 sshd[180625]: Received disconnect from 38.102.83.114 port 35010:11: disconnected by user Feb 20 08:22:22 np0005625201 sshd[180625]: Disconnected from user zuul 38.102.83.114 port 35010 Feb 20 08:22:22 np0005625201 sshd[180587]: pam_unix(sshd:session): session closed for user zuul Feb 20 08:22:24 np0005625201 runuser[204847]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:25 np0005625201 runuser[204847]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:25 np0005625201 runuser[205050]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:26 np0005625201 runuser[205050]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:26 np0005625201 runuser[205138]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:26 np0005625201 runuser[205138]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:29 np0005625201 sudo[205452]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:22:29 np0005625201 sudo[205452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:22:29 np0005625201 sudo[205452]: pam_unix(sudo:session): session closed for user root Feb 20 08:22:29 np0005625201 sudo[205478]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:22:29 np0005625201 sudo[205478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:22:29 np0005625201 sudo[205478]: pam_unix(sudo:session): session closed for user root Feb 20 08:22:31 np0005625201 sudo[205590]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:22:31 np0005625201 sudo[205590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:22:31 np0005625201 sudo[205590]: pam_unix(sudo:session): session closed for user root Feb 20 08:22:33 np0005625201 sshd[205645]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:22:37 np0005625201 runuser[205869]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:38 np0005625201 runuser[205869]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:38 np0005625201 runuser[205957]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:38 np0005625201 sshd[205947]: Invalid user gbase from 194.87.216.133 port 36298 Feb 20 08:22:38 np0005625201 sshd[205947]: Received disconnect from 194.87.216.133 port 36298:11: Bye Bye [preauth] Feb 20 08:22:38 np0005625201 sshd[205947]: Disconnected from invalid user gbase 194.87.216.133 port 36298 [preauth] Feb 20 08:22:38 np0005625201 runuser[205957]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:38 np0005625201 runuser[206074]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:39 np0005625201 runuser[206074]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:49 np0005625201 sshd[206996]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:22:49 np0005625201 sshd[206832]: Invalid user n8n from 111.68.98.152 port 32934 Feb 20 08:22:49 np0005625201 sshd[206832]: Received disconnect from 111.68.98.152 port 32934:11: Bye Bye [preauth] Feb 20 08:22:49 np0005625201 sshd[206832]: Disconnected from invalid user n8n 111.68.98.152 port 32934 [preauth] Feb 20 08:22:50 np0005625201 runuser[207126]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:51 np0005625201 runuser[207126]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:51 np0005625201 runuser[207247]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:51 np0005625201 runuser[207247]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:22:51 np0005625201 runuser[207325]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:22:52 np0005625201 runuser[207325]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:00 np0005625201 sshd[208455]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:23:03 np0005625201 runuser[208592]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:04 np0005625201 runuser[208592]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:04 np0005625201 runuser[208712]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:04 np0005625201 runuser[208712]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:04 np0005625201 runuser[208766]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:05 np0005625201 runuser[208766]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:16 np0005625201 runuser[209561]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:17 np0005625201 runuser[209561]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:17 np0005625201 runuser[209790]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:17 np0005625201 runuser[209790]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:17 np0005625201 runuser[209912]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:18 np0005625201 runuser[209912]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:18 np0005625201 sshd[209986]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:23:27 np0005625201 sshd[210825]: Received disconnect from 122.166.49.42 port 49778:11: Bye Bye [preauth] Feb 20 08:23:27 np0005625201 sshd[210825]: Disconnected from authenticating user root 122.166.49.42 port 49778 [preauth] Feb 20 08:23:27 np0005625201 sshd[211121]: Invalid user dixi from 35.188.112.111 port 45672 Feb 20 08:23:27 np0005625201 sshd[211121]: Received disconnect from 35.188.112.111 port 45672:11: Bye Bye [preauth] Feb 20 08:23:27 np0005625201 sshd[211121]: Disconnected from invalid user dixi 35.188.112.111 port 45672 [preauth] Feb 20 08:23:29 np0005625201 runuser[211232]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:29 np0005625201 runuser[211232]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:30 np0005625201 runuser[211317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:30 np0005625201 runuser[211317]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:30 np0005625201 runuser[211379]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:31 np0005625201 runuser[211379]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:31 np0005625201 sudo[211479]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:23:31 np0005625201 sudo[211479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:23:31 np0005625201 sudo[211479]: pam_unix(sudo:session): session closed for user root Feb 20 08:23:32 np0005625201 sudo[211503]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:23:32 np0005625201 sudo[211503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:23:32 np0005625201 sudo[211503]: pam_unix(sudo:session): session closed for user root Feb 20 08:23:33 np0005625201 sshd[211575]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:23:33 np0005625201 sudo[211585]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:23:33 np0005625201 sudo[211585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:23:33 np0005625201 sudo[211585]: pam_unix(sudo:session): session closed for user root Feb 20 08:23:42 np0005625201 runuser[212029]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:43 np0005625201 runuser[212029]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:43 np0005625201 runuser[212106]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:44 np0005625201 runuser[212106]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:44 np0005625201 runuser[212168]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:45 np0005625201 runuser[212168]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:55 np0005625201 runuser[213647]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:56 np0005625201 runuser[213647]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:56 np0005625201 runuser[213898]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:57 np0005625201 runuser[213898]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:23:57 np0005625201 runuser[214047]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:23:58 np0005625201 runuser[214047]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:00 np0005625201 sshd[214349]: Invalid user adc from 212.233.136.201 port 58660 Feb 20 08:24:00 np0005625201 sshd[214349]: Received disconnect from 212.233.136.201 port 58660:11: Bye Bye [preauth] Feb 20 08:24:00 np0005625201 sshd[214349]: Disconnected from invalid user adc 212.233.136.201 port 58660 [preauth] Feb 20 08:24:02 np0005625201 sshd[214442]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:24:08 np0005625201 runuser[214714]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:09 np0005625201 runuser[214714]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:09 np0005625201 runuser[214852]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:10 np0005625201 runuser[214852]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:10 np0005625201 runuser[214930]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:11 np0005625201 runuser[214930]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:13 np0005625201 sshd[215036]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:24:16 np0005625201 sshd[215463]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:24:20 np0005625201 sshd[215787]: Received disconnect from 162.19.250.18 port 34770:11: Bye Bye [preauth] Feb 20 08:24:20 np0005625201 sshd[215787]: Disconnected from authenticating user root 162.19.250.18 port 34770 [preauth] Feb 20 08:24:21 np0005625201 runuser[215841]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:22 np0005625201 runuser[215841]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:22 np0005625201 runuser[216104]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:23 np0005625201 runuser[216104]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:23 np0005625201 runuser[216158]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:23 np0005625201 runuser[216158]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:27 np0005625201 sshd[216571]: Received disconnect from 103.183.75.204 port 51908:11: Bye Bye [preauth] Feb 20 08:24:27 np0005625201 sshd[216571]: Disconnected from authenticating user root 103.183.75.204 port 51908 [preauth] Feb 20 08:24:33 np0005625201 sudo[217261]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:24:33 np0005625201 sudo[217261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:24:33 np0005625201 sudo[217261]: pam_unix(sudo:session): session closed for user root Feb 20 08:24:33 np0005625201 sudo[217276]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:24:33 np0005625201 sudo[217276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:24:34 np0005625201 sudo[217276]: pam_unix(sudo:session): session closed for user root Feb 20 08:24:34 np0005625201 runuser[217352]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:34 np0005625201 sudo[217413]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:24:34 np0005625201 sudo[217413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:24:34 np0005625201 sudo[217413]: pam_unix(sudo:session): session closed for user root Feb 20 08:24:35 np0005625201 runuser[217352]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:35 np0005625201 runuser[217452]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:36 np0005625201 runuser[217452]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:36 np0005625201 runuser[217530]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:36 np0005625201 runuser[217530]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:47 np0005625201 runuser[218295]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:48 np0005625201 runuser[218295]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:48 np0005625201 runuser[218434]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:48 np0005625201 sshd[218408]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:24:49 np0005625201 runuser[218434]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:24:49 np0005625201 runuser[218512]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:24:50 np0005625201 runuser[218512]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:00 np0005625201 runuser[220063]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:01 np0005625201 runuser[220063]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:01 np0005625201 sshd[220110]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:25:01 np0005625201 runuser[220134]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:02 np0005625201 runuser[220134]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:02 np0005625201 runuser[220204]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:03 np0005625201 runuser[220204]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:13 np0005625201 runuser[220727]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:14 np0005625201 runuser[220727]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:14 np0005625201 runuser[220812]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:15 np0005625201 runuser[220812]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:15 np0005625201 runuser[221015]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:16 np0005625201 runuser[221015]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:24 np0005625201 sshd[221966]: Invalid user system from 194.87.216.133 port 45280 Feb 20 08:25:24 np0005625201 sshd[221966]: Received disconnect from 194.87.216.133 port 45280:11: Bye Bye [preauth] Feb 20 08:25:24 np0005625201 sshd[221966]: Disconnected from invalid user system 194.87.216.133 port 45280 [preauth] Feb 20 08:25:25 np0005625201 sshd[222000]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:25:26 np0005625201 runuser[222334]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:27 np0005625201 runuser[222334]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:27 np0005625201 runuser[222460]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:28 np0005625201 runuser[222460]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:28 np0005625201 runuser[222579]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:29 np0005625201 runuser[222579]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:34 np0005625201 sshd[223129]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:25:35 np0005625201 sudo[223167]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:25:35 np0005625201 sudo[223167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:25:35 np0005625201 sudo[223167]: pam_unix(sudo:session): session closed for user root Feb 20 08:25:35 np0005625201 sudo[223182]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:25:35 np0005625201 sudo[223182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:25:35 np0005625201 sudo[223182]: pam_unix(sudo:session): session closed for user root Feb 20 08:25:36 np0005625201 sudo[223254]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:25:36 np0005625201 sudo[223254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:25:36 np0005625201 sudo[223254]: pam_unix(sudo:session): session closed for user root Feb 20 08:25:39 np0005625201 runuser[223453]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:40 np0005625201 runuser[223453]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:40 np0005625201 runuser[223579]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:41 np0005625201 runuser[223579]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:41 np0005625201 runuser[223648]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:42 np0005625201 runuser[223648]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:49 np0005625201 sshd[224029]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:25:53 np0005625201 runuser[224553]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:53 np0005625201 runuser[224553]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:54 np0005625201 runuser[224916]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:54 np0005625201 runuser[224916]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:25:54 np0005625201 runuser[224987]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:25:55 np0005625201 runuser[224987]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:06 np0005625201 runuser[226154]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:06 np0005625201 runuser[226154]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:06 np0005625201 runuser[226239]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:07 np0005625201 runuser[226239]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:07 np0005625201 runuser[226301]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:08 np0005625201 runuser[226301]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:18 np0005625201 runuser[226978]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:18 np0005625201 sshd[226964]: Invalid user titu from 35.188.112.111 port 37174 Feb 20 08:26:18 np0005625201 sshd[226964]: Received disconnect from 35.188.112.111 port 37174:11: Bye Bye [preauth] Feb 20 08:26:18 np0005625201 sshd[226964]: Disconnected from invalid user titu 35.188.112.111 port 37174 [preauth] Feb 20 08:26:19 np0005625201 runuser[226978]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:19 np0005625201 runuser[227055]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:20 np0005625201 runuser[227055]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:20 np0005625201 runuser[227334]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:20 np0005625201 sshd[227384]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:26:21 np0005625201 runuser[227334]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:32 np0005625201 runuser[228614]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:32 np0005625201 runuser[228614]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:32 np0005625201 runuser[228699]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:33 np0005625201 runuser[228699]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:33 np0005625201 runuser[228910]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:34 np0005625201 runuser[228910]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:36 np0005625201 sshd[229017]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:26:36 np0005625201 sshd[229039]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:26:36 np0005625201 sudo[229065]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:26:36 np0005625201 sudo[229065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:26:36 np0005625201 sudo[229065]: pam_unix(sudo:session): session closed for user root Feb 20 08:26:36 np0005625201 sudo[229080]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:26:36 np0005625201 sudo[229080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:26:37 np0005625201 sudo[229080]: pam_unix(sudo:session): session closed for user root Feb 20 08:26:37 np0005625201 sudo[229150]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:26:37 np0005625201 sudo[229150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:26:37 np0005625201 sudo[229150]: pam_unix(sudo:session): session closed for user root Feb 20 08:26:45 np0005625201 runuser[229474]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:45 np0005625201 runuser[229474]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:45 np0005625201 runuser[229559]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:46 np0005625201 runuser[229559]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:46 np0005625201 runuser[229621]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:47 np0005625201 runuser[229621]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:56 np0005625201 sshd[230807]: Invalid user n8n from 111.68.98.152 port 36670 Feb 20 08:26:57 np0005625201 sshd[230807]: Received disconnect from 111.68.98.152 port 36670:11: Bye Bye [preauth] Feb 20 08:26:57 np0005625201 sshd[230807]: Disconnected from invalid user n8n 111.68.98.152 port 36670 [preauth] Feb 20 08:26:58 np0005625201 runuser[230952]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:58 np0005625201 runuser[230952]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:58 np0005625201 runuser[231311]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:26:59 np0005625201 runuser[231311]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:26:59 np0005625201 runuser[231389]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:00 np0005625201 runuser[231389]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:07 np0005625201 sshd[232006]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:27:10 np0005625201 runuser[232214]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:11 np0005625201 runuser[232214]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:11 np0005625201 runuser[232345]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:12 np0005625201 runuser[232345]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:12 np0005625201 runuser[232407]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:13 np0005625201 runuser[232407]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:14 np0005625201 sshd[232513]: Accepted publickey for root from 192.168.122.11 port 33186 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:14 np0005625201 systemd[232517]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:14 np0005625201 sshd[232513]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:14 np0005625201 sudo[232541]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api.service Feb 20 08:27:14 np0005625201 sudo[232541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:14 np0005625201 sudo[232541]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:14 np0005625201 sshd[232540]: Received disconnect from 192.168.122.11 port 33186:11: disconnected by user Feb 20 08:27:14 np0005625201 sshd[232540]: Disconnected from user root 192.168.122.11 port 33186 Feb 20 08:27:14 np0005625201 sshd[232513]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:14 np0005625201 sshd[232564]: Accepted publickey for root from 192.168.122.11 port 33192 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:14 np0005625201 sshd[232564]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:15 np0005625201 sudo[232576]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_api.service Feb 20 08:27:15 np0005625201 sudo[232576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:18 np0005625201 sudo[232576]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:18 np0005625201 sshd[232575]: Received disconnect from 192.168.122.11 port 33192:11: disconnected by user Feb 20 08:27:18 np0005625201 sshd[232575]: Disconnected from user root 192.168.122.11 port 33192 Feb 20 08:27:18 np0005625201 sshd[232564]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:20 np0005625201 sshd[232969]: Accepted publickey for root from 192.168.122.11 port 33200 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:20 np0005625201 sshd[232969]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:21 np0005625201 sudo[232981]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api_cron.service Feb 20 08:27:21 np0005625201 sudo[232981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:21 np0005625201 sudo[232981]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:21 np0005625201 sshd[232980]: Received disconnect from 192.168.122.11 port 33200:11: disconnected by user Feb 20 08:27:21 np0005625201 sshd[232980]: Disconnected from user root 192.168.122.11 port 33200 Feb 20 08:27:21 np0005625201 sshd[232969]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:21 np0005625201 sshd[233004]: Accepted publickey for root from 192.168.122.11 port 33204 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:21 np0005625201 sshd[233004]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:21 np0005625201 sudo[233008]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_api_cron.service Feb 20 08:27:21 np0005625201 sudo[233008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:21 np0005625201 sudo[233008]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:21 np0005625201 sshd[233007]: Received disconnect from 192.168.122.11 port 33204:11: disconnected by user Feb 20 08:27:22 np0005625201 sshd[233007]: Disconnected from user root 192.168.122.11 port 33204 Feb 20 08:27:22 np0005625201 sshd[233004]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:22 np0005625201 sshd[233297]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:27:23 np0005625201 runuser[233337]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:24 np0005625201 sshd[233323]: Received disconnect from 162.19.250.18 port 42660:11: Bye Bye [preauth] Feb 20 08:27:24 np0005625201 sshd[233323]: Disconnected from authenticating user root 162.19.250.18 port 42660 [preauth] Feb 20 08:27:24 np0005625201 runuser[233337]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:24 np0005625201 runuser[233530]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:24 np0005625201 sshd[233539]: Accepted publickey for root from 192.168.122.11 port 38770 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:24 np0005625201 sshd[233539]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:24 np0005625201 sudo[233587]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_evaluator.service Feb 20 08:27:24 np0005625201 sudo[233587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:24 np0005625201 sudo[233587]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:24 np0005625201 sshd[233582]: Received disconnect from 192.168.122.11 port 38770:11: disconnected by user Feb 20 08:27:24 np0005625201 sshd[233582]: Disconnected from user root 192.168.122.11 port 38770 Feb 20 08:27:24 np0005625201 sshd[233539]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:25 np0005625201 sshd[233617]: Accepted publickey for root from 192.168.122.11 port 38774 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:25 np0005625201 sshd[233617]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:25 np0005625201 sudo[233717]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_evaluator.service Feb 20 08:27:25 np0005625201 sudo[233717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:25 np0005625201 runuser[233530]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:25 np0005625201 runuser[233847]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:26 np0005625201 sudo[233717]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:26 np0005625201 sshd[233683]: Received disconnect from 192.168.122.11 port 38774:11: disconnected by user Feb 20 08:27:26 np0005625201 sshd[233683]: Disconnected from user root 192.168.122.11 port 38774 Feb 20 08:27:26 np0005625201 sshd[233617]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:26 np0005625201 runuser[233847]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:28 np0005625201 sshd[233935]: Received disconnect from 122.166.49.42 port 55838:11: Bye Bye [preauth] Feb 20 08:27:28 np0005625201 sshd[233935]: Disconnected from authenticating user root 122.166.49.42 port 55838 [preauth] Feb 20 08:27:37 np0005625201 runuser[234986]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:37 np0005625201 runuser[234986]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:38 np0005625201 runuser[235071]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:38 np0005625201 sudo[235138]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:27:38 np0005625201 sudo[235138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:27:38 np0005625201 sudo[235138]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:38 np0005625201 sudo[235160]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:27:38 np0005625201 sudo[235160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:27:38 np0005625201 runuser[235071]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:38 np0005625201 runuser[235244]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:39 np0005625201 sudo[235160]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:39 np0005625201 runuser[235244]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:39 np0005625201 sudo[235391]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:27:39 np0005625201 sudo[235391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:27:39 np0005625201 sudo[235391]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:41 np0005625201 sshd[235465]: Accepted publickey for root from 192.168.122.11 port 40662 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:42 np0005625201 systemd[235520]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:42 np0005625201 sshd[235465]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:42 np0005625201 sudo[235536]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_listener.service Feb 20 08:27:42 np0005625201 sudo[235536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:42 np0005625201 sudo[235536]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:42 np0005625201 sshd[235535]: Received disconnect from 192.168.122.11 port 40662:11: disconnected by user Feb 20 08:27:42 np0005625201 sshd[235535]: Disconnected from user root 192.168.122.11 port 40662 Feb 20 08:27:42 np0005625201 sshd[235465]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:42 np0005625201 sshd[235551]: Accepted publickey for root from 192.168.122.11 port 60194 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:27:42 np0005625201 sshd[235551]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:42 np0005625201 sudo[235579]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_listener.service Feb 20 08:27:42 np0005625201 sudo[235579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:27:43 np0005625201 sudo[235579]: pam_unix(sudo:session): session closed for user root Feb 20 08:27:43 np0005625201 sshd[235578]: Received disconnect from 192.168.122.11 port 60194:11: disconnected by user Feb 20 08:27:43 np0005625201 sshd[235578]: Disconnected from user root 192.168.122.11 port 60194 Feb 20 08:27:43 np0005625201 sshd[235551]: pam_unix(sshd:session): session closed for user root Feb 20 08:27:48 np0005625201 sshd[235765]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:27:49 np0005625201 runuser[235961]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:50 np0005625201 runuser[235961]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:50 np0005625201 runuser[236046]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:51 np0005625201 runuser[236046]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:51 np0005625201 runuser[236108]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:27:52 np0005625201 runuser[236108]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:27:53 np0005625201 sshd[236381]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:28:03 np0005625201 runuser[237470]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:03 np0005625201 runuser[237470]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:04 np0005625201 runuser[237558]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:04 np0005625201 runuser[237558]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:04 np0005625201 runuser[237812]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:05 np0005625201 runuser[237812]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:08 np0005625201 sshd[238094]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:28:11 np0005625201 sshd[238295]: Accepted publickey for root from 192.168.122.11 port 56790 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:28:12 np0005625201 systemd[238299]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:12 np0005625201 sshd[238295]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:12 np0005625201 sudo[238371]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_notifier.service Feb 20 08:28:12 np0005625201 sudo[238371]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:12 np0005625201 sudo[238371]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:12 np0005625201 sshd[238370]: Received disconnect from 192.168.122.11 port 56790:11: disconnected by user Feb 20 08:28:12 np0005625201 sshd[238370]: Disconnected from user root 192.168.122.11 port 56790 Feb 20 08:28:12 np0005625201 sshd[238295]: pam_unix(sshd:session): session closed for user root Feb 20 08:28:12 np0005625201 sshd[238393]: Accepted publickey for root from 192.168.122.11 port 47164 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:28:12 np0005625201 sshd[238393]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:12 np0005625201 sudo[238414]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_notifier.service Feb 20 08:28:12 np0005625201 sudo[238414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:14 np0005625201 sshd[238471]: Invalid user titu from 194.87.216.133 port 35804 Feb 20 08:28:14 np0005625201 sshd[238471]: Received disconnect from 194.87.216.133 port 35804:11: Bye Bye [preauth] Feb 20 08:28:14 np0005625201 sshd[238471]: Disconnected from invalid user titu 194.87.216.133 port 35804 [preauth] Feb 20 08:28:16 np0005625201 runuser[238583]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:16 np0005625201 runuser[238583]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:17 np0005625201 runuser[238668]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:17 np0005625201 runuser[238668]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:17 np0005625201 runuser[238746]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:18 np0005625201 runuser[238746]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:29 np0005625201 runuser[239800]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:29 np0005625201 runuser[239800]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:29 np0005625201 runuser[239861]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:30 np0005625201 runuser[239861]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:30 np0005625201 runuser[239939]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:31 np0005625201 runuser[239939]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:32 np0005625201 sshd[240300]: Invalid user x from 103.183.75.204 port 40976 Feb 20 08:28:32 np0005625201 sshd[240300]: Received disconnect from 103.183.75.204 port 40976:11: Bye Bye [preauth] Feb 20 08:28:32 np0005625201 sshd[240300]: Disconnected from invalid user x 103.183.75.204 port 40976 [preauth] Feb 20 08:28:38 np0005625201 sshd[240833]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:28:39 np0005625201 sudo[240962]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:28:39 np0005625201 sudo[240962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:28:39 np0005625201 sudo[240962]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:40 np0005625201 sudo[240977]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:28:40 np0005625201 sudo[240977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:28:40 np0005625201 sudo[240977]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:41 np0005625201 sudo[241050]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:28:41 np0005625201 sudo[241050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:28:41 np0005625201 sudo[241050]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:41 np0005625201 sudo[238414]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:41 np0005625201 sshd[238413]: Received disconnect from 192.168.122.11 port 47164:11: disconnected by user Feb 20 08:28:41 np0005625201 sshd[238413]: Disconnected from user root 192.168.122.11 port 47164 Feb 20 08:28:41 np0005625201 sshd[238393]: pam_unix(sshd:session): session closed for user root Feb 20 08:28:41 np0005625201 runuser[241121]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:42 np0005625201 runuser[241121]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:42 np0005625201 runuser[241259]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:43 np0005625201 runuser[241259]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:43 np0005625201 runuser[241313]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:44 np0005625201 runuser[241313]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:44 np0005625201 sshd[241419]: Accepted publickey for root from 192.168.122.11 port 59912 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:28:45 np0005625201 sshd[241419]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:45 np0005625201 sudo[241423]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_central.service Feb 20 08:28:45 np0005625201 sudo[241423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:45 np0005625201 sudo[241423]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:45 np0005625201 sshd[241422]: Received disconnect from 192.168.122.11 port 59912:11: disconnected by user Feb 20 08:28:45 np0005625201 sshd[241422]: Disconnected from user root 192.168.122.11 port 59912 Feb 20 08:28:45 np0005625201 sshd[241419]: pam_unix(sshd:session): session closed for user root Feb 20 08:28:45 np0005625201 sshd[241438]: Accepted publickey for root from 192.168.122.11 port 59926 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:28:45 np0005625201 sshd[241438]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:45 np0005625201 sudo[241442]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ceilometer_agent_central.service Feb 20 08:28:45 np0005625201 sudo[241442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:28:46 np0005625201 sudo[241442]: pam_unix(sudo:session): session closed for user root Feb 20 08:28:46 np0005625201 sshd[241441]: Received disconnect from 192.168.122.11 port 59926:11: disconnected by user Feb 20 08:28:46 np0005625201 sshd[241441]: Disconnected from user root 192.168.122.11 port 59926 Feb 20 08:28:46 np0005625201 sshd[241438]: pam_unix(sshd:session): session closed for user root Feb 20 08:28:50 np0005625201 sshd[241746]: Invalid user hello from 212.233.136.201 port 37308 Feb 20 08:28:51 np0005625201 sshd[241746]: Received disconnect from 212.233.136.201 port 37308:11: Bye Bye [preauth] Feb 20 08:28:51 np0005625201 sshd[241746]: Disconnected from invalid user hello 212.233.136.201 port 37308 [preauth] Feb 20 08:28:53 np0005625201 sshd[241900]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:28:54 np0005625201 runuser[242154]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:55 np0005625201 runuser[242154]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:55 np0005625201 runuser[242346]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:56 np0005625201 runuser[242346]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:28:56 np0005625201 runuser[242425]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:28:57 np0005625201 runuser[242425]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:00 np0005625201 sshd[242841]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:29:08 np0005625201 runuser[243758]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:08 np0005625201 sshd[243819]: Received disconnect from 35.188.112.111 port 39354:11: Bye Bye [preauth] Feb 20 08:29:08 np0005625201 sshd[243819]: Disconnected from authenticating user root 35.188.112.111 port 39354 [preauth] Feb 20 08:29:08 np0005625201 runuser[243758]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:08 np0005625201 runuser[243847]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:09 np0005625201 runuser[243847]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:09 np0005625201 runuser[244006]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:10 np0005625201 runuser[244006]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:21 np0005625201 runuser[244567]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:21 np0005625201 runuser[244567]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:21 np0005625201 runuser[244694]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:21 np0005625201 sshd[244692]: Accepted publickey for root from 192.168.122.11 port 36194 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:22 np0005625201 systemd[244721]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:22 np0005625201 sshd[244692]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:22 np0005625201 sudo[244765]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_notification.service Feb 20 08:29:22 np0005625201 sudo[244765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:22 np0005625201 sudo[244765]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:22 np0005625201 sshd[244764]: Received disconnect from 192.168.122.11 port 36194:11: disconnected by user Feb 20 08:29:22 np0005625201 sshd[244764]: Disconnected from user root 192.168.122.11 port 36194 Feb 20 08:29:22 np0005625201 sshd[244692]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:22 np0005625201 sshd[244780]: Accepted publickey for root from 192.168.122.11 port 39878 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:22 np0005625201 sshd[244780]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:22 np0005625201 runuser[244694]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:22 np0005625201 runuser[244793]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:22 np0005625201 sudo[244796]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ceilometer_agent_notification.service Feb 20 08:29:22 np0005625201 sudo[244796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:23 np0005625201 runuser[244793]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:24 np0005625201 sshd[244972]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:29:34 np0005625201 runuser[245970]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:34 np0005625201 sudo[244796]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:34 np0005625201 sshd[244788]: Received disconnect from 192.168.122.11 port 39878:11: disconnected by user Feb 20 08:29:34 np0005625201 sshd[244788]: Disconnected from user root 192.168.122.11 port 39878 Feb 20 08:29:34 np0005625201 sshd[244780]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:34 np0005625201 runuser[245970]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:35 np0005625201 runuser[246078]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:35 np0005625201 runuser[246078]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:35 np0005625201 runuser[246152]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:36 np0005625201 sshd[246199]: Accepted publickey for root from 192.168.122.11 port 52008 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:36 np0005625201 sshd[246199]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:36 np0005625201 sudo[246330]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_api.service Feb 20 08:29:36 np0005625201 sudo[246330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:36 np0005625201 sudo[246330]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:36 np0005625201 sshd[246297]: Received disconnect from 192.168.122.11 port 52008:11: disconnected by user Feb 20 08:29:36 np0005625201 sshd[246297]: Disconnected from user root 192.168.122.11 port 52008 Feb 20 08:29:36 np0005625201 sshd[246199]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:36 np0005625201 sshd[246362]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:29:36 np0005625201 runuser[246152]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:37 np0005625201 sshd[246418]: Accepted publickey for root from 192.168.122.11 port 52010 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:37 np0005625201 sshd[246418]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:37 np0005625201 sudo[246430]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_health_manager.service Feb 20 08:29:37 np0005625201 sudo[246430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:37 np0005625201 sudo[246430]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:37 np0005625201 sshd[246421]: Received disconnect from 192.168.122.11 port 52010:11: disconnected by user Feb 20 08:29:37 np0005625201 sshd[246421]: Disconnected from user root 192.168.122.11 port 52010 Feb 20 08:29:37 np0005625201 sshd[246418]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:38 np0005625201 sshd[246586]: Accepted publickey for root from 192.168.122.11 port 52016 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:38 np0005625201 sshd[246586]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:38 np0005625201 sudo[246606]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_rsyslog.service Feb 20 08:29:38 np0005625201 sudo[246606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:38 np0005625201 sudo[246606]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:38 np0005625201 sshd[246605]: Received disconnect from 192.168.122.11 port 52016:11: disconnected by user Feb 20 08:29:38 np0005625201 sshd[246605]: Disconnected from user root 192.168.122.11 port 52016 Feb 20 08:29:38 np0005625201 sshd[246586]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:38 np0005625201 sshd[246647]: Accepted publickey for root from 192.168.122.11 port 52020 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:39 np0005625201 sshd[246647]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:39 np0005625201 sudo[246651]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_driver_agent.service Feb 20 08:29:39 np0005625201 sudo[246651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:39 np0005625201 sudo[246651]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:39 np0005625201 sshd[246650]: Received disconnect from 192.168.122.11 port 52020:11: disconnected by user Feb 20 08:29:39 np0005625201 sshd[246650]: Disconnected from user root 192.168.122.11 port 52020 Feb 20 08:29:39 np0005625201 sshd[246647]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:39 np0005625201 sshd[246772]: Accepted publickey for root from 192.168.122.11 port 52030 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:39 np0005625201 sshd[246772]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:40 np0005625201 sudo[246776]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_housekeeping.service Feb 20 08:29:40 np0005625201 sudo[246776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:40 np0005625201 sudo[246776]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:40 np0005625201 sshd[246775]: Received disconnect from 192.168.122.11 port 52030:11: disconnected by user Feb 20 08:29:40 np0005625201 sshd[246775]: Disconnected from user root 192.168.122.11 port 52030 Feb 20 08:29:40 np0005625201 sshd[246772]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:40 np0005625201 sshd[246815]: Accepted publickey for root from 192.168.122.11 port 52042 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:40 np0005625201 sshd[246815]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:41 np0005625201 sudo[246829]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_worker.service Feb 20 08:29:41 np0005625201 sudo[246829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:41 np0005625201 sudo[246829]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:41 np0005625201 sshd[246824]: Received disconnect from 192.168.122.11 port 52042:11: disconnected by user Feb 20 08:29:41 np0005625201 sshd[246824]: Disconnected from user root 192.168.122.11 port 52042 Feb 20 08:29:41 np0005625201 sshd[246815]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:41 np0005625201 sudo[246869]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:29:41 np0005625201 sudo[246869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:29:41 np0005625201 sudo[246869]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:41 np0005625201 sudo[246884]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 08:29:41 np0005625201 sudo[246884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:29:41 np0005625201 sshd[246907]: Accepted publickey for root from 192.168.122.11 port 52046 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:41 np0005625201 sshd[246907]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:42 np0005625201 sudo[246934]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_api.service Feb 20 08:29:42 np0005625201 sudo[246934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:42 np0005625201 sudo[246934]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:42 np0005625201 sshd[246923]: Received disconnect from 192.168.122.11 port 52046:11: disconnected by user Feb 20 08:29:42 np0005625201 sshd[246923]: Disconnected from user root 192.168.122.11 port 52046 Feb 20 08:29:42 np0005625201 sshd[246907]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:42 np0005625201 sshd[247043]: Accepted publickey for root from 192.168.122.11 port 52542 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:42 np0005625201 sshd[247043]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:43 np0005625201 sudo[247080]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_backend_bind9.service Feb 20 08:29:43 np0005625201 sudo[247080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:43 np0005625201 sudo[247080]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:43 np0005625201 sshd[247076]: Received disconnect from 192.168.122.11 port 52542:11: disconnected by user Feb 20 08:29:43 np0005625201 sshd[247076]: Disconnected from user root 192.168.122.11 port 52542 Feb 20 08:29:43 np0005625201 sshd[247043]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:43 np0005625201 sudo[246884]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:43 np0005625201 sudo[247181]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:29:43 np0005625201 sudo[247181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:29:43 np0005625201 sudo[247181]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:43 np0005625201 sudo[247212]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:29:43 np0005625201 sudo[247212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:29:43 np0005625201 sshd[247235]: Accepted publickey for root from 192.168.122.11 port 52554 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:43 np0005625201 sshd[247235]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:44 np0005625201 sudo[247255]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_central.service Feb 20 08:29:44 np0005625201 sudo[247255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:44 np0005625201 sudo[247255]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:44 np0005625201 sshd[247252]: Received disconnect from 192.168.122.11 port 52554:11: disconnected by user Feb 20 08:29:44 np0005625201 sshd[247252]: Disconnected from user root 192.168.122.11 port 52554 Feb 20 08:29:44 np0005625201 sshd[247235]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:44 np0005625201 sudo[247212]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:44 np0005625201 sshd[247310]: Accepted publickey for root from 192.168.122.11 port 52568 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:44 np0005625201 sshd[247310]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:45 np0005625201 sudo[247315]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_mdns.service Feb 20 08:29:45 np0005625201 sudo[247315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:45 np0005625201 sudo[247315]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:45 np0005625201 sshd[247314]: Received disconnect from 192.168.122.11 port 52568:11: disconnected by user Feb 20 08:29:45 np0005625201 sshd[247314]: Disconnected from user root 192.168.122.11 port 52568 Feb 20 08:29:45 np0005625201 sshd[247310]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:45 np0005625201 sudo[247330]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:29:45 np0005625201 sudo[247330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:29:45 np0005625201 sudo[247330]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:45 np0005625201 sshd[247361]: Accepted publickey for root from 192.168.122.11 port 52578 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:45 np0005625201 sshd[247361]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:46 np0005625201 sudo[247373]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_producer.service Feb 20 08:29:46 np0005625201 sudo[247373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:46 np0005625201 sudo[247373]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:46 np0005625201 sshd[247372]: Received disconnect from 192.168.122.11 port 52578:11: disconnected by user Feb 20 08:29:46 np0005625201 sshd[247372]: Disconnected from user root 192.168.122.11 port 52578 Feb 20 08:29:46 np0005625201 sshd[247361]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:47 np0005625201 sshd[247412]: Accepted publickey for root from 192.168.122.11 port 52580 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:47 np0005625201 sshd[247412]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:47 np0005625201 sudo[247416]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_designate_worker.service Feb 20 08:29:47 np0005625201 sudo[247416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:47 np0005625201 sudo[247416]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:47 np0005625201 sshd[247415]: Received disconnect from 192.168.122.11 port 52580:11: disconnected by user Feb 20 08:29:47 np0005625201 sshd[247415]: Disconnected from user root 192.168.122.11 port 52580 Feb 20 08:29:47 np0005625201 sshd[247412]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:47 np0005625201 runuser[247435]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:48 np0005625201 sshd[247504]: Accepted publickey for root from 192.168.122.11 port 52586 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:48 np0005625201 sshd[247504]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:48 np0005625201 sudo[247512]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_unbound.service Feb 20 08:29:48 np0005625201 sudo[247512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:48 np0005625201 runuser[247435]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:48 np0005625201 sudo[247512]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:48 np0005625201 sshd[247509]: Received disconnect from 192.168.122.11 port 52586:11: disconnected by user Feb 20 08:29:48 np0005625201 sshd[247509]: Disconnected from user root 192.168.122.11 port 52586 Feb 20 08:29:48 np0005625201 sshd[247504]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:48 np0005625201 runuser[247539]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:49 np0005625201 runuser[247539]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:49 np0005625201 runuser[247619]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:29:50 np0005625201 runuser[247619]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:29:57 np0005625201 sshd[248341]: Accepted publickey for root from 192.168.122.11 port 34432 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:57 np0005625201 sshd[248341]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:57 np0005625201 sudo[248414]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_horizon.service Feb 20 08:29:57 np0005625201 sudo[248414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:57 np0005625201 sudo[248414]: pam_unix(sudo:session): session closed for user root Feb 20 08:29:57 np0005625201 sshd[248398]: Received disconnect from 192.168.122.11 port 34432:11: disconnected by user Feb 20 08:29:57 np0005625201 sshd[248398]: Disconnected from user root 192.168.122.11 port 34432 Feb 20 08:29:57 np0005625201 sshd[248341]: pam_unix(sshd:session): session closed for user root Feb 20 08:29:57 np0005625201 sshd[248442]: Accepted publickey for root from 192.168.122.11 port 34434 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:29:57 np0005625201 sshd[248442]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:29:57 np0005625201 sudo[248459]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_horizon.service Feb 20 08:29:57 np0005625201 sudo[248459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:00 np0005625201 runuser[248842]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:01 np0005625201 sudo[248459]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:01 np0005625201 sshd[248458]: Received disconnect from 192.168.122.11 port 34434:11: disconnected by user Feb 20 08:30:01 np0005625201 sshd[248458]: Disconnected from user root 192.168.122.11 port 34434 Feb 20 08:30:01 np0005625201 sshd[248442]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:01 np0005625201 runuser[248842]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:01 np0005625201 runuser[248944]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:02 np0005625201 runuser[248944]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:02 np0005625201 runuser[249040]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:03 np0005625201 runuser[249040]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:07 np0005625201 sshd[249751]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:30:09 np0005625201 sshd[249853]: Accepted publickey for root from 192.168.122.11 port 56630 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:09 np0005625201 sshd[249853]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:09 np0005625201 sudo[249896]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_keystone.service Feb 20 08:30:09 np0005625201 sudo[249896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:09 np0005625201 sudo[249896]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:09 np0005625201 sshd[249888]: Received disconnect from 192.168.122.11 port 56630:11: disconnected by user Feb 20 08:30:09 np0005625201 sshd[249888]: Disconnected from user root 192.168.122.11 port 56630 Feb 20 08:30:09 np0005625201 sshd[249853]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:09 np0005625201 sshd[249920]: Accepted publickey for root from 192.168.122.11 port 56636 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:09 np0005625201 sshd[249920]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:09 np0005625201 sudo[249932]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_keystone.service Feb 20 08:30:09 np0005625201 sudo[249932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:09 np0005625201 sshd[249864]: Invalid user user1 from 162.19.250.18 port 55558 Feb 20 08:30:09 np0005625201 sshd[249864]: Received disconnect from 162.19.250.18 port 55558:11: Bye Bye [preauth] Feb 20 08:30:09 np0005625201 sshd[249864]: Disconnected from invalid user user1 162.19.250.18 port 55558 [preauth] Feb 20 08:30:11 np0005625201 sshd[250082]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:30:13 np0005625201 sudo[249932]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:13 np0005625201 sshd[249923]: Received disconnect from 192.168.122.11 port 56636:11: disconnected by user Feb 20 08:30:13 np0005625201 sshd[249923]: Disconnected from user root 192.168.122.11 port 56636 Feb 20 08:30:13 np0005625201 sshd[249920]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:13 np0005625201 sshd[250235]: Accepted publickey for root from 192.168.122.11 port 37262 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:13 np0005625201 sshd[250235]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:14 np0005625201 sudo[250239]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_api.service Feb 20 08:30:14 np0005625201 sudo[250239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:14 np0005625201 sudo[250239]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:14 np0005625201 sshd[250238]: Received disconnect from 192.168.122.11 port 37262:11: disconnected by user Feb 20 08:30:14 np0005625201 sshd[250238]: Disconnected from user root 192.168.122.11 port 37262 Feb 20 08:30:14 np0005625201 sshd[250235]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:14 np0005625201 runuser[250258]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:14 np0005625201 runuser[250258]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:14 np0005625201 sshd[250327]: Accepted publickey for root from 192.168.122.11 port 37274 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:14 np0005625201 sshd[250327]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:14 np0005625201 sudo[250347]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_worker.service Feb 20 08:30:14 np0005625201 sudo[250347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:14 np0005625201 sudo[250347]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:15 np0005625201 runuser[250361]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:15 np0005625201 sshd[250346]: Received disconnect from 192.168.122.11 port 37274:11: disconnected by user Feb 20 08:30:15 np0005625201 sshd[250346]: Disconnected from user root 192.168.122.11 port 37274 Feb 20 08:30:15 np0005625201 sshd[250327]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:15 np0005625201 runuser[250361]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:15 np0005625201 runuser[250432]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:15 np0005625201 sshd[250447]: Accepted publickey for root from 192.168.122.11 port 37284 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:15 np0005625201 sshd[250447]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:15 np0005625201 sudo[250491]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_keystone_listener.service Feb 20 08:30:15 np0005625201 sudo[250491]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:15 np0005625201 sudo[250491]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:15 np0005625201 sshd[250490]: Received disconnect from 192.168.122.11 port 37284:11: disconnected by user Feb 20 08:30:15 np0005625201 sshd[250490]: Disconnected from user root 192.168.122.11 port 37284 Feb 20 08:30:15 np0005625201 sshd[250447]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:16 np0005625201 runuser[250432]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:22 np0005625201 sshd[250807]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:30:24 np0005625201 sshd[250976]: Accepted publickey for root from 192.168.122.11 port 53484 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:24 np0005625201 sshd[250976]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:24 np0005625201 sudo[250980]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_api.service Feb 20 08:30:24 np0005625201 sudo[250980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:24 np0005625201 sudo[250980]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:24 np0005625201 sshd[250979]: Received disconnect from 192.168.122.11 port 53484:11: disconnected by user Feb 20 08:30:24 np0005625201 sshd[250979]: Disconnected from user root 192.168.122.11 port 53484 Feb 20 08:30:24 np0005625201 sshd[250976]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:24 np0005625201 sshd[250995]: Accepted publickey for root from 192.168.122.11 port 53496 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:24 np0005625201 sshd[250995]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:24 np0005625201 sudo[251039]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_api.service Feb 20 08:30:24 np0005625201 sudo[251039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:26 np0005625201 runuser[251148]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:27 np0005625201 runuser[251148]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:27 np0005625201 runuser[251295]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:28 np0005625201 sudo[251039]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:28 np0005625201 sshd[251026]: Received disconnect from 192.168.122.11 port 53496:11: disconnected by user Feb 20 08:30:28 np0005625201 sshd[251026]: Disconnected from user root 192.168.122.11 port 53496 Feb 20 08:30:28 np0005625201 sshd[250995]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:28 np0005625201 runuser[251295]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:28 np0005625201 runuser[251396]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:29 np0005625201 runuser[251396]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:30 np0005625201 sshd[251719]: Accepted publickey for root from 192.168.122.11 port 53504 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:30 np0005625201 sshd[251719]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:30 np0005625201 sudo[251776]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_api_cron.service Feb 20 08:30:30 np0005625201 sudo[251776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:30 np0005625201 sudo[251776]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:30 np0005625201 sshd[251775]: Received disconnect from 192.168.122.11 port 53504:11: disconnected by user Feb 20 08:30:30 np0005625201 sshd[251775]: Disconnected from user root 192.168.122.11 port 53504 Feb 20 08:30:30 np0005625201 sshd[251719]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:30 np0005625201 sshd[251791]: Accepted publickey for root from 192.168.122.11 port 53512 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:30 np0005625201 sshd[251791]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:30 np0005625201 sudo[251811]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_api_cron.service Feb 20 08:30:30 np0005625201 sudo[251811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:31 np0005625201 sudo[251811]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:31 np0005625201 sshd[251802]: Received disconnect from 192.168.122.11 port 53512:11: disconnected by user Feb 20 08:30:31 np0005625201 sshd[251802]: Disconnected from user root 192.168.122.11 port 53512 Feb 20 08:30:31 np0005625201 sshd[251791]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:35 np0005625201 sshd[252364]: Accepted publickey for root from 192.168.122.11 port 54058 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:35 np0005625201 sshd[252364]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:35 np0005625201 sudo[252376]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_scheduler.service Feb 20 08:30:35 np0005625201 sudo[252376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:35 np0005625201 sudo[252376]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:35 np0005625201 sshd[252375]: Received disconnect from 192.168.122.11 port 54058:11: disconnected by user Feb 20 08:30:35 np0005625201 sshd[252375]: Disconnected from user root 192.168.122.11 port 54058 Feb 20 08:30:35 np0005625201 sshd[252364]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:35 np0005625201 sshd[252391]: Accepted publickey for root from 192.168.122.11 port 54062 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:35 np0005625201 sshd[252391]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:35 np0005625201 sudo[252395]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_scheduler.service Feb 20 08:30:35 np0005625201 sudo[252395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:39 np0005625201 sudo[252395]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:39 np0005625201 sshd[252394]: Received disconnect from 192.168.122.11 port 54062:11: disconnected by user Feb 20 08:30:39 np0005625201 sshd[252394]: Disconnected from user root 192.168.122.11 port 54062 Feb 20 08:30:39 np0005625201 sshd[252391]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:39 np0005625201 runuser[252821]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:39 np0005625201 sshd[252824]: Accepted publickey for root from 192.168.122.11 port 54066 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:40 np0005625201 sshd[252824]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:40 np0005625201 sudo[252931]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_volume.service Feb 20 08:30:40 np0005625201 sudo[252931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:40 np0005625201 sudo[252931]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:40 np0005625201 sshd[252916]: Received disconnect from 192.168.122.11 port 54066:11: disconnected by user Feb 20 08:30:40 np0005625201 sshd[252916]: Disconnected from user root 192.168.122.11 port 54066 Feb 20 08:30:40 np0005625201 sshd[252824]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:40 np0005625201 runuser[252821]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:40 np0005625201 runuser[252995]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:40 np0005625201 sshd[253012]: Accepted publickey for root from 192.168.122.11 port 54080 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:30:40 np0005625201 sshd[253012]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:41 np0005625201 sudo[253044]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_backup.service Feb 20 08:30:41 np0005625201 sudo[253044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:30:41 np0005625201 sudo[253044]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:41 np0005625201 sshd[253043]: Received disconnect from 192.168.122.11 port 54080:11: disconnected by user Feb 20 08:30:41 np0005625201 sshd[253043]: Disconnected from user root 192.168.122.11 port 54080 Feb 20 08:30:41 np0005625201 sshd[253012]: pam_unix(sshd:session): session closed for user root Feb 20 08:30:41 np0005625201 runuser[252995]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:41 np0005625201 runuser[253092]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:42 np0005625201 runuser[253092]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:45 np0005625201 sudo[253317]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:30:45 np0005625201 sudo[253317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:30:45 np0005625201 sudo[253317]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:45 np0005625201 sudo[253333]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 08:30:45 np0005625201 sudo[253333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:30:46 np0005625201 sudo[253333]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:46 np0005625201 sudo[253369]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:30:46 np0005625201 sudo[253369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:30:46 np0005625201 sudo[253369]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:46 np0005625201 sudo[253392]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:30:46 np0005625201 sudo[253392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:30:46 np0005625201 sudo[253392]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:47 np0005625201 sudo[253464]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:30:47 np0005625201 sudo[253464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:30:47 np0005625201 sudo[253464]: pam_unix(sudo:session): session closed for user root Feb 20 08:30:52 np0005625201 sshd[253652]: Invalid user httpd from 111.68.98.152 port 41050 Feb 20 08:30:52 np0005625201 sshd[253652]: Received disconnect from 111.68.98.152 port 41050:11: Bye Bye [preauth] Feb 20 08:30:52 np0005625201 sshd[253652]: Disconnected from invalid user httpd 111.68.98.152 port 41050 [preauth] Feb 20 08:30:52 np0005625201 sshd[253771]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:30:53 np0005625201 runuser[253808]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:53 np0005625201 runuser[253808]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:53 np0005625201 runuser[253924]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:54 np0005625201 runuser[253924]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:30:54 np0005625201 runuser[254100]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:30:55 np0005625201 runuser[254100]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:05 np0005625201 runuser[255178]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:06 np0005625201 runuser[255178]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:06 np0005625201 runuser[255255]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:07 np0005625201 runuser[255255]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:07 np0005625201 runuser[255325]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:08 np0005625201 runuser[255325]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:09 np0005625201 sshd[255483]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:31:19 np0005625201 runuser[256137]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:19 np0005625201 runuser[256137]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:20 np0005625201 runuser[256214]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:20 np0005625201 runuser[256214]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:20 np0005625201 runuser[256442]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:21 np0005625201 runuser[256442]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:22 np0005625201 sshd[256535]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:31:32 np0005625201 sshd[257008]: Invalid user n8n from 122.166.49.42 port 33660 Feb 20 08:31:32 np0005625201 runuser[257117]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:32 np0005625201 sshd[257008]: Received disconnect from 122.166.49.42 port 33660:11: Bye Bye [preauth] Feb 20 08:31:32 np0005625201 sshd[257008]: Disconnected from invalid user n8n 122.166.49.42 port 33660 [preauth] Feb 20 08:31:32 np0005625201 runuser[257117]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:32 np0005625201 runuser[257312]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:33 np0005625201 runuser[257312]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:33 np0005625201 runuser[257382]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:34 np0005625201 runuser[257382]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:37 np0005625201 sshd[257863]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:31:44 np0005625201 runuser[258468]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:45 np0005625201 runuser[258468]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:45 np0005625201 runuser[258545]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:46 np0005625201 runuser[258545]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:46 np0005625201 runuser[258615]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:47 np0005625201 runuser[258615]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:47 np0005625201 sudo[258706]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:31:47 np0005625201 sudo[258706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:31:47 np0005625201 sudo[258706]: pam_unix(sudo:session): session closed for user root Feb 20 08:31:47 np0005625201 sudo[258721]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:31:47 np0005625201 sudo[258721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:31:48 np0005625201 sudo[258721]: pam_unix(sudo:session): session closed for user root Feb 20 08:31:48 np0005625201 sudo[258801]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:31:48 np0005625201 sudo[258801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:31:48 np0005625201 sudo[258801]: pam_unix(sudo:session): session closed for user root Feb 20 08:31:56 np0005625201 sshd[259363]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:31:57 np0005625201 runuser[259429]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:58 np0005625201 runuser[259429]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:58 np0005625201 runuser[259506]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:31:59 np0005625201 runuser[259506]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:31:59 np0005625201 runuser[259586]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:00 np0005625201 runuser[259586]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:07 np0005625201 sshd[260574]: Accepted publickey for root from 192.168.122.11 port 41852 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:08 np0005625201 systemd[260578]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:08 np0005625201 sshd[260574]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:08 np0005625201 sudo[260602]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_collectd.service Feb 20 08:32:08 np0005625201 sudo[260602]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:08 np0005625201 sudo[260602]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:08 np0005625201 sshd[260601]: Received disconnect from 192.168.122.11 port 41852:11: disconnected by user Feb 20 08:32:08 np0005625201 sshd[260601]: Disconnected from user root 192.168.122.11 port 41852 Feb 20 08:32:08 np0005625201 sshd[260574]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:08 np0005625201 sshd[260617]: Accepted publickey for root from 192.168.122.11 port 41866 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:08 np0005625201 sshd[260617]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:08 np0005625201 sudo[260629]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_collectd.service Feb 20 08:32:08 np0005625201 sudo[260629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:09 np0005625201 sudo[260629]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:09 np0005625201 sshd[260628]: Received disconnect from 192.168.122.11 port 41866:11: disconnected by user Feb 20 08:32:09 np0005625201 sshd[260628]: Disconnected from user root 192.168.122.11 port 41866 Feb 20 08:32:09 np0005625201 sshd[260617]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:11 np0005625201 runuser[260960]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:11 np0005625201 runuser[260960]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:12 np0005625201 runuser[261130]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:12 np0005625201 sshd[261147]: Accepted publickey for root from 192.168.122.11 port 41868 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:12 np0005625201 sshd[261147]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:12 np0005625201 sudo[261186]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_glance_api.service Feb 20 08:32:12 np0005625201 sudo[261186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:12 np0005625201 sudo[261186]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:12 np0005625201 sshd[261178]: Received disconnect from 192.168.122.11 port 41868:11: disconnected by user Feb 20 08:32:12 np0005625201 sshd[261178]: Disconnected from user root 192.168.122.11 port 41868 Feb 20 08:32:12 np0005625201 sshd[261147]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:12 np0005625201 sshd[261202]: Accepted publickey for root from 192.168.122.11 port 51564 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:12 np0005625201 sshd[261202]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:12 np0005625201 sudo[261220]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_glance_api.service Feb 20 08:32:12 np0005625201 sudo[261220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:12 np0005625201 runuser[261130]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:12 np0005625201 runuser[261277]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:13 np0005625201 sudo[261220]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:13 np0005625201 sshd[261206]: Received disconnect from 192.168.122.11 port 51564:11: disconnected by user Feb 20 08:32:13 np0005625201 sshd[261206]: Disconnected from user root 192.168.122.11 port 51564 Feb 20 08:32:13 np0005625201 sshd[261202]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:13 np0005625201 runuser[261277]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:21 np0005625201 sshd[261787]: Accepted publickey for root from 192.168.122.11 port 51574 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:21 np0005625201 sshd[261787]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:22 np0005625201 sudo[261798]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_api.service Feb 20 08:32:22 np0005625201 sudo[261798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:22 np0005625201 sudo[261798]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:22 np0005625201 sshd[261790]: Received disconnect from 192.168.122.11 port 51574:11: disconnected by user Feb 20 08:32:22 np0005625201 sshd[261790]: Disconnected from user root 192.168.122.11 port 51574 Feb 20 08:32:22 np0005625201 sshd[261787]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:22 np0005625201 sshd[261814]: Accepted publickey for root from 192.168.122.11 port 51578 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:22 np0005625201 sshd[261814]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:22 np0005625201 sudo[261826]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_gnocchi_api.service Feb 20 08:32:22 np0005625201 sudo[261826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:22 np0005625201 sshd[261867]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:32:24 np0005625201 runuser[261943]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:24 np0005625201 runuser[261943]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:25 np0005625201 runuser[262107]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:25 np0005625201 sudo[261826]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:25 np0005625201 sshd[261825]: Received disconnect from 192.168.122.11 port 51578:11: disconnected by user Feb 20 08:32:25 np0005625201 sshd[261825]: Disconnected from user root 192.168.122.11 port 51578 Feb 20 08:32:25 np0005625201 sshd[261814]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:25 np0005625201 runuser[262107]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:25 np0005625201 runuser[262201]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:26 np0005625201 runuser[262201]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:28 np0005625201 sshd[262315]: Accepted publickey for root from 192.168.122.11 port 45190 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:28 np0005625201 sshd[262315]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:28 np0005625201 sudo[262327]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_metricd.service Feb 20 08:32:28 np0005625201 sudo[262327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:28 np0005625201 sudo[262327]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:28 np0005625201 sshd[262326]: Received disconnect from 192.168.122.11 port 45190:11: disconnected by user Feb 20 08:32:28 np0005625201 sshd[262326]: Disconnected from user root 192.168.122.11 port 45190 Feb 20 08:32:28 np0005625201 sshd[262315]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:28 np0005625201 sshd[262342]: Accepted publickey for root from 192.168.122.11 port 45202 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:28 np0005625201 sshd[262342]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:28 np0005625201 sudo[262354]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_gnocchi_metricd.service Feb 20 08:32:28 np0005625201 sudo[262354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:29 np0005625201 sudo[262354]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:29 np0005625201 sshd[262353]: Received disconnect from 192.168.122.11 port 45202:11: disconnected by user Feb 20 08:32:29 np0005625201 sshd[262353]: Disconnected from user root 192.168.122.11 port 45202 Feb 20 08:32:29 np0005625201 sshd[262342]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:31 np0005625201 sshd[262545]: Accepted publickey for root from 192.168.122.11 port 45204 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:31 np0005625201 sshd[262545]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:31 np0005625201 sudo[262577]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_statsd.service Feb 20 08:32:31 np0005625201 sudo[262577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:31 np0005625201 sudo[262577]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:31 np0005625201 sshd[262569]: Received disconnect from 192.168.122.11 port 45204:11: disconnected by user Feb 20 08:32:31 np0005625201 sshd[262569]: Disconnected from user root 192.168.122.11 port 45204 Feb 20 08:32:31 np0005625201 sshd[262545]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:33 np0005625201 sshd[262648]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:32:35 np0005625201 sshd[262622]: Invalid user user from 103.183.75.204 port 60732 Feb 20 08:32:35 np0005625201 sshd[262622]: Received disconnect from 103.183.75.204 port 60732:11: Bye Bye [preauth] Feb 20 08:32:35 np0005625201 sshd[262622]: Disconnected from invalid user user 103.183.75.204 port 60732 [preauth] Feb 20 08:32:37 np0005625201 runuser[263025]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:38 np0005625201 runuser[263025]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:38 np0005625201 runuser[263279]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:38 np0005625201 runuser[263279]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:38 np0005625201 runuser[263438]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:39 np0005625201 sshd[263495]: Accepted publickey for root from 192.168.122.11 port 58882 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:39 np0005625201 sshd[263495]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:39 np0005625201 sudo[263511]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_api.service Feb 20 08:32:39 np0005625201 sudo[263511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:39 np0005625201 sudo[263511]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:39 np0005625201 sshd[263503]: Received disconnect from 192.168.122.11 port 58882:11: disconnected by user Feb 20 08:32:39 np0005625201 sshd[263503]: Disconnected from user root 192.168.122.11 port 58882 Feb 20 08:32:39 np0005625201 sshd[263495]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:39 np0005625201 runuser[263438]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:39 np0005625201 sshd[263529]: Accepted publickey for root from 192.168.122.11 port 58884 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:39 np0005625201 sshd[263529]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:39 np0005625201 sudo[263544]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_api.service Feb 20 08:32:39 np0005625201 sudo[263544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:43 np0005625201 sudo[263544]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:43 np0005625201 sshd[263543]: Received disconnect from 192.168.122.11 port 58884:11: disconnected by user Feb 20 08:32:43 np0005625201 sshd[263543]: Disconnected from user root 192.168.122.11 port 58884 Feb 20 08:32:43 np0005625201 sshd[263529]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:43 np0005625201 sshd[263980]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:32:45 np0005625201 sshd[264091]: Accepted publickey for root from 192.168.122.11 port 47980 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:45 np0005625201 sshd[264091]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:46 np0005625201 sudo[264115]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_api_cron.service Feb 20 08:32:46 np0005625201 sudo[264115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:46 np0005625201 sudo[264115]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:46 np0005625201 sshd[264103]: Received disconnect from 192.168.122.11 port 47980:11: disconnected by user Feb 20 08:32:46 np0005625201 sshd[264103]: Disconnected from user root 192.168.122.11 port 47980 Feb 20 08:32:46 np0005625201 sshd[264091]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:46 np0005625201 sshd[264137]: Accepted publickey for root from 192.168.122.11 port 47994 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:32:46 np0005625201 sshd[264137]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:46 np0005625201 sudo[264149]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_api_cron.service Feb 20 08:32:46 np0005625201 sudo[264149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:32:46 np0005625201 sudo[264149]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:46 np0005625201 sshd[264148]: Received disconnect from 192.168.122.11 port 47994:11: disconnected by user Feb 20 08:32:46 np0005625201 sshd[264148]: Disconnected from user root 192.168.122.11 port 47994 Feb 20 08:32:46 np0005625201 sshd[264137]: pam_unix(sshd:session): session closed for user root Feb 20 08:32:49 np0005625201 sudo[264269]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:32:49 np0005625201 sudo[264269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:32:49 np0005625201 sudo[264269]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:49 np0005625201 sudo[264291]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:32:49 np0005625201 sudo[264291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:32:50 np0005625201 sudo[264291]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:50 np0005625201 runuser[264360]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:50 np0005625201 runuser[264360]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:51 np0005625201 runuser[264578]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:51 np0005625201 runuser[264578]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:32:51 np0005625201 runuser[264647]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:32:51 np0005625201 sudo[264657]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:32:51 np0005625201 sudo[264657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:32:51 np0005625201 sudo[264657]: pam_unix(sudo:session): session closed for user root Feb 20 08:32:52 np0005625201 runuser[264647]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:03 np0005625201 runuser[265377]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:03 np0005625201 runuser[265377]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:04 np0005625201 runuser[265462]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:04 np0005625201 runuser[265462]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:04 np0005625201 runuser[265532]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:05 np0005625201 runuser[265532]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:08 np0005625201 sshd[265945]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:33:12 np0005625201 sshd[266395]: Accepted publickey for root from 192.168.122.11 port 47614 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:33:12 np0005625201 systemd[266441]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:12 np0005625201 sshd[266395]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:12 np0005625201 sudo[266581]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_scheduler.service Feb 20 08:33:12 np0005625201 sudo[266581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:12 np0005625201 sudo[266581]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:12 np0005625201 sshd[266572]: Received disconnect from 192.168.122.11 port 47614:11: disconnected by user Feb 20 08:33:12 np0005625201 sshd[266572]: Disconnected from user root 192.168.122.11 port 47614 Feb 20 08:33:12 np0005625201 sshd[266395]: pam_unix(sshd:session): session closed for user root Feb 20 08:33:13 np0005625201 sshd[266600]: Accepted publickey for root from 192.168.122.11 port 47624 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:33:13 np0005625201 sshd[266600]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:13 np0005625201 sudo[266625]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_scheduler.service Feb 20 08:33:13 np0005625201 sudo[266625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:15 np0005625201 sudo[266625]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:15 np0005625201 sshd[266621]: Received disconnect from 192.168.122.11 port 47624:11: disconnected by user Feb 20 08:33:15 np0005625201 sshd[266621]: Disconnected from user root 192.168.122.11 port 47624 Feb 20 08:33:15 np0005625201 sshd[266600]: pam_unix(sshd:session): session closed for user root Feb 20 08:33:16 np0005625201 runuser[266846]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:16 np0005625201 runuser[266846]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:17 np0005625201 runuser[266931]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:17 np0005625201 runuser[266931]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:17 np0005625201 runuser[267085]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:18 np0005625201 runuser[267085]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:29 np0005625201 runuser[267596]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:29 np0005625201 runuser[267596]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:30 np0005625201 runuser[267673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:30 np0005625201 runuser[267673]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:30 np0005625201 runuser[267751]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:31 np0005625201 sshd[267798]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:33:31 np0005625201 runuser[267751]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:41 np0005625201 sshd[268805]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:33:42 np0005625201 runuser[268827]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:42 np0005625201 runuser[268827]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:43 np0005625201 runuser[268982]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:43 np0005625201 runuser[268982]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:43 np0005625201 runuser[269137]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:44 np0005625201 runuser[269137]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:47 np0005625201 sshd[269378]: Invalid user cacti from 212.233.136.201 port 44184 Feb 20 08:33:47 np0005625201 sshd[269378]: Received disconnect from 212.233.136.201 port 44184:11: Bye Bye [preauth] Feb 20 08:33:47 np0005625201 sshd[269378]: Disconnected from invalid user cacti 212.233.136.201 port 44184 [preauth] Feb 20 08:33:51 np0005625201 sshd[269603]: Accepted publickey for root from 192.168.122.11 port 52264 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:33:51 np0005625201 systemd[269607]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:52 np0005625201 sshd[269603]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:52 np0005625201 sudo[269623]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_neutron_api.service Feb 20 08:33:52 np0005625201 sudo[269623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:52 np0005625201 sudo[269623]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:52 np0005625201 sshd[269622]: Received disconnect from 192.168.122.11 port 52264:11: disconnected by user Feb 20 08:33:52 np0005625201 sshd[269622]: Disconnected from user root 192.168.122.11 port 52264 Feb 20 08:33:52 np0005625201 sshd[269603]: pam_unix(sshd:session): session closed for user root Feb 20 08:33:52 np0005625201 sudo[269636]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:33:52 np0005625201 sudo[269636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:33:52 np0005625201 sudo[269636]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:52 np0005625201 sudo[269663]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:33:52 np0005625201 sudo[269663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:33:52 np0005625201 sshd[269655]: Accepted publickey for root from 192.168.122.11 port 44672 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:33:52 np0005625201 sshd[269655]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:52 np0005625201 sudo[269688]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_neutron_api.service Feb 20 08:33:52 np0005625201 sudo[269688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:33:53 np0005625201 sudo[269663]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:53 np0005625201 sudo[269806]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:33:53 np0005625201 sudo[269806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:33:53 np0005625201 sudo[269806]: pam_unix(sudo:session): session closed for user root Feb 20 08:33:54 np0005625201 sshd[269829]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:33:55 np0005625201 runuser[269951]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:55 np0005625201 runuser[269951]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:55 np0005625201 runuser[270139]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:56 np0005625201 runuser[270139]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:33:56 np0005625201 runuser[270238]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:33:57 np0005625201 runuser[270238]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:08 np0005625201 runuser[270906]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:08 np0005625201 runuser[270906]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:08 np0005625201 runuser[271008]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:09 np0005625201 runuser[271008]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:09 np0005625201 runuser[271072]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:10 np0005625201 runuser[271072]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:16 np0005625201 sshd[271881]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:34:21 np0005625201 runuser[272090]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:21 np0005625201 runuser[272090]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:21 np0005625201 sudo[269688]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:21 np0005625201 sshd[269687]: Received disconnect from 192.168.122.11 port 44672:11: disconnected by user Feb 20 08:34:21 np0005625201 sshd[269687]: Disconnected from user root 192.168.122.11 port 44672 Feb 20 08:34:21 np0005625201 sshd[269655]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:21 np0005625201 runuser[272344]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:22 np0005625201 runuser[272344]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:22 np0005625201 runuser[272422]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:23 np0005625201 runuser[272422]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:31 np0005625201 sshd[272772]: Accepted publickey for root from 192.168.122.11 port 35506 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:31 np0005625201 sshd[272772]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:31 np0005625201 sudo[272808]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_placement_api.service Feb 20 08:34:31 np0005625201 sudo[272808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:31 np0005625201 sudo[272808]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:31 np0005625201 sshd[272776]: Received disconnect from 192.168.122.11 port 35506:11: disconnected by user Feb 20 08:34:31 np0005625201 sshd[272776]: Disconnected from user root 192.168.122.11 port 35506 Feb 20 08:34:31 np0005625201 sshd[272772]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:31 np0005625201 sshd[272840]: Accepted publickey for root from 192.168.122.11 port 35512 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:31 np0005625201 sshd[272840]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:31 np0005625201 sudo[272893]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_placement_api.service Feb 20 08:34:31 np0005625201 sudo[272893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:34 np0005625201 runuser[272988]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:34 np0005625201 runuser[272988]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:34 np0005625201 runuser[273112]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:35 np0005625201 sudo[272893]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:35 np0005625201 sshd[272892]: Received disconnect from 192.168.122.11 port 35512:11: disconnected by user Feb 20 08:34:35 np0005625201 sshd[272892]: Disconnected from user root 192.168.122.11 port 35512 Feb 20 08:34:35 np0005625201 sshd[272840]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:35 np0005625201 runuser[273112]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:35 np0005625201 runuser[273199]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:36 np0005625201 runuser[273199]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:37 np0005625201 sshd[273465]: Accepted publickey for root from 192.168.122.11 port 59016 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:37 np0005625201 sshd[273465]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:37 np0005625201 sudo[273473]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_api_cron.service Feb 20 08:34:37 np0005625201 sudo[273473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:37 np0005625201 sudo[273473]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:37 np0005625201 sshd[273472]: Received disconnect from 192.168.122.11 port 59016:11: disconnected by user Feb 20 08:34:37 np0005625201 sshd[273472]: Disconnected from user root 192.168.122.11 port 59016 Feb 20 08:34:37 np0005625201 sshd[273465]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:37 np0005625201 sshd[273488]: Accepted publickey for root from 192.168.122.11 port 59024 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:37 np0005625201 sshd[273488]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:37 np0005625201 sudo[273508]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_api_cron.service Feb 20 08:34:37 np0005625201 sudo[273508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:38 np0005625201 sudo[273508]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:38 np0005625201 sshd[273505]: Received disconnect from 192.168.122.11 port 59024:11: disconnected by user Feb 20 08:34:38 np0005625201 sshd[273505]: Disconnected from user root 192.168.122.11 port 59024 Feb 20 08:34:38 np0005625201 sshd[273488]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:39 np0005625201 sshd[273607]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:34:46 np0005625201 sshd[274312]: Accepted publickey for root from 192.168.122.11 port 44738 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:46 np0005625201 sshd[274312]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:46 np0005625201 sudo[274357]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_api.service Feb 20 08:34:46 np0005625201 sudo[274357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:46 np0005625201 sudo[274357]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:46 np0005625201 sshd[274356]: Received disconnect from 192.168.122.11 port 44738:11: disconnected by user Feb 20 08:34:46 np0005625201 sshd[274356]: Disconnected from user root 192.168.122.11 port 44738 Feb 20 08:34:46 np0005625201 sshd[274312]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:47 np0005625201 runuser[274386]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:47 np0005625201 sshd[274380]: Accepted publickey for root from 192.168.122.11 port 44742 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:47 np0005625201 sshd[274380]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:47 np0005625201 sudo[274441]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_api.service Feb 20 08:34:47 np0005625201 sudo[274441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:47 np0005625201 runuser[274386]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:47 np0005625201 runuser[274493]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:48 np0005625201 runuser[274493]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:48 np0005625201 runuser[274590]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:34:49 np0005625201 runuser[274590]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:34:50 np0005625201 sudo[274441]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:50 np0005625201 sshd[274439]: Received disconnect from 192.168.122.11 port 44742:11: disconnected by user Feb 20 08:34:50 np0005625201 sshd[274439]: Disconnected from user root 192.168.122.11 port 44742 Feb 20 08:34:50 np0005625201 sshd[274380]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:53 np0005625201 sudo[274916]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:34:53 np0005625201 sudo[274916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:34:53 np0005625201 sudo[274916]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:53 np0005625201 sudo[274931]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:34:53 np0005625201 sudo[274931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:34:54 np0005625201 sudo[274931]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:55 np0005625201 sudo[275068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:34:55 np0005625201 sudo[275068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:34:55 np0005625201 sudo[275068]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:56 np0005625201 sshd[275198]: Accepted publickey for root from 192.168.122.11 port 44678 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:56 np0005625201 sshd[275198]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:56 np0005625201 sudo[275214]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_conductor.service Feb 20 08:34:56 np0005625201 sudo[275214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:56 np0005625201 sudo[275214]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:56 np0005625201 sshd[275208]: Received disconnect from 192.168.122.11 port 44678:11: disconnected by user Feb 20 08:34:56 np0005625201 sshd[275208]: Disconnected from user root 192.168.122.11 port 44678 Feb 20 08:34:56 np0005625201 sshd[275198]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:56 np0005625201 sshd[275284]: Accepted publickey for root from 192.168.122.11 port 44688 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:34:56 np0005625201 sshd[275284]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:57 np0005625201 sudo[275314]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_conductor.service Feb 20 08:34:57 np0005625201 sudo[275314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:34:58 np0005625201 sudo[275314]: pam_unix(sudo:session): session closed for user root Feb 20 08:34:58 np0005625201 sshd[275313]: Received disconnect from 192.168.122.11 port 44688:11: disconnected by user Feb 20 08:34:58 np0005625201 sshd[275313]: Disconnected from user root 192.168.122.11 port 44688 Feb 20 08:34:58 np0005625201 sshd[275284]: pam_unix(sshd:session): session closed for user root Feb 20 08:34:59 np0005625201 runuser[275452]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:00 np0005625201 sshd[275446]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:35:00 np0005625201 sshd[275418]: Received disconnect from 111.68.98.152 port 38050:11: Bye Bye [preauth] Feb 20 08:35:00 np0005625201 sshd[275418]: Disconnected from authenticating user root 111.68.98.152 port 38050 [preauth] Feb 20 08:35:00 np0005625201 runuser[275452]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:00 np0005625201 runuser[275537]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:01 np0005625201 runuser[275537]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:01 np0005625201 runuser[275599]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:02 np0005625201 runuser[275599]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:05 np0005625201 sshd[275827]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:35:06 np0005625201 sshd[275946]: Accepted publickey for root from 192.168.122.11 port 36378 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:06 np0005625201 sshd[275946]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:06 np0005625201 sudo[276042]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_metadata.service Feb 20 08:35:06 np0005625201 sudo[276042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:06 np0005625201 sudo[276042]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:06 np0005625201 sshd[276018]: Received disconnect from 192.168.122.11 port 36378:11: disconnected by user Feb 20 08:35:06 np0005625201 sshd[276018]: Disconnected from user root 192.168.122.11 port 36378 Feb 20 08:35:06 np0005625201 sshd[275946]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:07 np0005625201 sshd[276085]: Accepted publickey for root from 192.168.122.11 port 36394 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:07 np0005625201 sshd[276085]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:07 np0005625201 sudo[276089]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_metadata.service Feb 20 08:35:07 np0005625201 sudo[276089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:10 np0005625201 sudo[276089]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:10 np0005625201 sshd[276088]: Received disconnect from 192.168.122.11 port 36394:11: disconnected by user Feb 20 08:35:10 np0005625201 sshd[276088]: Disconnected from user root 192.168.122.11 port 36394 Feb 20 08:35:10 np0005625201 sshd[276085]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:12 np0005625201 runuser[276733]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:13 np0005625201 runuser[276733]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:13 np0005625201 runuser[276810]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:14 np0005625201 runuser[276810]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:14 np0005625201 runuser[276880]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:15 np0005625201 runuser[276880]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:22 np0005625201 sshd[277485]: Accepted publickey for root from 192.168.122.11 port 38424 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:22 np0005625201 sshd[277484]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:35:22 np0005625201 systemd[277490]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:22 np0005625201 sshd[277485]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:22 np0005625201 sudo[277506]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_scheduler.service Feb 20 08:35:22 np0005625201 sudo[277506]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:22 np0005625201 sudo[277506]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:22 np0005625201 sshd[277505]: Received disconnect from 192.168.122.11 port 38424:11: disconnected by user Feb 20 08:35:22 np0005625201 sshd[277505]: Disconnected from user root 192.168.122.11 port 38424 Feb 20 08:35:22 np0005625201 sshd[277485]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:23 np0005625201 sshd[277530]: Accepted publickey for root from 192.168.122.11 port 38438 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:23 np0005625201 sshd[277530]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:23 np0005625201 sudo[277543]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_scheduler.service Feb 20 08:35:23 np0005625201 sudo[277543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:24 np0005625201 sshd[277524]: Invalid user claude from 122.166.49.42 port 39704 Feb 20 08:35:24 np0005625201 sshd[277524]: Received disconnect from 122.166.49.42 port 39704:11: Bye Bye [preauth] Feb 20 08:35:24 np0005625201 sshd[277524]: Disconnected from invalid user claude 122.166.49.42 port 39704 [preauth] Feb 20 08:35:25 np0005625201 runuser[277635]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:26 np0005625201 runuser[277635]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:27 np0005625201 runuser[277730]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:27 np0005625201 runuser[277730]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:27 np0005625201 runuser[277888]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:28 np0005625201 runuser[277888]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:39 np0005625201 runuser[278487]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:39 np0005625201 runuser[278487]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:39 np0005625201 runuser[278597]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:40 np0005625201 runuser[278597]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:40 np0005625201 runuser[278659]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:41 np0005625201 runuser[278659]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:43 np0005625201 sshd[279105]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:35:48 np0005625201 sudo[277543]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:49 np0005625201 sshd[277534]: Received disconnect from 192.168.122.11 port 38438:11: disconnected by user Feb 20 08:35:49 np0005625201 sshd[277534]: Disconnected from user root 192.168.122.11 port 38438 Feb 20 08:35:49 np0005625201 sshd[277530]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:51 np0005625201 runuser[279554]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:52 np0005625201 sshd[279663]: Accepted publickey for root from 192.168.122.11 port 51866 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:52 np0005625201 sshd[279663]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:52 np0005625201 sudo[279759]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_vnc_proxy.service Feb 20 08:35:52 np0005625201 sudo[279759]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:52 np0005625201 sudo[279759]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:52 np0005625201 sshd[279758]: Received disconnect from 192.168.122.11 port 51866:11: disconnected by user Feb 20 08:35:52 np0005625201 sshd[279758]: Disconnected from user root 192.168.122.11 port 51866 Feb 20 08:35:52 np0005625201 sshd[279663]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:52 np0005625201 sshd[279774]: Accepted publickey for root from 192.168.122.11 port 43854 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:52 np0005625201 sshd[279774]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:52 np0005625201 runuser[279554]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:52 np0005625201 sudo[279785]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_vnc_proxy.service Feb 20 08:35:52 np0005625201 sudo[279785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:52 np0005625201 runuser[279821]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:53 np0005625201 sudo[279785]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:53 np0005625201 sshd[279782]: Received disconnect from 192.168.122.11 port 43854:11: disconnected by user Feb 20 08:35:53 np0005625201 sshd[279782]: Disconnected from user root 192.168.122.11 port 43854 Feb 20 08:35:53 np0005625201 sshd[279774]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:53 np0005625201 runuser[279821]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:53 np0005625201 runuser[279963]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:35:54 np0005625201 sshd[280019]: Accepted publickey for root from 192.168.122.11 port 43862 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:54 np0005625201 sshd[280019]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:54 np0005625201 runuser[279963]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:35:54 np0005625201 sudo[280032]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api.service Feb 20 08:35:54 np0005625201 sudo[280032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:54 np0005625201 sudo[280032]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:54 np0005625201 sshd[280030]: Received disconnect from 192.168.122.11 port 43862:11: disconnected by user Feb 20 08:35:54 np0005625201 sshd[280030]: Disconnected from user root 192.168.122.11 port 43862 Feb 20 08:35:54 np0005625201 sshd[280019]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:55 np0005625201 sshd[280107]: Accepted publickey for root from 192.168.122.11 port 43868 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:55 np0005625201 sshd[280107]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:55 np0005625201 sudo[280127]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api_cron.service Feb 20 08:35:55 np0005625201 sudo[280127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:55 np0005625201 sudo[280127]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:55 np0005625201 sshd[280122]: Received disconnect from 192.168.122.11 port 43868:11: disconnected by user Feb 20 08:35:55 np0005625201 sshd[280122]: Disconnected from user root 192.168.122.11 port 43868 Feb 20 08:35:55 np0005625201 sshd[280107]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:55 np0005625201 sudo[280190]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:35:55 np0005625201 sudo[280190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:35:55 np0005625201 sudo[280190]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:55 np0005625201 sudo[280221]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:35:55 np0005625201 sudo[280221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:35:55 np0005625201 sshd[280268]: Accepted publickey for root from 192.168.122.11 port 43874 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:56 np0005625201 sshd[280268]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:56 np0005625201 sudo[280297]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_evaluator.service Feb 20 08:35:56 np0005625201 sudo[280297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:56 np0005625201 sudo[280297]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:56 np0005625201 sshd[280293]: Received disconnect from 192.168.122.11 port 43874:11: disconnected by user Feb 20 08:35:56 np0005625201 sshd[280293]: Disconnected from user root 192.168.122.11 port 43874 Feb 20 08:35:56 np0005625201 sshd[280268]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:56 np0005625201 sudo[280221]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:56 np0005625201 sudo[280342]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:35:56 np0005625201 sudo[280342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:35:56 np0005625201 sudo[280342]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:57 np0005625201 sshd[280360]: Accepted publickey for root from 192.168.122.11 port 43886 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:57 np0005625201 sshd[280360]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:57 np0005625201 sudo[280369]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_listener.service Feb 20 08:35:57 np0005625201 sudo[280369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:57 np0005625201 sudo[280369]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:57 np0005625201 sshd[280368]: Received disconnect from 192.168.122.11 port 43886:11: disconnected by user Feb 20 08:35:57 np0005625201 sshd[280368]: Disconnected from user root 192.168.122.11 port 43886 Feb 20 08:35:57 np0005625201 sshd[280360]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:57 np0005625201 sshd[280453]: Accepted publickey for root from 192.168.122.11 port 43890 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:57 np0005625201 sshd[280453]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:58 np0005625201 sudo[280477]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_notifier.service Feb 20 08:35:58 np0005625201 sudo[280477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:58 np0005625201 sudo[280477]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:58 np0005625201 sshd[280470]: Received disconnect from 192.168.122.11 port 43890:11: disconnected by user Feb 20 08:35:58 np0005625201 sshd[280470]: Disconnected from user root 192.168.122.11 port 43890 Feb 20 08:35:58 np0005625201 sshd[280453]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:58 np0005625201 sshd[280535]: Accepted publickey for root from 192.168.122.11 port 43892 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:58 np0005625201 sshd[280535]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:59 np0005625201 sudo[280539]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_central.service Feb 20 08:35:59 np0005625201 sudo[280539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:59 np0005625201 sudo[280539]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:59 np0005625201 sshd[280538]: Received disconnect from 192.168.122.11 port 43892:11: disconnected by user Feb 20 08:35:59 np0005625201 sshd[280538]: Disconnected from user root 192.168.122.11 port 43892 Feb 20 08:35:59 np0005625201 sshd[280535]: pam_unix(sshd:session): session closed for user root Feb 20 08:35:59 np0005625201 sshd[280580]: Accepted publickey for root from 192.168.122.11 port 43906 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:35:59 np0005625201 sshd[280580]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:59 np0005625201 sudo[280584]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_compute.service Feb 20 08:35:59 np0005625201 sudo[280584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:35:59 np0005625201 sudo[280584]: pam_unix(sudo:session): session closed for user root Feb 20 08:35:59 np0005625201 sshd[280583]: Received disconnect from 192.168.122.11 port 43906:11: disconnected by user Feb 20 08:35:59 np0005625201 sshd[280583]: Disconnected from user root 192.168.122.11 port 43906 Feb 20 08:35:59 np0005625201 sshd[280580]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:00 np0005625201 sshd[280623]: Accepted publickey for root from 192.168.122.11 port 43908 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:00 np0005625201 sshd[280623]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:00 np0005625201 sudo[280627]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_ipmi.service Feb 20 08:36:00 np0005625201 sudo[280627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:00 np0005625201 sudo[280627]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:00 np0005625201 sshd[280626]: Received disconnect from 192.168.122.11 port 43908:11: disconnected by user Feb 20 08:36:00 np0005625201 sshd[280626]: Disconnected from user root 192.168.122.11 port 43908 Feb 20 08:36:00 np0005625201 sshd[280623]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:01 np0005625201 sshd[280658]: Accepted publickey for root from 192.168.122.11 port 43916 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:01 np0005625201 sshd[280658]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:01 np0005625201 sudo[280670]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_notification.service Feb 20 08:36:01 np0005625201 sudo[280670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:01 np0005625201 sudo[280670]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:01 np0005625201 sshd[280669]: Received disconnect from 192.168.122.11 port 43916:11: disconnected by user Feb 20 08:36:01 np0005625201 sshd[280669]: Disconnected from user root 192.168.122.11 port 43916 Feb 20 08:36:01 np0005625201 sshd[280658]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:03 np0005625201 sshd[280815]: Accepted publickey for root from 192.168.122.11 port 41662 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:03 np0005625201 sshd[280815]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:03 np0005625201 sudo[280819]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_northd.service Feb 20 08:36:03 np0005625201 sudo[280819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:04 np0005625201 sudo[280819]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:04 np0005625201 sshd[280818]: Received disconnect from 192.168.122.11 port 41662:11: disconnected by user Feb 20 08:36:04 np0005625201 sshd[280818]: Disconnected from user root 192.168.122.11 port 41662 Feb 20 08:36:04 np0005625201 sshd[280815]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:04 np0005625201 sshd[280834]: Accepted publickey for root from 192.168.122.11 port 41670 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:04 np0005625201 sshd[280834]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:04 np0005625201 sudo[280846]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_northd.service Feb 20 08:36:04 np0005625201 sudo[280846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:04 np0005625201 sudo[280846]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:04 np0005625201 sshd[280845]: Received disconnect from 192.168.122.11 port 41670:11: disconnected by user Feb 20 08:36:04 np0005625201 sshd[280845]: Disconnected from user root 192.168.122.11 port 41670 Feb 20 08:36:04 np0005625201 sshd[280834]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:04 np0005625201 runuser[280922]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:05 np0005625201 runuser[280922]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:05 np0005625201 sshd[280975]: Accepted publickey for root from 192.168.122.11 port 41686 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:05 np0005625201 sshd[280975]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:05 np0005625201 runuser[281008]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:05 np0005625201 sudo[280995]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_neutron_agent.service Feb 20 08:36:05 np0005625201 sudo[280995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:05 np0005625201 sudo[280995]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:05 np0005625201 sshd[280994]: Received disconnect from 192.168.122.11 port 41686:11: disconnected by user Feb 20 08:36:05 np0005625201 sshd[280994]: Disconnected from user root 192.168.122.11 port 41686 Feb 20 08:36:05 np0005625201 sshd[280975]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:06 np0005625201 sshd[281114]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:36:06 np0005625201 runuser[281008]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:06 np0005625201 runuser[281144]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:06 np0005625201 sshd[281129]: Accepted publickey for root from 192.168.122.11 port 41696 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:06 np0005625201 sshd[281129]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:06 np0005625201 sudo[281216]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_api.service Feb 20 08:36:06 np0005625201 sudo[281216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:06 np0005625201 sudo[281216]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:06 np0005625201 sshd[281204]: Received disconnect from 192.168.122.11 port 41696:11: disconnected by user Feb 20 08:36:06 np0005625201 sshd[281204]: Disconnected from user root 192.168.122.11 port 41696 Feb 20 08:36:06 np0005625201 sshd[281129]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:07 np0005625201 runuser[281144]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:07 np0005625201 sshd[281257]: Accepted publickey for root from 192.168.122.11 port 41698 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:07 np0005625201 sshd[281257]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:07 np0005625201 sudo[281270]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_inspector.service Feb 20 08:36:07 np0005625201 sudo[281270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:07 np0005625201 sudo[281270]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:07 np0005625201 sshd[281269]: Received disconnect from 192.168.122.11 port 41698:11: disconnected by user Feb 20 08:36:07 np0005625201 sshd[281269]: Disconnected from user root 192.168.122.11 port 41698 Feb 20 08:36:07 np0005625201 sshd[281257]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:08 np0005625201 sshd[281398]: Accepted publickey for root from 192.168.122.11 port 41702 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:08 np0005625201 sshd[281398]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:08 np0005625201 sudo[281439]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_conductor.service Feb 20 08:36:08 np0005625201 sudo[281439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:08 np0005625201 sudo[281439]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:08 np0005625201 sshd[281438]: Received disconnect from 192.168.122.11 port 41702:11: disconnected by user Feb 20 08:36:08 np0005625201 sshd[281438]: Disconnected from user root 192.168.122.11 port 41702 Feb 20 08:36:08 np0005625201 sshd[281398]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:09 np0005625201 sshd[281470]: Accepted publickey for root from 192.168.122.11 port 41714 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:09 np0005625201 sshd[281470]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:09 np0005625201 sudo[281483]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_inspector_dnsmasq.service Feb 20 08:36:09 np0005625201 sudo[281483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:09 np0005625201 sudo[281483]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:09 np0005625201 sshd[281475]: Received disconnect from 192.168.122.11 port 41714:11: disconnected by user Feb 20 08:36:09 np0005625201 sshd[281475]: Disconnected from user root 192.168.122.11 port 41714 Feb 20 08:36:09 np0005625201 sshd[281470]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:10 np0005625201 sshd[281525]: Accepted publickey for root from 192.168.122.11 port 41724 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:10 np0005625201 sshd[281525]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:10 np0005625201 sudo[281537]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_pxe_http.service Feb 20 08:36:10 np0005625201 sudo[281537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:10 np0005625201 sudo[281537]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:10 np0005625201 sshd[281536]: Received disconnect from 192.168.122.11 port 41724:11: disconnected by user Feb 20 08:36:10 np0005625201 sshd[281536]: Disconnected from user root 192.168.122.11 port 41724 Feb 20 08:36:10 np0005625201 sshd[281525]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:11 np0005625201 sshd[281576]: Accepted publickey for root from 192.168.122.11 port 41738 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:11 np0005625201 sshd[281576]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:11 np0005625201 sudo[281580]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_pxe_tftp.service Feb 20 08:36:11 np0005625201 sudo[281580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:11 np0005625201 sudo[281580]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:11 np0005625201 sshd[281579]: Received disconnect from 192.168.122.11 port 41738:11: disconnected by user Feb 20 08:36:11 np0005625201 sshd[281579]: Disconnected from user root 192.168.122.11 port 41738 Feb 20 08:36:11 np0005625201 sshd[281576]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:12 np0005625201 sshd[281619]: Accepted publickey for root from 192.168.122.11 port 41740 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:12 np0005625201 sshd[281619]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:12 np0005625201 sshd[281656]: Received disconnect from 192.168.122.11 port 41740:11: disconnected by user Feb 20 08:36:12 np0005625201 sshd[281656]: Disconnected from user root 192.168.122.11 port 41740 Feb 20 08:36:12 np0005625201 sshd[281619]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:12 np0005625201 sshd[281726]: Accepted publickey for root from 192.168.122.11 port 51530 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:13 np0005625201 sshd[281726]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:13 np0005625201 sshd[281791]: Received disconnect from 192.168.122.11 port 51530:11: disconnected by user Feb 20 08:36:13 np0005625201 sshd[281791]: Disconnected from user root 192.168.122.11 port 51530 Feb 20 08:36:13 np0005625201 sshd[281726]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:13 np0005625201 sshd[281979]: Accepted publickey for root from 192.168.122.11 port 51538 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:13 np0005625201 sshd[281979]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:14 np0005625201 sshd[281998]: Received disconnect from 192.168.122.11 port 51538:11: disconnected by user Feb 20 08:36:14 np0005625201 sshd[281998]: Disconnected from user root 192.168.122.11 port 51538 Feb 20 08:36:14 np0005625201 sshd[281979]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:14 np0005625201 sshd[282020]: Accepted publickey for root from 192.168.122.11 port 51542 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:14 np0005625201 sshd[282020]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:14 np0005625201 sshd[282023]: Received disconnect from 192.168.122.11 port 51542:11: disconnected by user Feb 20 08:36:14 np0005625201 sshd[282023]: Disconnected from user root 192.168.122.11 port 51542 Feb 20 08:36:14 np0005625201 sshd[282020]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:15 np0005625201 sshd[282061]: Accepted publickey for root from 192.168.122.11 port 51550 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:15 np0005625201 sshd[282061]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:15 np0005625201 sshd[282071]: Received disconnect from 192.168.122.11 port 51550:11: disconnected by user Feb 20 08:36:15 np0005625201 sshd[282071]: Disconnected from user root 192.168.122.11 port 51550 Feb 20 08:36:15 np0005625201 sshd[282061]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:16 np0005625201 sshd[282164]: Accepted publickey for root from 192.168.122.11 port 51552 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:16 np0005625201 sshd[282164]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:16 np0005625201 sshd[282175]: Received disconnect from 192.168.122.11 port 51552:11: disconnected by user Feb 20 08:36:16 np0005625201 sshd[282175]: Disconnected from user root 192.168.122.11 port 51552 Feb 20 08:36:16 np0005625201 sshd[282164]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:17 np0005625201 sshd[282205]: Accepted publickey for root from 192.168.122.11 port 51568 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:17 np0005625201 sshd[282205]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:17 np0005625201 sshd[282208]: Received disconnect from 192.168.122.11 port 51568:11: disconnected by user Feb 20 08:36:17 np0005625201 sshd[282208]: Disconnected from user root 192.168.122.11 port 51568 Feb 20 08:36:17 np0005625201 sshd[282205]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:17 np0005625201 runuser[282234]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:18 np0005625201 sshd[282356]: Accepted publickey for root from 192.168.122.11 port 51576 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:18 np0005625201 sshd[282356]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:18 np0005625201 sshd[282388]: Received disconnect from 192.168.122.11 port 51576:11: disconnected by user Feb 20 08:36:18 np0005625201 sshd[282388]: Disconnected from user root 192.168.122.11 port 51576 Feb 20 08:36:18 np0005625201 sshd[282356]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:18 np0005625201 runuser[282234]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:18 np0005625201 runuser[282501]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:19 np0005625201 sshd[282546]: Accepted publickey for root from 192.168.122.11 port 51586 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:19 np0005625201 sshd[282546]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:19 np0005625201 sshd[282553]: Received disconnect from 192.168.122.11 port 51586:11: disconnected by user Feb 20 08:36:19 np0005625201 sshd[282553]: Disconnected from user root 192.168.122.11 port 51586 Feb 20 08:36:19 np0005625201 sshd[282546]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:19 np0005625201 runuser[282501]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:19 np0005625201 runuser[282590]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:19 np0005625201 sshd[282645]: Accepted publickey for root from 192.168.122.11 port 51598 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:19 np0005625201 sshd[282645]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:20 np0005625201 sshd[282653]: Received disconnect from 192.168.122.11 port 51598:11: disconnected by user Feb 20 08:36:20 np0005625201 sshd[282653]: Disconnected from user root 192.168.122.11 port 51598 Feb 20 08:36:20 np0005625201 sshd[282645]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:20 np0005625201 runuser[282590]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:20 np0005625201 sshd[282695]: Accepted publickey for root from 192.168.122.11 port 51606 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:20 np0005625201 sshd[282695]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:20 np0005625201 sshd[282714]: Received disconnect from 192.168.122.11 port 51606:11: disconnected by user Feb 20 08:36:20 np0005625201 sshd[282714]: Disconnected from user root 192.168.122.11 port 51606 Feb 20 08:36:20 np0005625201 sshd[282695]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:21 np0005625201 sshd[282767]: Accepted publickey for root from 192.168.122.11 port 51622 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:21 np0005625201 sshd[282767]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:21 np0005625201 sshd[282777]: Received disconnect from 192.168.122.11 port 51622:11: disconnected by user Feb 20 08:36:21 np0005625201 sshd[282777]: Disconnected from user root 192.168.122.11 port 51622 Feb 20 08:36:21 np0005625201 sshd[282767]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:22 np0005625201 sshd[282893]: Accepted publickey for root from 192.168.122.11 port 35300 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:22 np0005625201 sshd[282893]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:22 np0005625201 sshd[282896]: Received disconnect from 192.168.122.11 port 35300:11: disconnected by user Feb 20 08:36:22 np0005625201 sshd[282896]: Disconnected from user root 192.168.122.11 port 35300 Feb 20 08:36:22 np0005625201 sshd[282893]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:23 np0005625201 sshd[282918]: Accepted publickey for root from 192.168.122.11 port 35306 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:23 np0005625201 sshd[282918]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:23 np0005625201 sshd[282937]: Received disconnect from 192.168.122.11 port 35306:11: disconnected by user Feb 20 08:36:23 np0005625201 sshd[282937]: Disconnected from user root 192.168.122.11 port 35306 Feb 20 08:36:23 np0005625201 sshd[282918]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:24 np0005625201 sshd[282959]: Accepted publickey for root from 192.168.122.11 port 35312 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:24 np0005625201 sshd[282959]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:24 np0005625201 sshd[282962]: Received disconnect from 192.168.122.11 port 35312:11: disconnected by user Feb 20 08:36:24 np0005625201 sshd[282962]: Disconnected from user root 192.168.122.11 port 35312 Feb 20 08:36:24 np0005625201 sshd[282959]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:24 np0005625201 sshd[283000]: Accepted publickey for root from 192.168.122.11 port 35322 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:24 np0005625201 sshd[283000]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:25 np0005625201 sshd[283003]: Received disconnect from 192.168.122.11 port 35322:11: disconnected by user Feb 20 08:36:25 np0005625201 sshd[283003]: Disconnected from user root 192.168.122.11 port 35322 Feb 20 08:36:25 np0005625201 sshd[283000]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:25 np0005625201 sshd[283033]: Accepted publickey for root from 192.168.122.11 port 35332 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:25 np0005625201 sshd[283033]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:25 np0005625201 sshd[283044]: Received disconnect from 192.168.122.11 port 35332:11: disconnected by user Feb 20 08:36:25 np0005625201 sshd[283044]: Disconnected from user root 192.168.122.11 port 35332 Feb 20 08:36:25 np0005625201 sshd[283033]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:26 np0005625201 sshd[283074]: Accepted publickey for root from 192.168.122.11 port 35342 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:26 np0005625201 sshd[283074]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:26 np0005625201 sshd[283077]: Received disconnect from 192.168.122.11 port 35342:11: disconnected by user Feb 20 08:36:26 np0005625201 sshd[283077]: Disconnected from user root 192.168.122.11 port 35342 Feb 20 08:36:26 np0005625201 sshd[283074]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:27 np0005625201 sshd[283099]: Accepted publickey for root from 192.168.122.11 port 35354 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:27 np0005625201 sshd[283099]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:27 np0005625201 sshd[283118]: Received disconnect from 192.168.122.11 port 35354:11: disconnected by user Feb 20 08:36:27 np0005625201 sshd[283118]: Disconnected from user root 192.168.122.11 port 35354 Feb 20 08:36:27 np0005625201 sshd[283099]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:28 np0005625201 sshd[283197]: Accepted publickey for root from 192.168.122.11 port 35368 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:28 np0005625201 sshd[283197]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:28 np0005625201 sshd[283207]: Received disconnect from 192.168.122.11 port 35368:11: disconnected by user Feb 20 08:36:28 np0005625201 sshd[283207]: Disconnected from user root 192.168.122.11 port 35368 Feb 20 08:36:28 np0005625201 sshd[283197]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:29 np0005625201 sshd[283281]: Accepted publickey for root from 192.168.122.11 port 35378 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:29 np0005625201 sshd[283281]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:29 np0005625201 sshd[283279]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:36:29 np0005625201 sshd[283286]: Received disconnect from 192.168.122.11 port 35378:11: disconnected by user Feb 20 08:36:29 np0005625201 sshd[283286]: Disconnected from user root 192.168.122.11 port 35378 Feb 20 08:36:29 np0005625201 sshd[283281]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:29 np0005625201 sshd[283196]: Invalid user titu from 103.183.75.204 port 40726 Feb 20 08:36:29 np0005625201 sshd[283196]: Received disconnect from 103.183.75.204 port 40726:11: Bye Bye [preauth] Feb 20 08:36:29 np0005625201 sshd[283196]: Disconnected from invalid user titu 103.183.75.204 port 40726 [preauth] Feb 20 08:36:30 np0005625201 sshd[283325]: Accepted publickey for root from 192.168.122.11 port 35386 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:30 np0005625201 sshd[283325]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:30 np0005625201 sshd[283328]: Received disconnect from 192.168.122.11 port 35386:11: disconnected by user Feb 20 08:36:30 np0005625201 sshd[283328]: Disconnected from user root 192.168.122.11 port 35386 Feb 20 08:36:30 np0005625201 sshd[283325]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:30 np0005625201 sshd[283316]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:36:30 np0005625201 runuser[283363]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:30 np0005625201 sshd[283408]: Accepted publickey for root from 192.168.122.11 port 35396 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:30 np0005625201 sshd[283408]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:31 np0005625201 sshd[283418]: Received disconnect from 192.168.122.11 port 35396:11: disconnected by user Feb 20 08:36:31 np0005625201 sshd[283418]: Disconnected from user root 192.168.122.11 port 35396 Feb 20 08:36:31 np0005625201 sshd[283408]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:31 np0005625201 runuser[283363]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:31 np0005625201 runuser[283449]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:31 np0005625201 sshd[283510]: Accepted publickey for root from 192.168.122.11 port 35402 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:31 np0005625201 sshd[283510]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:31 np0005625201 sshd[283513]: Received disconnect from 192.168.122.11 port 35402:11: disconnected by user Feb 20 08:36:31 np0005625201 sshd[283513]: Disconnected from user root 192.168.122.11 port 35402 Feb 20 08:36:31 np0005625201 sshd[283510]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:32 np0005625201 runuser[283449]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:32 np0005625201 runuser[283544]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:32 np0005625201 sshd[283673]: Accepted publickey for root from 192.168.122.11 port 60008 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:32 np0005625201 sshd[283673]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:32 np0005625201 sshd[283688]: Received disconnect from 192.168.122.11 port 60008:11: disconnected by user Feb 20 08:36:32 np0005625201 sshd[283688]: Disconnected from user root 192.168.122.11 port 60008 Feb 20 08:36:32 np0005625201 sshd[283673]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:32 np0005625201 runuser[283544]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:33 np0005625201 sshd[283725]: Accepted publickey for root from 192.168.122.11 port 60020 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:33 np0005625201 sshd[283725]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:33 np0005625201 sshd[283728]: Received disconnect from 192.168.122.11 port 60020:11: disconnected by user Feb 20 08:36:33 np0005625201 sshd[283728]: Disconnected from user root 192.168.122.11 port 60020 Feb 20 08:36:33 np0005625201 sshd[283725]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:34 np0005625201 sshd[283766]: Accepted publickey for root from 192.168.122.11 port 60024 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:34 np0005625201 sshd[283766]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:34 np0005625201 sshd[283769]: Received disconnect from 192.168.122.11 port 60024:11: disconnected by user Feb 20 08:36:34 np0005625201 sshd[283769]: Disconnected from user root 192.168.122.11 port 60024 Feb 20 08:36:34 np0005625201 sshd[283766]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:35 np0005625201 sshd[283799]: Accepted publickey for root from 192.168.122.11 port 60030 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:35 np0005625201 sshd[283799]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:35 np0005625201 sshd[283802]: Received disconnect from 192.168.122.11 port 60030:11: disconnected by user Feb 20 08:36:35 np0005625201 sshd[283802]: Disconnected from user root 192.168.122.11 port 60030 Feb 20 08:36:35 np0005625201 sshd[283799]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:35 np0005625201 sshd[283840]: Accepted publickey for root from 192.168.122.11 port 60034 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:35 np0005625201 sshd[283840]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:36 np0005625201 sshd[283855]: Received disconnect from 192.168.122.11 port 60034:11: disconnected by user Feb 20 08:36:36 np0005625201 sshd[283855]: Disconnected from user root 192.168.122.11 port 60034 Feb 20 08:36:36 np0005625201 sshd[283840]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:36 np0005625201 sshd[283913]: Accepted publickey for root from 192.168.122.11 port 60044 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:36 np0005625201 sshd[283913]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:36 np0005625201 sshd[283925]: Received disconnect from 192.168.122.11 port 60044:11: disconnected by user Feb 20 08:36:36 np0005625201 sshd[283925]: Disconnected from user root 192.168.122.11 port 60044 Feb 20 08:36:36 np0005625201 sshd[283913]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:37 np0005625201 sshd[284005]: Accepted publickey for root from 192.168.122.11 port 60060 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:37 np0005625201 sshd[284005]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:37 np0005625201 sshd[284015]: Received disconnect from 192.168.122.11 port 60060:11: disconnected by user Feb 20 08:36:37 np0005625201 sshd[284015]: Disconnected from user root 192.168.122.11 port 60060 Feb 20 08:36:37 np0005625201 sshd[284005]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:38 np0005625201 sshd[284099]: Accepted publickey for root from 192.168.122.11 port 60064 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:38 np0005625201 sshd[284099]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:38 np0005625201 sshd[284121]: Received disconnect from 192.168.122.11 port 60064:11: disconnected by user Feb 20 08:36:38 np0005625201 sshd[284121]: Disconnected from user root 192.168.122.11 port 60064 Feb 20 08:36:38 np0005625201 sshd[284099]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:39 np0005625201 sshd[284214]: Accepted publickey for root from 192.168.122.11 port 60076 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:39 np0005625201 sshd[284214]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:39 np0005625201 sshd[284217]: Received disconnect from 192.168.122.11 port 60076:11: disconnected by user Feb 20 08:36:39 np0005625201 sshd[284217]: Disconnected from user root 192.168.122.11 port 60076 Feb 20 08:36:39 np0005625201 sshd[284214]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:40 np0005625201 sshd[284247]: Accepted publickey for root from 192.168.122.11 port 60080 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:40 np0005625201 sshd[284247]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:40 np0005625201 sshd[284264]: Received disconnect from 192.168.122.11 port 60080:11: disconnected by user Feb 20 08:36:40 np0005625201 sshd[284264]: Disconnected from user root 192.168.122.11 port 60080 Feb 20 08:36:40 np0005625201 sshd[284247]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:41 np0005625201 sshd[284306]: Accepted publickey for root from 192.168.122.11 port 60086 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:41 np0005625201 sshd[284306]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:41 np0005625201 sshd[284309]: Received disconnect from 192.168.122.11 port 60086:11: disconnected by user Feb 20 08:36:41 np0005625201 sshd[284309]: Disconnected from user root 192.168.122.11 port 60086 Feb 20 08:36:41 np0005625201 sshd[284306]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:41 np0005625201 sshd[284339]: Accepted publickey for root from 192.168.122.11 port 60094 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:41 np0005625201 sshd[284339]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:42 np0005625201 sshd[284350]: Received disconnect from 192.168.122.11 port 60094:11: disconnected by user Feb 20 08:36:42 np0005625201 sshd[284350]: Disconnected from user root 192.168.122.11 port 60094 Feb 20 08:36:42 np0005625201 sshd[284339]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:42 np0005625201 sshd[284454]: Accepted publickey for root from 192.168.122.11 port 37182 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:42 np0005625201 sshd[284454]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:42 np0005625201 sshd[284464]: Received disconnect from 192.168.122.11 port 37182:11: disconnected by user Feb 20 08:36:42 np0005625201 sshd[284464]: Disconnected from user root 192.168.122.11 port 37182 Feb 20 08:36:42 np0005625201 sshd[284454]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:43 np0005625201 runuser[284499]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:43 np0005625201 sshd[284516]: Accepted publickey for root from 192.168.122.11 port 37196 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:43 np0005625201 sshd[284516]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:43 np0005625201 sshd[284599]: Received disconnect from 192.168.122.11 port 37196:11: disconnected by user Feb 20 08:36:43 np0005625201 sshd[284599]: Disconnected from user root 192.168.122.11 port 37196 Feb 20 08:36:43 np0005625201 sshd[284516]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:44 np0005625201 runuser[284499]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:44 np0005625201 runuser[284807]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:44 np0005625201 sshd[284860]: Accepted publickey for root from 192.168.122.11 port 37204 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:44 np0005625201 sshd[284860]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:44 np0005625201 sshd[284863]: Received disconnect from 192.168.122.11 port 37204:11: disconnected by user Feb 20 08:36:44 np0005625201 sshd[284863]: Disconnected from user root 192.168.122.11 port 37204 Feb 20 08:36:44 np0005625201 sshd[284860]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:45 np0005625201 runuser[284807]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:45 np0005625201 runuser[284902]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:45 np0005625201 sshd[284949]: Accepted publickey for root from 192.168.122.11 port 37218 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:45 np0005625201 sshd[284949]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:45 np0005625201 sshd[284960]: Received disconnect from 192.168.122.11 port 37218:11: disconnected by user Feb 20 08:36:45 np0005625201 sshd[284960]: Disconnected from user root 192.168.122.11 port 37218 Feb 20 08:36:45 np0005625201 sshd[284949]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:45 np0005625201 runuser[284902]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:46 np0005625201 sshd[285029]: Accepted publickey for root from 192.168.122.11 port 37222 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:46 np0005625201 sshd[285029]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:46 np0005625201 sshd[285044]: Received disconnect from 192.168.122.11 port 37222:11: disconnected by user Feb 20 08:36:46 np0005625201 sshd[285044]: Disconnected from user root 192.168.122.11 port 37222 Feb 20 08:36:46 np0005625201 sshd[285029]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:47 np0005625201 sshd[285114]: Accepted publickey for root from 192.168.122.11 port 37228 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:47 np0005625201 sshd[285114]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:47 np0005625201 sshd[285125]: Received disconnect from 192.168.122.11 port 37228:11: disconnected by user Feb 20 08:36:47 np0005625201 sshd[285125]: Disconnected from user root 192.168.122.11 port 37228 Feb 20 08:36:47 np0005625201 sshd[285114]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:48 np0005625201 sshd[285208]: Accepted publickey for root from 192.168.122.11 port 37236 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:48 np0005625201 sshd[285208]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:48 np0005625201 sshd[285225]: Received disconnect from 192.168.122.11 port 37236:11: disconnected by user Feb 20 08:36:48 np0005625201 sshd[285225]: Disconnected from user root 192.168.122.11 port 37236 Feb 20 08:36:48 np0005625201 sshd[285208]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:49 np0005625201 sshd[285305]: Accepted publickey for root from 192.168.122.11 port 37250 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:49 np0005625201 sshd[285305]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:49 np0005625201 sshd[285310]: Received disconnect from 192.168.122.11 port 37250:11: disconnected by user Feb 20 08:36:49 np0005625201 sshd[285310]: Disconnected from user root 192.168.122.11 port 37250 Feb 20 08:36:49 np0005625201 sshd[285305]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:50 np0005625201 sshd[285338]: Accepted publickey for root from 192.168.122.11 port 37256 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:50 np0005625201 sshd[285332]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:36:50 np0005625201 sshd[285338]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:50 np0005625201 sshd[285352]: Received disconnect from 192.168.122.11 port 37256:11: disconnected by user Feb 20 08:36:50 np0005625201 sshd[285352]: Disconnected from user root 192.168.122.11 port 37256 Feb 20 08:36:50 np0005625201 sshd[285338]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:51 np0005625201 sshd[285375]: Accepted publickey for root from 192.168.122.11 port 37266 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:51 np0005625201 sshd[285375]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:51 np0005625201 sshd[285388]: Received disconnect from 192.168.122.11 port 37266:11: disconnected by user Feb 20 08:36:51 np0005625201 sshd[285388]: Disconnected from user root 192.168.122.11 port 37266 Feb 20 08:36:51 np0005625201 sshd[285375]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:51 np0005625201 sshd[285435]: Accepted publickey for root from 192.168.122.11 port 37270 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:51 np0005625201 sshd[285435]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:51 np0005625201 sshd[285438]: Received disconnect from 192.168.122.11 port 37270:11: disconnected by user Feb 20 08:36:51 np0005625201 sshd[285438]: Disconnected from user root 192.168.122.11 port 37270 Feb 20 08:36:51 np0005625201 sshd[285435]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:52 np0005625201 sshd[285550]: Accepted publickey for root from 192.168.122.11 port 36322 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:52 np0005625201 sshd[285550]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:52 np0005625201 sshd[285561]: Received disconnect from 192.168.122.11 port 36322:11: disconnected by user Feb 20 08:36:52 np0005625201 sshd[285561]: Disconnected from user root 192.168.122.11 port 36322 Feb 20 08:36:52 np0005625201 sshd[285550]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:53 np0005625201 sshd[285587]: Accepted publickey for root from 192.168.122.11 port 36338 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:53 np0005625201 sshd[285587]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:53 np0005625201 sshd[285630]: Received disconnect from 192.168.122.11 port 36338:11: disconnected by user Feb 20 08:36:53 np0005625201 sshd[285630]: Disconnected from user root 192.168.122.11 port 36338 Feb 20 08:36:53 np0005625201 sshd[285587]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:54 np0005625201 sshd[285659]: Accepted publickey for root from 192.168.122.11 port 36342 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:54 np0005625201 sshd[285659]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:54 np0005625201 sshd[285667]: Received disconnect from 192.168.122.11 port 36342:11: disconnected by user Feb 20 08:36:54 np0005625201 sshd[285667]: Disconnected from user root 192.168.122.11 port 36342 Feb 20 08:36:54 np0005625201 sshd[285659]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:55 np0005625201 sshd[285727]: Accepted publickey for root from 192.168.122.11 port 36344 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:55 np0005625201 sshd[285727]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:55 np0005625201 sshd[285738]: Received disconnect from 192.168.122.11 port 36344:11: disconnected by user Feb 20 08:36:55 np0005625201 sshd[285738]: Disconnected from user root 192.168.122.11 port 36344 Feb 20 08:36:55 np0005625201 sshd[285727]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:56 np0005625201 sshd[285865]: Accepted publickey for root from 192.168.122.11 port 36356 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:56 np0005625201 sshd[285865]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:56 np0005625201 sshd[285870]: Received disconnect from 192.168.122.11 port 36356:11: disconnected by user Feb 20 08:36:56 np0005625201 sshd[285870]: Disconnected from user root 192.168.122.11 port 36356 Feb 20 08:36:56 np0005625201 sshd[285865]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:56 np0005625201 runuser[285904]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:56 np0005625201 sshd[285957]: Accepted publickey for root from 192.168.122.11 port 36360 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:56 np0005625201 sshd[285957]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:57 np0005625201 sshd[285960]: Received disconnect from 192.168.122.11 port 36360:11: disconnected by user Feb 20 08:36:57 np0005625201 sshd[285960]: Disconnected from user root 192.168.122.11 port 36360 Feb 20 08:36:57 np0005625201 sshd[285957]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:57 np0005625201 sudo[285972]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:36:57 np0005625201 sudo[285972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:36:57 np0005625201 sudo[285972]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:57 np0005625201 sudo[285993]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:36:57 np0005625201 sudo[285993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:36:57 np0005625201 runuser[285904]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:57 np0005625201 runuser[286028]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:57 np0005625201 sshd[286099]: Accepted publickey for root from 192.168.122.11 port 36366 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:57 np0005625201 sshd[286099]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:57 np0005625201 sudo[285993]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:57 np0005625201 sshd[286125]: Received disconnect from 192.168.122.11 port 36366:11: disconnected by user Feb 20 08:36:57 np0005625201 sshd[286125]: Disconnected from user root 192.168.122.11 port 36366 Feb 20 08:36:57 np0005625201 sshd[286099]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:58 np0005625201 runuser[286028]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:58 np0005625201 runuser[286177]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:36:58 np0005625201 sudo[286256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:36:58 np0005625201 sudo[286256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:36:58 np0005625201 sudo[286256]: pam_unix(sudo:session): session closed for user root Feb 20 08:36:58 np0005625201 sshd[286271]: Accepted publickey for root from 192.168.122.11 port 36382 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:58 np0005625201 sshd[286271]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:58 np0005625201 sshd[286293]: Received disconnect from 192.168.122.11 port 36382:11: disconnected by user Feb 20 08:36:58 np0005625201 sshd[286293]: Disconnected from user root 192.168.122.11 port 36382 Feb 20 08:36:58 np0005625201 sshd[286271]: pam_unix(sshd:session): session closed for user root Feb 20 08:36:58 np0005625201 runuser[286177]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:36:59 np0005625201 sshd[286365]: Accepted publickey for root from 192.168.122.11 port 36388 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:36:59 np0005625201 sshd[286365]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:36:59 np0005625201 sshd[286368]: Received disconnect from 192.168.122.11 port 36388:11: disconnected by user Feb 20 08:36:59 np0005625201 sshd[286368]: Disconnected from user root 192.168.122.11 port 36388 Feb 20 08:36:59 np0005625201 sshd[286365]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:00 np0005625201 sshd[286398]: Accepted publickey for root from 192.168.122.11 port 36396 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:00 np0005625201 sshd[286398]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:00 np0005625201 sshd[286409]: Received disconnect from 192.168.122.11 port 36396:11: disconnected by user Feb 20 08:37:00 np0005625201 sshd[286409]: Disconnected from user root 192.168.122.11 port 36396 Feb 20 08:37:00 np0005625201 sshd[286398]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:01 np0005625201 sshd[286439]: Accepted publickey for root from 192.168.122.11 port 36412 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:01 np0005625201 sshd[286439]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:01 np0005625201 sshd[286442]: Received disconnect from 192.168.122.11 port 36412:11: disconnected by user Feb 20 08:37:01 np0005625201 sshd[286442]: Disconnected from user root 192.168.122.11 port 36412 Feb 20 08:37:01 np0005625201 sshd[286439]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:02 np0005625201 sshd[286480]: Accepted publickey for root from 192.168.122.11 port 36426 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:02 np0005625201 sshd[286480]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:02 np0005625201 sshd[286483]: Received disconnect from 192.168.122.11 port 36426:11: disconnected by user Feb 20 08:37:02 np0005625201 sshd[286483]: Disconnected from user root 192.168.122.11 port 36426 Feb 20 08:37:02 np0005625201 sshd[286480]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:02 np0005625201 sshd[286595]: Accepted publickey for root from 192.168.122.11 port 52004 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:02 np0005625201 sshd[286595]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:03 np0005625201 sshd[286606]: Received disconnect from 192.168.122.11 port 52004:11: disconnected by user Feb 20 08:37:03 np0005625201 sshd[286606]: Disconnected from user root 192.168.122.11 port 52004 Feb 20 08:37:03 np0005625201 sshd[286595]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:03 np0005625201 sshd[286628]: Accepted publickey for root from 192.168.122.11 port 52006 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:03 np0005625201 sshd[286628]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:03 np0005625201 sshd[286639]: Received disconnect from 192.168.122.11 port 52006:11: disconnected by user Feb 20 08:37:03 np0005625201 sshd[286639]: Disconnected from user root 192.168.122.11 port 52006 Feb 20 08:37:03 np0005625201 sshd[286628]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:04 np0005625201 sshd[286661]: Accepted publickey for root from 192.168.122.11 port 52022 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:04 np0005625201 sshd[286661]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:04 np0005625201 sshd[286672]: Received disconnect from 192.168.122.11 port 52022:11: disconnected by user Feb 20 08:37:04 np0005625201 sshd[286672]: Disconnected from user root 192.168.122.11 port 52022 Feb 20 08:37:04 np0005625201 sshd[286661]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:05 np0005625201 sshd[286702]: Accepted publickey for root from 192.168.122.11 port 52026 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:37:05 np0005625201 sshd[286702]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:37:05 np0005625201 sshd[286705]: Received disconnect from 192.168.122.11 port 52026:11: disconnected by user Feb 20 08:37:05 np0005625201 sshd[286705]: Disconnected from user root 192.168.122.11 port 52026 Feb 20 08:37:05 np0005625201 sshd[286702]: pam_unix(sshd:session): session closed for user root Feb 20 08:37:09 np0005625201 runuser[287021]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:10 np0005625201 runuser[287021]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:10 np0005625201 runuser[287106]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:11 np0005625201 runuser[287106]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:11 np0005625201 runuser[287204]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:11 np0005625201 runuser[287204]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:13 np0005625201 sshd[287376]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:37:22 np0005625201 runuser[288198]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:23 np0005625201 runuser[288198]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:23 np0005625201 runuser[288423]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:24 np0005625201 runuser[288423]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:24 np0005625201 runuser[288481]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:25 np0005625201 runuser[288481]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:33 np0005625201 sshd[288955]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:37:35 np0005625201 runuser[288993]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:36 np0005625201 runuser[288993]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:36 np0005625201 runuser[289070]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:37 np0005625201 runuser[289070]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:37 np0005625201 runuser[289189]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:37 np0005625201 runuser[289189]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:48 np0005625201 runuser[290031]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:49 np0005625201 runuser[290031]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:49 np0005625201 runuser[290171]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:50 np0005625201 runuser[290171]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:50 np0005625201 runuser[290304]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:37:51 np0005625201 runuser[290304]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:37:55 np0005625201 sshd[290638]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:37:58 np0005625201 sudo[290831]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:37:58 np0005625201 sudo[290831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:37:58 np0005625201 sudo[290831]: pam_unix(sudo:session): session closed for user root Feb 20 08:37:58 np0005625201 sudo[290849]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:37:58 np0005625201 sudo[290849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:37:59 np0005625201 sshd[290845]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:37:59 np0005625201 sudo[290849]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:01 np0005625201 runuser[291066]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:02 np0005625201 runuser[291066]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:02 np0005625201 runuser[291135]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:03 np0005625201 runuser[291135]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:03 np0005625201 runuser[291287]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:03 np0005625201 sudo[291354]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:38:03 np0005625201 sudo[291354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:38:03 np0005625201 sudo[291354]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:03 np0005625201 runuser[291287]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:14 np0005625201 runuser[291959]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:15 np0005625201 runuser[291959]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:15 np0005625201 runuser[292044]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:16 np0005625201 runuser[292044]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:16 np0005625201 runuser[292228]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:16 np0005625201 runuser[292228]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:19 np0005625201 sshd[292454]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:38:22 np0005625201 sshd[292778]: Accepted publickey for root from 192.168.122.11 port 56782 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:38:22 np0005625201 systemd[292782]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:22 np0005625201 sshd[292778]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:22 np0005625201 sudo[292812]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_northd.service Feb 20 08:38:23 np0005625201 sudo[292812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:23 np0005625201 sudo[292812]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:23 np0005625201 sshd[292798]: Received disconnect from 192.168.122.11 port 56782:11: disconnected by user Feb 20 08:38:23 np0005625201 sshd[292798]: Disconnected from user root 192.168.122.11 port 56782 Feb 20 08:38:23 np0005625201 sshd[292778]: pam_unix(sshd:session): session closed for user root Feb 20 08:38:24 np0005625201 sshd[292964]: Accepted publickey for root from 192.168.122.11 port 56786 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:38:24 np0005625201 sshd[292964]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:24 np0005625201 sudo[292968]: root : PWD=/root ; USER=root ; COMMAND=/sbin/nft add rule inet filter INPUT ip saddr 172.17.1.0/24 tcp dport 6641 ct state new counter accept Feb 20 08:38:24 np0005625201 sudo[292968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:24 np0005625201 sudo[292968]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:24 np0005625201 sshd[292967]: Received disconnect from 192.168.122.11 port 56786:11: disconnected by user Feb 20 08:38:24 np0005625201 sshd[292967]: Disconnected from user root 192.168.122.11 port 56786 Feb 20 08:38:24 np0005625201 sshd[292964]: pam_unix(sshd:session): session closed for user root Feb 20 08:38:25 np0005625201 sshd[292983]: Accepted publickey for root from 192.168.122.11 port 56796 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:38:25 np0005625201 sshd[292983]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:25 np0005625201 sudo[292995]: root : PWD=/root ; USER=root ; COMMAND=/sbin/nft add rule inet filter INPUT ip saddr 172.17.1.0/24 tcp dport 6642 ct state new counter accept Feb 20 08:38:25 np0005625201 sudo[292995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:25 np0005625201 sudo[292995]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:25 np0005625201 sshd[292994]: Received disconnect from 192.168.122.11 port 56796:11: disconnected by user Feb 20 08:38:25 np0005625201 sshd[292994]: Disconnected from user root 192.168.122.11 port 56796 Feb 20 08:38:25 np0005625201 sshd[292983]: pam_unix(sshd:session): session closed for user root Feb 20 08:38:27 np0005625201 runuser[293078]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:28 np0005625201 runuser[293078]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:28 np0005625201 runuser[293155]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:29 np0005625201 runuser[293155]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:29 np0005625201 runuser[293217]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:29 np0005625201 runuser[293217]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:32 np0005625201 sshd[293461]: Accepted publickey for root from 192.168.122.11 port 56092 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:38:32 np0005625201 sshd[293461]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:32 np0005625201 sudo[293487]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_north_db_server.service Feb 20 08:38:32 np0005625201 sudo[293487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:32 np0005625201 sudo[293487]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:32 np0005625201 sudo[293490]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_north_db_server.service Feb 20 08:38:32 np0005625201 sudo[293490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:33 np0005625201 sudo[293490]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:33 np0005625201 sshd[293472]: Received disconnect from 192.168.122.11 port 56092:11: disconnected by user Feb 20 08:38:33 np0005625201 sshd[293472]: Disconnected from user root 192.168.122.11 port 56092 Feb 20 08:38:33 np0005625201 sshd[293461]: pam_unix(sshd:session): session closed for user root Feb 20 08:38:34 np0005625201 sshd[293663]: Accepted publickey for root from 192.168.122.11 port 56100 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:38:34 np0005625201 sshd[293663]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:34 np0005625201 sudo[293680]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_south_db_server.service Feb 20 08:38:34 np0005625201 sudo[293680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:34 np0005625201 sudo[293680]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:34 np0005625201 sudo[293683]: root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_south_db_server.service Feb 20 08:38:34 np0005625201 sudo[293683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Feb 20 08:38:35 np0005625201 sudo[293683]: pam_unix(sudo:session): session closed for user root Feb 20 08:38:35 np0005625201 sshd[293666]: Received disconnect from 192.168.122.11 port 56100:11: disconnected by user Feb 20 08:38:35 np0005625201 sshd[293666]: Disconnected from user root 192.168.122.11 port 56100 Feb 20 08:38:35 np0005625201 sshd[293663]: pam_unix(sshd:session): session closed for user root Feb 20 08:38:40 np0005625201 runuser[293958]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:41 np0005625201 runuser[293958]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:41 np0005625201 runuser[294035]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:42 np0005625201 runuser[294035]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:42 np0005625201 runuser[294182]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:43 np0005625201 runuser[294182]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:46 np0005625201 sshd[294439]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:38:53 np0005625201 runuser[295149]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:54 np0005625201 runuser[295149]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:54 np0005625201 runuser[295270]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:55 np0005625201 runuser[295270]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:38:55 np0005625201 runuser[295383]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:38:55 np0005625201 runuser[295383]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:04 np0005625201 sudo[295922]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:39:04 np0005625201 sudo[295922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:04 np0005625201 sudo[295922]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:04 np0005625201 sudo[295937]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:39:04 np0005625201 sudo[295937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:04 np0005625201 sudo[295937]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:05 np0005625201 sudo[296007]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:39:05 np0005625201 sudo[296007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:05 np0005625201 sudo[296007]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:05 np0005625201 sudo[296030]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 08:39:05 np0005625201 sudo[296030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:05 np0005625201 sudo[296030]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:05 np0005625201 sudo[296085]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:39:05 np0005625201 sudo[296085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:05 np0005625201 sudo[296085]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:05 np0005625201 sudo[296100]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 -- inventory --format=json-pretty --filter-for-batch Feb 20 08:39:05 np0005625201 sudo[296100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:05 np0005625201 sshd[296040]: Invalid user n8n from 212.233.136.201 port 51058 Feb 20 08:39:06 np0005625201 sshd[296040]: Received disconnect from 212.233.136.201 port 51058:11: Bye Bye [preauth] Feb 20 08:39:06 np0005625201 sshd[296040]: Disconnected from invalid user n8n 212.233.136.201 port 51058 [preauth] Feb 20 08:39:06 np0005625201 runuser[296182]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:06 np0005625201 sshd[296021]: Invalid user claude from 111.68.98.152 port 45968 Feb 20 08:39:06 np0005625201 sshd[296021]: Received disconnect from 111.68.98.152 port 45968:11: Bye Bye [preauth] Feb 20 08:39:06 np0005625201 sshd[296021]: Disconnected from invalid user claude 111.68.98.152 port 45968 [preauth] Feb 20 08:39:06 np0005625201 sshd[296251]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:39:07 np0005625201 runuser[296182]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:07 np0005625201 runuser[296327]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:08 np0005625201 runuser[296327]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:08 np0005625201 runuser[297582]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:08 np0005625201 sudo[296100]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:08 np0005625201 sudo[297645]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:39:08 np0005625201 sudo[297645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:39:08 np0005625201 sudo[297645]: pam_unix(sudo:session): session closed for user root Feb 20 08:39:08 np0005625201 runuser[297582]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:17 np0005625201 sshd[298096]: Invalid user oracle from 122.166.49.42 port 45738 Feb 20 08:39:17 np0005625201 sshd[298096]: Received disconnect from 122.166.49.42 port 45738:11: Bye Bye [preauth] Feb 20 08:39:17 np0005625201 sshd[298096]: Disconnected from invalid user oracle 122.166.49.42 port 45738 [preauth] Feb 20 08:39:19 np0005625201 runuser[298480]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:20 np0005625201 runuser[298480]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:20 np0005625201 runuser[298623]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:21 np0005625201 runuser[298623]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:21 np0005625201 runuser[298703]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:21 np0005625201 runuser[298703]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:22 np0005625201 sshd[298853]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:39:32 np0005625201 runuser[299312]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:33 np0005625201 runuser[299312]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:33 np0005625201 runuser[299426]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:33 np0005625201 sshd[299420]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:39:34 np0005625201 runuser[299426]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:34 np0005625201 runuser[299585]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:35 np0005625201 runuser[299585]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:45 np0005625201 runuser[300222]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:46 np0005625201 runuser[300222]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:46 np0005625201 runuser[300327]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:47 np0005625201 runuser[300327]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:47 np0005625201 runuser[300397]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:48 np0005625201 runuser[300397]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:54 np0005625201 sshd[301078]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:39:58 np0005625201 runuser[301391]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:39:59 np0005625201 runuser[301391]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:39:59 np0005625201 runuser[301470]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:00 np0005625201 runuser[301470]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:00 np0005625201 runuser[301601]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:01 np0005625201 runuser[301601]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:09 np0005625201 sudo[301971]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:40:09 np0005625201 sudo[301971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:40:09 np0005625201 sudo[301971]: pam_unix(sudo:session): session closed for user root Feb 20 08:40:09 np0005625201 sudo[301986]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 08:40:09 np0005625201 sudo[301986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:40:10 np0005625201 sudo[301986]: pam_unix(sudo:session): session closed for user root Feb 20 08:40:10 np0005625201 sudo[302260]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:40:10 np0005625201 sudo[302260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:40:10 np0005625201 sudo[302260]: pam_unix(sudo:session): session closed for user root Feb 20 08:40:10 np0005625201 sudo[302275]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:40:10 np0005625201 sudo[302275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:40:11 np0005625201 sudo[302275]: pam_unix(sudo:session): session closed for user root Feb 20 08:40:11 np0005625201 runuser[302350]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:12 np0005625201 runuser[302350]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:12 np0005625201 sudo[302462]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:40:12 np0005625201 sudo[302462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:40:12 np0005625201 sudo[302462]: pam_unix(sudo:session): session closed for user root Feb 20 08:40:12 np0005625201 runuser[302493]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:13 np0005625201 runuser[302493]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:13 np0005625201 runuser[302555]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:14 np0005625201 runuser[302555]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:19 np0005625201 sshd[302923]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:40:24 np0005625201 runuser[303598]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:25 np0005625201 runuser[303598]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:25 np0005625201 runuser[303735]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:26 np0005625201 runuser[303735]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:26 np0005625201 runuser[303808]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:27 np0005625201 sshd[303749]: Invalid user dixi from 103.183.75.204 port 60178 Feb 20 08:40:27 np0005625201 runuser[303808]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:27 np0005625201 sshd[303749]: Received disconnect from 103.183.75.204 port 60178:11: Bye Bye [preauth] Feb 20 08:40:27 np0005625201 sshd[303749]: Disconnected from invalid user dixi 103.183.75.204 port 60178 [preauth] Feb 20 08:40:37 np0005625201 runuser[304333]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:38 np0005625201 runuser[304333]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:38 np0005625201 runuser[304402]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:39 np0005625201 runuser[304402]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:39 np0005625201 runuser[304480]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:40 np0005625201 runuser[304480]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:41 np0005625201 sshd[304641]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:40:50 np0005625201 runuser[305292]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:51 np0005625201 sshd[305287]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:40:51 np0005625201 runuser[305292]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:51 np0005625201 runuser[305431]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:52 np0005625201 runuser[305431]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:40:52 np0005625201 runuser[305501]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:40:53 np0005625201 runuser[305501]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:03 np0005625201 sshd[306262]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:41:03 np0005625201 runuser[306284]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:04 np0005625201 runuser[306284]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:04 np0005625201 runuser[306451]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:05 np0005625201 runuser[306451]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:05 np0005625201 runuser[306513]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:06 np0005625201 runuser[306513]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:13 np0005625201 sudo[306915]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:41:13 np0005625201 sudo[306915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:41:13 np0005625201 sudo[306915]: pam_unix(sudo:session): session closed for user root Feb 20 08:41:13 np0005625201 sudo[306930]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 08:41:13 np0005625201 sudo[306930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:41:13 np0005625201 sudo[306930]: pam_unix(sudo:session): session closed for user root Feb 20 08:41:13 np0005625201 sudo[307009]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:41:13 np0005625201 sudo[307009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:41:13 np0005625201 sudo[307009]: pam_unix(sudo:session): session closed for user root Feb 20 08:41:13 np0005625201 sudo[307041]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:41:13 np0005625201 sudo[307041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:41:14 np0005625201 sudo[307041]: pam_unix(sudo:session): session closed for user root Feb 20 08:41:14 np0005625201 sudo[307193]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:41:14 np0005625201 sudo[307193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:41:14 np0005625201 sudo[307193]: pam_unix(sudo:session): session closed for user root Feb 20 08:41:16 np0005625201 runuser[307244]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:17 np0005625201 runuser[307244]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:17 np0005625201 runuser[307402]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:18 np0005625201 runuser[307402]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:18 np0005625201 runuser[307472]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:18 np0005625201 runuser[307472]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:26 np0005625201 sshd[308303]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:41:29 np0005625201 runuser[308408]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:29 np0005625201 runuser[308408]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:30 np0005625201 runuser[308479]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:30 np0005625201 runuser[308479]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:30 np0005625201 runuser[308549]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:31 np0005625201 runuser[308549]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:42 np0005625201 runuser[309106]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:42 np0005625201 runuser[309106]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:42 np0005625201 runuser[309191]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:43 np0005625201 runuser[309191]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:43 np0005625201 runuser[309260]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:44 np0005625201 runuser[309260]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:44 np0005625201 sshd[309458]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:41:54 np0005625201 runuser[310251]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:55 np0005625201 runuser[310251]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:55 np0005625201 runuser[310421]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:56 np0005625201 runuser[310421]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:41:56 np0005625201 runuser[310551]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:41:57 np0005625201 runuser[310551]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:07 np0005625201 runuser[311137]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:08 np0005625201 runuser[311137]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:08 np0005625201 runuser[311254]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:09 np0005625201 runuser[311254]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:09 np0005625201 runuser[311316]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:09 np0005625201 runuser[311316]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:10 np0005625201 sshd[311399]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:42:15 np0005625201 sudo[311693]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:42:15 np0005625201 sudo[311693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:42:15 np0005625201 sudo[311693]: pam_unix(sudo:session): session closed for user root Feb 20 08:42:15 np0005625201 sudo[311715]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:42:15 np0005625201 sudo[311715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:42:16 np0005625201 sudo[311715]: pam_unix(sudo:session): session closed for user root Feb 20 08:42:16 np0005625201 sudo[311793]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:42:16 np0005625201 sudo[311793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:42:16 np0005625201 sudo[311793]: pam_unix(sudo:session): session closed for user root Feb 20 08:42:18 np0005625201 sshd[311824]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:42:20 np0005625201 runuser[311978]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:21 np0005625201 runuser[311978]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:21 np0005625201 runuser[312137]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:22 np0005625201 runuser[312137]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:22 np0005625201 runuser[312268]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:22 np0005625201 runuser[312268]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:29 np0005625201 sshd[312902]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:42:33 np0005625201 runuser[313089]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:34 np0005625201 runuser[313089]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:34 np0005625201 runuser[313158]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:34 np0005625201 runuser[313158]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:34 np0005625201 runuser[313318]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:35 np0005625201 runuser[313318]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:46 np0005625201 runuser[313925]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:47 np0005625201 runuser[313925]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:47 np0005625201 runuser[314003]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:47 np0005625201 runuser[314003]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:47 np0005625201 runuser[314081]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:42:48 np0005625201 runuser[314081]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:42:54 np0005625201 sshd[314412]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:42:59 np0005625201 runuser[315144]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:00 np0005625201 runuser[315144]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:00 np0005625201 runuser[315231]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:00 np0005625201 runuser[315231]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:00 np0005625201 runuser[315293]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:01 np0005625201 runuser[315293]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:03 np0005625201 sshd[315361]: Invalid user max from 122.166.49.42 port 51770 Feb 20 08:43:03 np0005625201 sshd[315361]: Received disconnect from 122.166.49.42 port 51770:11: Bye Bye [preauth] Feb 20 08:43:03 np0005625201 sshd[315361]: Disconnected from invalid user max 122.166.49.42 port 51770 [preauth] Feb 20 08:43:12 np0005625201 runuser[315819]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:13 np0005625201 runuser[315819]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:13 np0005625201 runuser[315957]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:13 np0005625201 sshd[315813]: Invalid user systemd from 111.68.98.152 port 53178 Feb 20 08:43:13 np0005625201 sshd[315813]: Received disconnect from 111.68.98.152 port 53178:11: Bye Bye [preauth] Feb 20 08:43:13 np0005625201 sshd[315813]: Disconnected from invalid user systemd 111.68.98.152 port 53178 [preauth] Feb 20 08:43:13 np0005625201 runuser[315957]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:13 np0005625201 runuser[316027]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:14 np0005625201 sshd[316082]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:43:14 np0005625201 runuser[316027]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:17 np0005625201 sudo[316241]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:43:17 np0005625201 sudo[316241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:43:17 np0005625201 sudo[316241]: pam_unix(sudo:session): session closed for user root Feb 20 08:43:17 np0005625201 sudo[316268]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:43:17 np0005625201 sudo[316268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:43:17 np0005625201 sudo[316268]: pam_unix(sudo:session): session closed for user root Feb 20 08:43:19 np0005625201 sudo[316403]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:43:19 np0005625201 sudo[316403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:43:19 np0005625201 sudo[316403]: pam_unix(sudo:session): session closed for user root Feb 20 08:43:25 np0005625201 runuser[316970]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:25 np0005625201 runuser[316970]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:26 np0005625201 runuser[317206]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:26 np0005625201 runuser[317206]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:26 np0005625201 runuser[317268]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:27 np0005625201 runuser[317268]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:38 np0005625201 runuser[317882]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:38 np0005625201 runuser[317882]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:38 np0005625201 runuser[317959]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:39 np0005625201 sshd[317976]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:43:39 np0005625201 runuser[317959]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:39 np0005625201 runuser[318031]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:40 np0005625201 runuser[318031]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:42 np0005625201 sshd[318182]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:43:51 np0005625201 runuser[318585]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:51 np0005625201 runuser[318585]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:52 np0005625201 runuser[318670]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:52 np0005625201 runuser[318670]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:43:52 np0005625201 runuser[318823]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:43:53 np0005625201 runuser[318823]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:00 np0005625201 sshd[319714]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:44:04 np0005625201 runuser[319853]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:04 np0005625201 runuser[319853]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:04 np0005625201 runuser[319949]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:05 np0005625201 runuser[319949]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:05 np0005625201 runuser[320101]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:06 np0005625201 runuser[320101]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:16 np0005625201 sshd[320544]: Received disconnect from 103.183.75.204 port 41058:11: Bye Bye [preauth] Feb 20 08:44:16 np0005625201 sshd[320544]: Disconnected from authenticating user root 103.183.75.204 port 41058 [preauth] Feb 20 08:44:16 np0005625201 runuser[320664]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:17 np0005625201 runuser[320664]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:17 np0005625201 runuser[320750]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:18 np0005625201 runuser[320750]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:18 np0005625201 runuser[320820]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:19 np0005625201 runuser[320820]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:19 np0005625201 sudo[320955]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:44:19 np0005625201 sudo[320955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:44:19 np0005625201 sudo[320955]: pam_unix(sudo:session): session closed for user root Feb 20 08:44:19 np0005625201 sudo[320972]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:44:19 np0005625201 sudo[320972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:44:20 np0005625201 sshd[320953]: Invalid user x from 212.233.136.201 port 57942 Feb 20 08:44:20 np0005625201 sshd[320953]: Received disconnect from 212.233.136.201 port 57942:11: Bye Bye [preauth] Feb 20 08:44:20 np0005625201 sshd[320953]: Disconnected from invalid user x 212.233.136.201 port 57942 [preauth] Feb 20 08:44:20 np0005625201 sudo[320972]: pam_unix(sudo:session): session closed for user root Feb 20 08:44:21 np0005625201 sudo[321042]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:44:21 np0005625201 sudo[321042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:44:21 np0005625201 sudo[321042]: pam_unix(sudo:session): session closed for user root Feb 20 08:44:23 np0005625201 sshd[321267]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:44:29 np0005625201 runuser[321847]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:30 np0005625201 runuser[321847]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:30 np0005625201 runuser[321932]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:31 np0005625201 runuser[321932]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:31 np0005625201 runuser[322050]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:32 np0005625201 runuser[322050]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:40 np0005625201 sshd[31257]: Received disconnect from 192.168.122.100 port 33292:11: disconnected by user Feb 20 08:44:40 np0005625201 sshd[31257]: Disconnected from user tripleo-admin 192.168.122.100 port 33292 Feb 20 08:44:40 np0005625201 sshd[31236]: pam_unix(sshd:session): session closed for user tripleo-admin Feb 20 08:44:43 np0005625201 runuser[322554]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:43 np0005625201 runuser[322554]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:43 np0005625201 runuser[322712]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:44 np0005625201 runuser[322712]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:44 np0005625201 runuser[322791]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:45 np0005625201 runuser[322791]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:46 np0005625201 sshd[322979]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:44:56 np0005625201 runuser[323536]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:56 np0005625201 runuser[323536]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:56 np0005625201 runuser[323721]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:57 np0005625201 runuser[323721]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:44:57 np0005625201 runuser[323959]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:44:58 np0005625201 runuser[323959]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:08 np0005625201 sshd[324656]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:45:09 np0005625201 runuser[324676]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:09 np0005625201 sshd[324671]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:45:09 np0005625201 runuser[324676]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:10 np0005625201 runuser[324764]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:10 np0005625201 runuser[324764]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:10 np0005625201 runuser[324834]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:11 np0005625201 runuser[324834]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:21 np0005625201 sudo[325361]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:45:21 np0005625201 sudo[325361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:45:21 np0005625201 sudo[325361]: pam_unix(sudo:session): session closed for user root Feb 20 08:45:21 np0005625201 sudo[325410]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:45:21 np0005625201 sudo[325410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:45:22 np0005625201 runuser[325488]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:22 np0005625201 sudo[325410]: pam_unix(sudo:session): session closed for user root Feb 20 08:45:22 np0005625201 runuser[325488]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:22 np0005625201 sudo[325569]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:45:22 np0005625201 sudo[325569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:45:22 np0005625201 sudo[325569]: pam_unix(sudo:session): session closed for user root Feb 20 08:45:22 np0005625201 runuser[325593]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:23 np0005625201 runuser[325593]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:23 np0005625201 runuser[325671]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:24 np0005625201 runuser[325671]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:33 np0005625201 sshd[326519]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:45:35 np0005625201 runuser[326627]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:35 np0005625201 runuser[326627]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:35 np0005625201 runuser[326704]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:36 np0005625201 runuser[326704]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:36 np0005625201 runuser[326856]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:37 np0005625201 runuser[326856]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:47 np0005625201 runuser[327437]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:48 np0005625201 runuser[327437]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:48 np0005625201 runuser[327514]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:49 np0005625201 runuser[327514]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:49 np0005625201 runuser[327592]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:45:50 np0005625201 runuser[327592]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:45:53 np0005625201 sshd[327775]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:46:00 np0005625201 runuser[328577]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:01 np0005625201 runuser[328577]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:01 np0005625201 runuser[328654]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:02 np0005625201 runuser[328654]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:02 np0005625201 runuser[328791]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:03 np0005625201 runuser[328791]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:10 np0005625201 sshd[329242]: Received disconnect from 43.245.222.27 port 51162:11: Bye Bye [preauth] Feb 20 08:46:10 np0005625201 sshd[329242]: Disconnected from 43.245.222.27 port 51162 [preauth] Feb 20 08:46:13 np0005625201 runuser[329336]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:14 np0005625201 runuser[329336]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:14 np0005625201 runuser[329466]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:15 np0005625201 runuser[329466]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:15 np0005625201 runuser[329544]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:15 np0005625201 runuser[329544]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:19 np0005625201 sshd[329820]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:46:23 np0005625201 sudo[330017]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:46:23 np0005625201 sudo[330017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:46:23 np0005625201 sudo[330017]: pam_unix(sudo:session): session closed for user root Feb 20 08:46:23 np0005625201 sudo[330043]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:46:23 np0005625201 sudo[330043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:46:23 np0005625201 sudo[330043]: pam_unix(sudo:session): session closed for user root Feb 20 08:46:24 np0005625201 sudo[330130]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:46:24 np0005625201 sudo[330130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:46:24 np0005625201 sudo[330130]: pam_unix(sudo:session): session closed for user root Feb 20 08:46:26 np0005625201 runuser[330330]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:27 np0005625201 runuser[330330]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:27 np0005625201 runuser[330549]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:28 np0005625201 runuser[330549]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:28 np0005625201 runuser[330637]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:29 np0005625201 runuser[330637]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:34 np0005625201 sshd[331116]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:46:38 np0005625201 sshd[331405]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:46:39 np0005625201 runuser[331471]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:40 np0005625201 runuser[331471]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:40 np0005625201 runuser[331558]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:41 np0005625201 runuser[331558]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:41 np0005625201 runuser[331620]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:42 np0005625201 runuser[331620]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:52 np0005625201 runuser[332124]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:53 np0005625201 runuser[332124]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:53 np0005625201 runuser[332209]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:54 np0005625201 runuser[332209]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:46:54 np0005625201 runuser[332332]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:46:55 np0005625201 runuser[332332]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:05 np0005625201 runuser[333387]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:06 np0005625201 runuser[333387]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:06 np0005625201 runuser[333520]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:07 np0005625201 runuser[333520]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:07 np0005625201 runuser[333674]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:07 np0005625201 sshd[333669]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:47:08 np0005625201 runuser[333674]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:18 np0005625201 runuser[334261]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:19 np0005625201 runuser[334261]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:19 np0005625201 runuser[334340]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:20 np0005625201 sshd[334314]: Invalid user testusr from 111.68.98.152 port 48770 Feb 20 08:47:20 np0005625201 runuser[334340]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:20 np0005625201 runuser[334412]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:20 np0005625201 sshd[334314]: Received disconnect from 111.68.98.152 port 48770:11: Bye Bye [preauth] Feb 20 08:47:20 np0005625201 sshd[334314]: Disconnected from invalid user testusr 111.68.98.152 port 48770 [preauth] Feb 20 08:47:21 np0005625201 runuser[334412]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:22 np0005625201 sshd[334576]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:47:24 np0005625201 sudo[334634]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:47:24 np0005625201 sudo[334634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:47:24 np0005625201 sudo[334634]: pam_unix(sudo:session): session closed for user root Feb 20 08:47:24 np0005625201 sudo[334668]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:47:24 np0005625201 sudo[334668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:47:25 np0005625201 sudo[334668]: pam_unix(sudo:session): session closed for user root Feb 20 08:47:26 np0005625201 sudo[334832]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:47:26 np0005625201 sudo[334832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:47:26 np0005625201 sudo[334832]: pam_unix(sudo:session): session closed for user root Feb 20 08:47:31 np0005625201 runuser[335145]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:32 np0005625201 runuser[335145]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:32 np0005625201 runuser[335435]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:33 np0005625201 runuser[335435]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:33 np0005625201 runuser[335513]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:34 np0005625201 runuser[335513]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:44 np0005625201 runuser[336123]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:45 np0005625201 runuser[336123]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:45 np0005625201 runuser[336261]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:46 np0005625201 runuser[336261]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:46 np0005625201 runuser[336323]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:47 np0005625201 runuser[336323]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:51 np0005625201 sshd[336612]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:47:54 np0005625201 sshd[336694]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:47:57 np0005625201 runuser[337181]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:58 np0005625201 runuser[337181]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:58 np0005625201 runuser[337270]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:47:59 np0005625201 runuser[337270]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:47:59 np0005625201 runuser[337430]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:00 np0005625201 runuser[337430]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:06 np0005625201 sshd[337984]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:48:10 np0005625201 runuser[338240]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:11 np0005625201 runuser[338240]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:11 np0005625201 runuser[338325]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:12 np0005625201 runuser[338325]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:12 np0005625201 runuser[338414]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:13 np0005625201 runuser[338414]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:23 np0005625201 runuser[338978]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:24 np0005625201 runuser[338978]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:24 np0005625201 runuser[339059]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:25 np0005625201 runuser[339059]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:25 np0005625201 runuser[339121]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:26 np0005625201 runuser[339121]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:26 np0005625201 sudo[339272]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:48:26 np0005625201 sudo[339272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:48:26 np0005625201 sudo[339272]: pam_unix(sudo:session): session closed for user root Feb 20 08:48:27 np0005625201 sudo[339297]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:48:27 np0005625201 sudo[339297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:48:28 np0005625201 sudo[339297]: pam_unix(sudo:session): session closed for user root Feb 20 08:48:28 np0005625201 sudo[339489]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:48:28 np0005625201 sudo[339489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:48:28 np0005625201 sudo[339489]: pam_unix(sudo:session): session closed for user root Feb 20 08:48:33 np0005625201 sshd[339721]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:48:36 np0005625201 runuser[340073]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:37 np0005625201 runuser[340073]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:37 np0005625201 runuser[340302]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:38 np0005625201 runuser[340302]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:38 np0005625201 runuser[340380]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:39 np0005625201 runuser[340380]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:49 np0005625201 runuser[340977]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:50 np0005625201 sshd[340974]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:48:50 np0005625201 runuser[340977]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:50 np0005625201 runuser[341065]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:51 np0005625201 runuser[341065]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:48:51 np0005625201 runuser[341168]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:48:52 np0005625201 runuser[341168]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:02 np0005625201 runuser[341946]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:03 np0005625201 runuser[341946]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:03 np0005625201 runuser[342022]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:04 np0005625201 runuser[342022]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:04 np0005625201 runuser[342093]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:05 np0005625201 runuser[342093]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:05 np0005625201 sshd[342308]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:49:16 np0005625201 runuser[342908]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:16 np0005625201 runuser[342908]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:16 np0005625201 runuser[343046]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:17 np0005625201 runuser[343046]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:17 np0005625201 runuser[343124]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:17 np0005625201 sshd[343253]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:49:18 np0005625201 runuser[343124]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:27 np0005625201 sshd[343634]: Invalid user mailer from 212.233.136.201 port 36580 Feb 20 08:49:27 np0005625201 sshd[343634]: Received disconnect from 212.233.136.201 port 36580:11: Bye Bye [preauth] Feb 20 08:49:27 np0005625201 sshd[343634]: Disconnected from invalid user mailer 212.233.136.201 port 36580 [preauth] Feb 20 08:49:28 np0005625201 sudo[343864]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:49:28 np0005625201 sudo[343864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:49:28 np0005625201 sudo[343864]: pam_unix(sudo:session): session closed for user root Feb 20 08:49:28 np0005625201 runuser[343882]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:28 np0005625201 sudo[343891]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:49:28 np0005625201 sudo[343891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:49:29 np0005625201 sudo[343891]: pam_unix(sudo:session): session closed for user root Feb 20 08:49:29 np0005625201 runuser[343882]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:29 np0005625201 runuser[344015]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:29 np0005625201 sudo[344031]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:49:29 np0005625201 sudo[344031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:49:29 np0005625201 sudo[344031]: pam_unix(sudo:session): session closed for user root Feb 20 08:49:30 np0005625201 runuser[344015]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:30 np0005625201 runuser[344087]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:31 np0005625201 runuser[344087]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:34 np0005625201 sshd[344332]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:49:41 np0005625201 runuser[344975]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:42 np0005625201 runuser[344975]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:42 np0005625201 runuser[345060]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:43 np0005625201 runuser[345060]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:43 np0005625201 runuser[345138]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:44 np0005625201 runuser[345138]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:54 np0005625201 runuser[345664]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:55 np0005625201 runuser[345664]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:55 np0005625201 runuser[345749]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:56 np0005625201 runuser[345749]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:49:56 np0005625201 runuser[345839]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:49:57 np0005625201 runuser[345839]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:01 np0005625201 sshd[346332]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:50:07 np0005625201 runuser[346858]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:08 np0005625201 runuser[346858]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:08 np0005625201 runuser[347017]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:09 np0005625201 runuser[347017]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:09 np0005625201 runuser[347095]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:10 np0005625201 runuser[347095]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:13 np0005625201 sshd[347377]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:50:19 np0005625201 sshd[347736]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:50:21 np0005625201 runuser[347768]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:21 np0005625201 runuser[347768]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:21 np0005625201 runuser[347853]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:22 np0005625201 runuser[347853]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:22 np0005625201 runuser[347931]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:23 np0005625201 runuser[347931]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:30 np0005625201 sudo[348416]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:50:30 np0005625201 sudo[348416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:50:30 np0005625201 sudo[348416]: pam_unix(sudo:session): session closed for user root Feb 20 08:50:30 np0005625201 sudo[348446]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 08:50:30 np0005625201 sudo[348446]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:50:31 np0005625201 sudo[348446]: pam_unix(sudo:session): session closed for user root Feb 20 08:50:32 np0005625201 sudo[348655]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:50:32 np0005625201 sudo[348655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:50:32 np0005625201 sudo[348655]: pam_unix(sudo:session): session closed for user root Feb 20 08:50:32 np0005625201 sudo[348670]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:50:32 np0005625201 sudo[348670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:50:32 np0005625201 sudo[348670]: pam_unix(sudo:session): session closed for user root Feb 20 08:50:33 np0005625201 sudo[348756]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:50:33 np0005625201 sudo[348756]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:50:33 np0005625201 sudo[348756]: pam_unix(sudo:session): session closed for user root Feb 20 08:50:34 np0005625201 runuser[348858]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:34 np0005625201 runuser[348858]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:34 np0005625201 runuser[348959]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:35 np0005625201 runuser[348959]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:35 np0005625201 runuser[349029]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:36 np0005625201 runuser[349029]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:46 np0005625201 sshd[349804]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:50:46 np0005625201 runuser[349834]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:47 np0005625201 runuser[349834]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:47 np0005625201 runuser[349989]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:48 np0005625201 runuser[349989]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:48 np0005625201 runuser[350133]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:50:49 np0005625201 runuser[350133]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:50:59 np0005625201 runuser[350875]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:00 np0005625201 runuser[350875]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:00 np0005625201 runuser[350955]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:01 np0005625201 runuser[350955]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:01 np0005625201 runuser[351076]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:02 np0005625201 runuser[351076]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:06 np0005625201 sshd[351321]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:51:12 np0005625201 runuser[351920]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:13 np0005625201 runuser[351920]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:13 np0005625201 runuser[351997]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:14 np0005625201 runuser[351997]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:14 np0005625201 runuser[352131]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:15 np0005625201 runuser[352131]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:16 np0005625201 sshd[352193]: Invalid user nutanix from 111.68.98.152 port 36056 Feb 20 08:51:16 np0005625201 sshd[352193]: Received disconnect from 111.68.98.152 port 36056:11: Bye Bye [preauth] Feb 20 08:51:16 np0005625201 sshd[352193]: Disconnected from invalid user nutanix 111.68.98.152 port 36056 [preauth] Feb 20 08:51:23 np0005625201 sshd[352569]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:51:26 np0005625201 runuser[352697]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:27 np0005625201 runuser[352697]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:27 np0005625201 runuser[352829]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:28 np0005625201 runuser[352829]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:28 np0005625201 runuser[352960]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:28 np0005625201 runuser[352960]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:31 np0005625201 sshd[353166]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:51:34 np0005625201 sudo[353277]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:51:34 np0005625201 sudo[353277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:51:34 np0005625201 sudo[353277]: pam_unix(sudo:session): session closed for user root Feb 20 08:51:34 np0005625201 sudo[353292]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 08:51:34 np0005625201 sudo[353292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:51:34 np0005625201 sudo[353292]: pam_unix(sudo:session): session closed for user root Feb 20 08:51:34 np0005625201 sudo[353394]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:51:34 np0005625201 sudo[353394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:51:34 np0005625201 sudo[353394]: pam_unix(sudo:session): session closed for user root Feb 20 08:51:34 np0005625201 sudo[353429]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:51:34 np0005625201 sudo[353429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:51:35 np0005625201 sudo[353429]: pam_unix(sudo:session): session closed for user root Feb 20 08:51:35 np0005625201 sudo[353515]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:51:35 np0005625201 sudo[353515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:51:35 np0005625201 sudo[353515]: pam_unix(sudo:session): session closed for user root Feb 20 08:51:39 np0005625201 runuser[353765]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:40 np0005625201 runuser[353765]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:40 np0005625201 runuser[354047]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:41 np0005625201 runuser[354047]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:41 np0005625201 runuser[354118]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:42 np0005625201 runuser[354118]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:52 np0005625201 runuser[354794]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:53 np0005625201 sshd[354847]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:51:53 np0005625201 runuser[354794]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:53 np0005625201 runuser[354873]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:54 np0005625201 runuser[354873]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:51:54 np0005625201 runuser[354951]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:51:55 np0005625201 runuser[354951]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:05 np0005625201 runuser[355765]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:06 np0005625201 runuser[355765]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:06 np0005625201 runuser[355850]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:07 np0005625201 runuser[355850]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:07 np0005625201 runuser[355910]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:07 np0005625201 runuser[355910]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:17 np0005625201 sshd[356702]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:52:18 np0005625201 runuser[356723]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:19 np0005625201 runuser[356723]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:19 np0005625201 runuser[356936]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:20 np0005625201 runuser[356936]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:20 np0005625201 runuser[357020]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:20 np0005625201 runuser[357020]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:31 np0005625201 runuser[357651]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:32 np0005625201 runuser[357651]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:32 np0005625201 runuser[357736]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:32 np0005625201 runuser[357736]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:32 np0005625201 runuser[357799]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:33 np0005625201 sshd[357781]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:52:33 np0005625201 runuser[357799]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:36 np0005625201 sudo[358024]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:52:36 np0005625201 sudo[358024]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:52:36 np0005625201 sudo[358024]: pam_unix(sudo:session): session closed for user root Feb 20 08:52:36 np0005625201 sudo[358068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:52:36 np0005625201 sudo[358068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:52:36 np0005625201 sudo[358068]: pam_unix(sudo:session): session closed for user root Feb 20 08:52:37 np0005625201 sudo[358164]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:52:37 np0005625201 sudo[358164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:52:37 np0005625201 sudo[358164]: pam_unix(sudo:session): session closed for user root Feb 20 08:52:40 np0005625201 sshd[358362]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:52:44 np0005625201 runuser[358691]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:44 np0005625201 runuser[358691]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:45 np0005625201 runuser[358817]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:45 np0005625201 runuser[358817]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:45 np0005625201 runuser[358916]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:46 np0005625201 runuser[358916]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:57 np0005625201 runuser[359489]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:57 np0005625201 runuser[359489]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:58 np0005625201 runuser[359607]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:58 np0005625201 runuser[359607]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:52:58 np0005625201 runuser[359814]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:52:59 np0005625201 runuser[359814]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:00 np0005625201 sshd[360057]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:53:10 np0005625201 runuser[360558]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:10 np0005625201 runuser[360558]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:10 np0005625201 runuser[360637]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:11 np0005625201 runuser[360637]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:11 np0005625201 runuser[360707]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:12 np0005625201 runuser[360707]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:22 np0005625201 runuser[361588]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:23 np0005625201 runuser[361588]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:23 np0005625201 runuser[361673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:24 np0005625201 runuser[361673]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:24 np0005625201 runuser[361801]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:24 np0005625201 sshd[361827]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:53:25 np0005625201 runuser[361801]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:35 np0005625201 runuser[362342]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:36 np0005625201 runuser[362342]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:36 np0005625201 runuser[362427]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:37 np0005625201 runuser[362427]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:37 np0005625201 runuser[362497]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:37 np0005625201 sudo[362544]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:53:37 np0005625201 sudo[362544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:53:37 np0005625201 sudo[362544]: pam_unix(sudo:session): session closed for user root Feb 20 08:53:37 np0005625201 sudo[362568]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:53:37 np0005625201 sudo[362568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:53:38 np0005625201 runuser[362497]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:38 np0005625201 sudo[362568]: pam_unix(sudo:session): session closed for user root Feb 20 08:53:40 np0005625201 sudo[362910]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:53:40 np0005625201 sudo[362910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:53:40 np0005625201 sudo[362910]: pam_unix(sudo:session): session closed for user root Feb 20 08:53:42 np0005625201 sshd[362975]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:53:44 np0005625201 sshd[363093]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:53:49 np0005625201 runuser[363430]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:49 np0005625201 runuser[363430]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:49 np0005625201 runuser[363682]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:50 np0005625201 runuser[363682]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:53:50 np0005625201 runuser[363762]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:53:51 np0005625201 runuser[363762]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:01 np0005625201 runuser[364514]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:02 np0005625201 runuser[364514]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:02 np0005625201 runuser[364591]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:03 np0005625201 runuser[364591]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:03 np0005625201 runuser[364662]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:04 np0005625201 runuser[364662]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:09 np0005625201 sshd[364883]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:54:14 np0005625201 runuser[365263]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:15 np0005625201 runuser[365263]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:15 np0005625201 runuser[365551]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:16 np0005625201 runuser[365551]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:16 np0005625201 runuser[365629]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:17 np0005625201 runuser[365629]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:25 np0005625201 sshd[366233]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:54:27 np0005625201 runuser[366295]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:28 np0005625201 runuser[366295]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:28 np0005625201 runuser[366380]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:29 np0005625201 runuser[366380]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:29 np0005625201 runuser[366442]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:30 np0005625201 runuser[366442]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:40 np0005625201 sudo[367202]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:54:40 np0005625201 sudo[367202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:54:40 np0005625201 sudo[367202]: pam_unix(sudo:session): session closed for user root Feb 20 08:54:40 np0005625201 sudo[367219]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:54:40 np0005625201 sudo[367219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:54:40 np0005625201 runuser[367246]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:41 np0005625201 sudo[367219]: pam_unix(sudo:session): session closed for user root Feb 20 08:54:41 np0005625201 runuser[367246]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:41 np0005625201 runuser[367370]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:41 np0005625201 sudo[367363]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:54:41 np0005625201 sudo[367363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:54:41 np0005625201 sudo[367363]: pam_unix(sudo:session): session closed for user root Feb 20 08:54:42 np0005625201 runuser[367370]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:42 np0005625201 runuser[367448]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:43 np0005625201 runuser[367448]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:51 np0005625201 sshd[368182]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:54:51 np0005625201 sshd[368171]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:54:51 np0005625201 sshd[368172]: Invalid user iksi from 212.233.136.201 port 43462 Feb 20 08:54:51 np0005625201 sshd[368172]: Received disconnect from 212.233.136.201 port 43462:11: Bye Bye [preauth] Feb 20 08:54:51 np0005625201 sshd[368172]: Disconnected from invalid user iksi 212.233.136.201 port 43462 [preauth] Feb 20 08:54:54 np0005625201 runuser[368318]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:54 np0005625201 runuser[368318]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:54 np0005625201 runuser[368395]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:55 np0005625201 runuser[368395]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:54:55 np0005625201 runuser[368482]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:54:56 np0005625201 runuser[368482]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:00 np0005625201 runuser[77477]: pam_unix(runuser-l:session): session closed for user mysql Feb 20 08:55:03 np0005625201 runuser[369308]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:55:04 np0005625201 runuser[369308]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:04 np0005625201 runuser[369361]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:55:04 np0005625201 runuser[369361]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:04 np0005625201 runuser[369413]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:55:05 np0005625201 runuser[369413]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:05 np0005625201 runuser[369465]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Feb 20 08:55:06 np0005625201 runuser[369465]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:06 np0005625201 runuser[81588]: pam_unix(runuser:session): session closed for user rabbitmq Feb 20 08:55:07 np0005625201 sshd[369520]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:55:25 np0005625201 sshd[370276]: Received disconnect from 111.68.98.152 port 38770:11: Bye Bye [preauth] Feb 20 08:55:25 np0005625201 sshd[370276]: Disconnected from authenticating user root 111.68.98.152 port 38770 [preauth] Feb 20 08:55:34 np0005625201 sshd[370458]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:55:42 np0005625201 sudo[370555]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:55:42 np0005625201 sudo[370555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:55:42 np0005625201 sudo[370555]: pam_unix(sudo:session): session closed for user root Feb 20 08:55:42 np0005625201 sudo[370594]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:55:42 np0005625201 sudo[370594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:55:43 np0005625201 sudo[370594]: pam_unix(sudo:session): session closed for user root Feb 20 08:55:43 np0005625201 sudo[370650]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:55:43 np0005625201 sudo[370650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:55:43 np0005625201 sudo[370650]: pam_unix(sudo:session): session closed for user root Feb 20 08:55:49 np0005625201 sshd[370883]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:56:00 np0005625201 sshd[371063]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:56:13 np0005625201 sshd[371182]: Accepted publickey for zuul from 192.168.122.30 port 50876 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:56:13 np0005625201 systemd[371218]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:56:13 np0005625201 sshd[371182]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:56:14 np0005625201 sudo[371343]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lebugfctfruhinrmaklmyvkjwceqyubd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577773.5831754-23-122422932798234/AnsiballZ_stat.py Feb 20 08:56:14 np0005625201 sudo[371343]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:14 np0005625201 sudo[371343]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:14 np0005625201 sudo[371435]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iwtegkxihogvjwbvmldskxipvriyxvvx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577774.4901524-62-111314929224438/AnsiballZ_stat.py Feb 20 08:56:14 np0005625201 sudo[371435]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:14 np0005625201 sudo[371435]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:15 np0005625201 sudo[371529]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ipofhyhdubrrrupvfhvrbcswimlkicef ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577775.16358-86-135762140998655/AnsiballZ_command.py Feb 20 08:56:15 np0005625201 sudo[371529]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:15 np0005625201 sudo[371529]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:17 np0005625201 sshd[371695]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:56:21 np0005625201 sshd[371182]: pam_unix(sshd:session): session closed for user zuul Feb 20 08:56:31 np0005625201 sshd[372457]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:56:39 np0005625201 sshd[372499]: Accepted publickey for zuul from 192.168.122.31 port 55332 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 08:56:39 np0005625201 systemd[372502]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:56:39 np0005625201 sshd[372499]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 08:56:40 np0005625201 sudo[372608]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-abeyracogzapnfeojqgvzjpilnhazsnx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577799.9015813-20-135099175938257/AnsiballZ_systemd_service.py Feb 20 08:56:40 np0005625201 sudo[372608]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:41 np0005625201 sudo[372608]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:43 np0005625201 sudo[372935]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:56:43 np0005625201 sudo[372935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:56:43 np0005625201 sudo[372935]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:43 np0005625201 sudo[372955]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:56:43 np0005625201 sudo[372955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:56:44 np0005625201 sudo[372955]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:45 np0005625201 sudo[373074]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:56:45 np0005625201 sudo[373074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:56:45 np0005625201 sudo[373074]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:52 np0005625201 sudo[373842]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-goqjbifpspxictsuhmdrvhdsibuinysv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577812.3484085-111-131472617813948/AnsiballZ_systemd_service.py Feb 20 08:56:52 np0005625201 sudo[373842]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:53 np0005625201 sudo[373842]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:53 np0005625201 sudo[373972]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dmaumkdkmrouaeztxengxgrcvdykxkhh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577813.4759898-111-263922126946740/AnsiballZ_systemd_service.py Feb 20 08:56:53 np0005625201 sudo[373972]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:54 np0005625201 sudo[373972]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:54 np0005625201 sudo[374144]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hevhjquebwgxjwxjngdypvwrfknkzgdy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577814.6326838-111-31917642097881/AnsiballZ_systemd_service.py Feb 20 08:56:54 np0005625201 sudo[374144]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:56 np0005625201 sudo[374144]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:57 np0005625201 sudo[374287]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vseykmrtuyaafnaoturrafekdsxazdll ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577816.8184536-111-200704074495920/AnsiballZ_systemd_service.py Feb 20 08:56:57 np0005625201 sudo[374287]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:56:58 np0005625201 sudo[374287]: pam_unix(sudo:session): session closed for user root Feb 20 08:56:58 np0005625201 sudo[374436]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-inhruubkoloxpzdkgkpmdxrtfkrvgtgj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577818.2099934-111-62852880541924/AnsiballZ_systemd_service.py Feb 20 08:56:58 np0005625201 sudo[374436]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:00 np0005625201 sudo[374436]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:00 np0005625201 sudo[374599]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tmpxepmhleuujiftiifqltqkgfrxgbrz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577820.446467-111-22134627648314/AnsiballZ_systemd_service.py Feb 20 08:57:00 np0005625201 sudo[374599]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:01 np0005625201 sudo[374599]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:01 np0005625201 sudo[374729]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qslwoaxamxskyluazthsrozueakltcvo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577821.6112049-111-228169358258427/AnsiballZ_systemd_service.py Feb 20 08:57:01 np0005625201 sudo[374729]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:02 np0005625201 sshd[374731]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:57:02 np0005625201 sudo[374729]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:03 np0005625201 sudo[374918]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tajendrymesqqusaaabvbrjgefpzjedd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577822.785016-111-20978064844112/AnsiballZ_systemd_service.py Feb 20 08:57:03 np0005625201 sudo[374918]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:03 np0005625201 sudo[374918]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:04 np0005625201 sudo[375049]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mytayrtwnrkrcurlwoudrvpsrvutwqei ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577823.9305458-111-248774260584547/AnsiballZ_systemd_service.py Feb 20 08:57:04 np0005625201 sudo[375049]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:04 np0005625201 sudo[375049]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:05 np0005625201 sudo[375179]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yjdbbjywboaxhsxwlegpxhwqhkjzegkg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577825.0424142-111-38045214788801/AnsiballZ_systemd_service.py Feb 20 08:57:05 np0005625201 sudo[375179]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:06 np0005625201 sudo[375179]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:06 np0005625201 sudo[375351]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpivkpygkondimucmxxnxpfyoiolasvf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577826.3227313-111-109566015456609/AnsiballZ_systemd_service.py Feb 20 08:57:06 np0005625201 sudo[375351]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:07 np0005625201 sudo[375351]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:08 np0005625201 sudo[375527]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oqezhnpctvrcorygrourovrtdbtuxiwq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577828.053444-111-236990912175091/AnsiballZ_systemd_service.py Feb 20 08:57:08 np0005625201 sudo[375527]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:08 np0005625201 sshd[375530]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:57:10 np0005625201 sudo[375527]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:10 np0005625201 sudo[375659]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tlqevsrbsgczjzbtmfoogfxbhzjvxobq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577830.3004396-111-245138094736955/AnsiballZ_systemd_service.py Feb 20 08:57:10 np0005625201 sudo[375659]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:12 np0005625201 sudo[375659]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:12 np0005625201 sudo[375827]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ftvuntggbbijaemxdmzssfoupfbuzfrs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577832.5558825-111-41563874459852/AnsiballZ_systemd_service.py Feb 20 08:57:12 np0005625201 sudo[375827]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:14 np0005625201 sudo[375827]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:14 np0005625201 sudo[376082]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbxhoqwqdvvqnqmaepdokgmyapwqimub ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577834.213806-111-159697107930045/AnsiballZ_systemd_service.py Feb 20 08:57:14 np0005625201 sudo[376082]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:15 np0005625201 sudo[376082]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:16 np0005625201 sudo[376255]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lzmrbaqwdjmfhuhcnazzyhllpvqviyfm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577836.0921555-111-262524328934876/AnsiballZ_systemd_service.py Feb 20 08:57:16 np0005625201 sudo[376255]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:17 np0005625201 sudo[376255]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:17 np0005625201 sudo[376385]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hociqfhsfqsndicwsfdrwoyourbopvyb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577837.258695-111-77716094564078/AnsiballZ_systemd_service.py Feb 20 08:57:17 np0005625201 sudo[376385]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:17 np0005625201 sshd[376388]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:57:18 np0005625201 sudo[376385]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:18 np0005625201 sudo[376542]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-odmwavtvlnxoluoegzgbkazcvqgvsncs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577838.4848423-111-200049117569239/AnsiballZ_systemd_service.py Feb 20 08:57:18 np0005625201 sudo[376542]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:19 np0005625201 sudo[376542]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:19 np0005625201 sudo[376672]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xyaatrvszptnixluaqttwtcsozlcqvhv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577839.6255944-111-218242939221283/AnsiballZ_systemd_service.py Feb 20 08:57:19 np0005625201 sudo[376672]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:23 np0005625201 sudo[376672]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:24 np0005625201 sudo[377075]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qvhxcppvzjxnujzcstvinqvtgalyzxyo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577844.0723212-111-267536596311181/AnsiballZ_systemd_service.py Feb 20 08:57:24 np0005625201 sudo[377075]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:29 np0005625201 sudo[377075]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:29 np0005625201 sudo[377378]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fdolakmzzrocnwpmumelcwclqhvnemgt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577849.2726374-111-93611256139710/AnsiballZ_systemd_service.py Feb 20 08:57:29 np0005625201 sudo[377378]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:30 np0005625201 sudo[377378]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:31 np0005625201 sudo[377551]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kwenaowaxukhlfhxpuflnbdytfjlkjaj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577850.748338-111-277501038261751/AnsiballZ_systemd_service.py Feb 20 08:57:31 np0005625201 sudo[377551]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:57:45 np0005625201 sudo[377641]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:57:45 np0005625201 sudo[377641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:57:45 np0005625201 sudo[377641]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:45 np0005625201 sudo[377656]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:57:45 np0005625201 sudo[377656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:57:46 np0005625201 sudo[377656]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:46 np0005625201 sudo[377703]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:57:46 np0005625201 sudo[377703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:57:46 np0005625201 sudo[377703]: pam_unix(sudo:session): session closed for user root Feb 20 08:57:47 np0005625201 sshd[377776]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:58:04 np0005625201 sshd[378151]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:58:16 np0005625201 sshd[378190]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:58:32 np0005625201 sudo[377551]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:32 np0005625201 sudo[378710]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzyijepbmueuercmxkadedfavvidkaes ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577912.3329668-111-155145632516420/AnsiballZ_systemd_service.py Feb 20 08:58:32 np0005625201 sudo[378710]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:33 np0005625201 sshd[378771]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:58:33 np0005625201 sudo[378710]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:33 np0005625201 sudo[378900]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rgjppajjdckjompnijfshhwvpwhkstww ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577913.593172-111-53760765471064/AnsiballZ_systemd_service.py Feb 20 08:58:33 np0005625201 sudo[378900]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:34 np0005625201 sudo[378900]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:35 np0005625201 sudo[379073]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rfnrosebrzxupjunvgtmfkdxiahnbzua ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577915.1047046-111-113153327662502/AnsiballZ_systemd_service.py Feb 20 08:58:35 np0005625201 sudo[379073]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:36 np0005625201 sudo[379073]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:36 np0005625201 sudo[379204]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eeuarermmyxkvmfrbxeuehdyswphzwjk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577916.367106-111-99370260739607/AnsiballZ_systemd_service.py Feb 20 08:58:36 np0005625201 sudo[379204]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:38 np0005625201 sudo[379204]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:39 np0005625201 sudo[379380]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dlkynpixqotnqkbrloelxlhvjuymjqpi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577919.0094953-111-245019812945790/AnsiballZ_systemd_service.py Feb 20 08:58:39 np0005625201 sudo[379380]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:40 np0005625201 sudo[379380]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:40 np0005625201 sudo[379559]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kuxjivxfeqxamxykxhbjlyvphtysqbhf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577920.610309-111-50189722756447/AnsiballZ_systemd_service.py Feb 20 08:58:40 np0005625201 sudo[379559]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:42 np0005625201 sudo[379559]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:43 np0005625201 sudo[379689]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-szqiabobmwfagnlkrcnlzrtxolvnfhfw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577922.7991064-111-117586676209376/AnsiballZ_systemd_service.py Feb 20 08:58:43 np0005625201 sudo[379689]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:43 np0005625201 sudo[379689]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:44 np0005625201 sudo[379820]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aolulzwrlhaazekdceppocwdekkafurz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577923.9261613-111-114164729272193/AnsiballZ_systemd_service.py Feb 20 08:58:44 np0005625201 sudo[379820]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:44 np0005625201 sudo[379820]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:45 np0005625201 sudo[379951]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tzrimxtxmewvuoyqlicjsoxiagdrmkzk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577925.0527928-111-221469190887729/AnsiballZ_systemd_service.py Feb 20 08:58:45 np0005625201 sudo[379951]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:47 np0005625201 sudo[379951]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:47 np0005625201 sudo[380067]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:58:47 np0005625201 sudo[380067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:58:47 np0005625201 sudo[380067]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:47 np0005625201 sudo[380109]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:58:47 np0005625201 sudo[380109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:58:47 np0005625201 sudo[380154]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxvbhbvsjvkjquqvanznbautvaccchal ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577927.1754-111-226280009874118/AnsiballZ_systemd_service.py Feb 20 08:58:47 np0005625201 sudo[380154]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:48 np0005625201 sudo[380109]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:48 np0005625201 sudo[380244]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:58:48 np0005625201 sudo[380244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:58:48 np0005625201 sudo[380244]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:48 np0005625201 sudo[380154]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:49 np0005625201 sudo[380379]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzxvgxlvtowxiwdbnwwtwbsejlxcvtjb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577928.8449936-111-43533761096697/AnsiballZ_systemd_service.py Feb 20 08:58:49 np0005625201 sudo[380379]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:49 np0005625201 sudo[380379]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:50 np0005625201 sudo[380509]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fsjgtlhxahkdvpxxumutglanvednwjvt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577930.041365-111-167535850246253/AnsiballZ_systemd_service.py Feb 20 08:58:50 np0005625201 sudo[380509]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:50 np0005625201 sudo[380509]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:50 np0005625201 sshd[380512]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:58:51 np0005625201 sudo[380604]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jexmmvlnhznhzbieuoiitrmdvpgkzwki ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577930.7766283-111-82926549491637/AnsiballZ_systemd_service.py Feb 20 08:58:51 np0005625201 sudo[380604]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:51 np0005625201 sudo[380604]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:51 np0005625201 sudo[380697]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vbscgdrbktrhfkroffhyscsacvlnrddk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577931.4762728-111-234306825710636/AnsiballZ_systemd_service.py Feb 20 08:58:51 np0005625201 sudo[380697]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:52 np0005625201 sudo[380697]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:52 np0005625201 sudo[380936]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ztgvmuotojtrbylzmklfashowivlpget ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577932.24831-111-273898296105530/AnsiballZ_systemd_service.py Feb 20 08:58:52 np0005625201 sudo[380936]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:53 np0005625201 sudo[380936]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:53 np0005625201 sudo[381115]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zucyopsxufqfqcnlvtvcbaymlifpybhb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577933.389596-111-161160172158607/AnsiballZ_systemd_service.py Feb 20 08:58:53 np0005625201 sudo[381115]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:54 np0005625201 sudo[381115]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:54 np0005625201 sudo[381244]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kmpbwhdbptrdvksxtuplwvkidteatmzy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577934.5452476-111-166442447885928/AnsiballZ_systemd_service.py Feb 20 08:58:54 np0005625201 sudo[381244]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:55 np0005625201 sudo[381244]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:55 np0005625201 sudo[381337]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ejwdkiajdkgbxwttxloxyhfilqgokqeh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577935.411053-111-174528537285329/AnsiballZ_systemd_service.py Feb 20 08:58:55 np0005625201 sudo[381337]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:56 np0005625201 sudo[381337]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:56 np0005625201 sudo[381492]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rqmsvyqtyhzycmrfyxogeycyrccipxko ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577936.5456731-111-122297245333461/AnsiballZ_systemd_service.py Feb 20 08:58:56 np0005625201 sudo[381492]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:57 np0005625201 sudo[381492]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:57 np0005625201 sudo[381621]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bkxiegtcqxgkoozsulcrbpeheuzszvvo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577937.606161-111-137164941990628/AnsiballZ_systemd_service.py Feb 20 08:58:57 np0005625201 sudo[381621]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:58 np0005625201 sudo[381621]: pam_unix(sudo:session): session closed for user root Feb 20 08:58:58 np0005625201 sudo[381778]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bwmnqzdrdpaxngigfcatufexoilogull ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577938.713592-111-209875098265148/AnsiballZ_systemd_service.py Feb 20 08:58:58 np0005625201 sudo[381778]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:58:59 np0005625201 sudo[381778]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:00 np0005625201 sudo[381941]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qwfsbvnluaahmoxhbqiobpcpujwffwjt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577939.841614-111-1223879559344/AnsiballZ_systemd_service.py Feb 20 08:59:00 np0005625201 sudo[381941]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:01 np0005625201 sudo[381941]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:02 np0005625201 sudo[382071]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yrqrdehclgdmvbrashvurqncedeawedd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577941.999271-111-239384016002980/AnsiballZ_systemd_service.py Feb 20 08:59:02 np0005625201 sudo[382071]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:03 np0005625201 sudo[382071]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:03 np0005625201 sudo[382201]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qwcjbmjjaahmhkpadhgygsazizdvzgfo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577943.1121392-111-158170001130345/AnsiballZ_systemd_service.py Feb 20 08:59:03 np0005625201 sudo[382201]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:04 np0005625201 sudo[382201]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:04 np0005625201 sudo[382331]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jzffeuswlugehlchrpftoqzjktqzsjnr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577944.2892084-111-229497065591698/AnsiballZ_systemd_service.py Feb 20 08:59:04 np0005625201 sudo[382331]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:05 np0005625201 sudo[382331]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:06 np0005625201 sudo[382504]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-prlnqfbvbtyfkipneftopbcbpkqkjgkd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577945.7804065-111-54857061547287/AnsiballZ_systemd_service.py Feb 20 08:59:06 np0005625201 sudo[382504]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:06 np0005625201 sudo[382504]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:07 np0005625201 sudo[382634]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cvrlvfukmjdvpxnkiefjryjcsohcpoyl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577946.9652367-111-3484245711128/AnsiballZ_systemd_service.py Feb 20 08:59:07 np0005625201 sudo[382634]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:08 np0005625201 sudo[382634]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:08 np0005625201 sudo[382764]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ptnnqiilxbbpwojhrznsbtmestamgaht ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577948.153125-111-7902098625242/AnsiballZ_systemd_service.py Feb 20 08:59:08 np0005625201 sudo[382764]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:11 np0005625201 sudo[382764]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:11 np0005625201 sudo[382941]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-okottonokmnrbhkyfsbejcobkybngbna ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577951.2693205-111-234798130903914/AnsiballZ_systemd_service.py Feb 20 08:59:11 np0005625201 sudo[382941]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:13 np0005625201 sudo[382941]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:19 np0005625201 sshd[383096]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:59:21 np0005625201 sudo[383173]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eptnumuqljxuhqapzsxcrgvcrptshrsm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577960.9685223-1191-275270582563939/AnsiballZ_file.py Feb 20 08:59:21 np0005625201 sudo[383173]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:21 np0005625201 sudo[383173]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:21 np0005625201 sudo[383265]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bpdxpefvkmwweqiuoyckiqgdbyhvkzel ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577961.6942735-1191-65976993221774/AnsiballZ_file.py Feb 20 08:59:21 np0005625201 sudo[383265]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:22 np0005625201 sudo[383265]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:22 np0005625201 sudo[383357]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oauuaovqzipjglbclumawhxncvzlzjlq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577962.2885532-1191-280029438019312/AnsiballZ_file.py Feb 20 08:59:22 np0005625201 sudo[383357]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:22 np0005625201 sudo[383357]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:23 np0005625201 sudo[383622]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-inwnrhgwylxtcicpwbqsvelfayzlahgc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577962.9129512-1191-170238385429255/AnsiballZ_file.py Feb 20 08:59:23 np0005625201 sudo[383622]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:23 np0005625201 sudo[383622]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:23 np0005625201 sudo[383717]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fhxxxiwdyronshrkspgyustiohisrckr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577963.4170308-1191-11496355367031/AnsiballZ_file.py Feb 20 08:59:23 np0005625201 sudo[383717]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:23 np0005625201 sudo[383717]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:24 np0005625201 sudo[383809]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xjewogivebwowjdplyqpugcjnvdenotf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577963.9912474-1191-28375464601336/AnsiballZ_file.py Feb 20 08:59:24 np0005625201 sudo[383809]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:24 np0005625201 sudo[383809]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:24 np0005625201 sudo[383901]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hsndnsqsfbmmharxizhmsxfmnpzqjpls ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577964.6041439-1191-109214069370798/AnsiballZ_file.py Feb 20 08:59:24 np0005625201 sudo[383901]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:25 np0005625201 sudo[383901]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:25 np0005625201 sudo[383993]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qgsukqnsjxlleshfkkqwdamjjoshutfw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577965.3773391-1191-22899568461049/AnsiballZ_file.py Feb 20 08:59:25 np0005625201 sudo[383993]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:25 np0005625201 sudo[383993]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:26 np0005625201 sshd[384055]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:59:26 np0005625201 sudo[384087]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uyapqjkslosnxlaehusqauhcpjzrojhn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577965.9323926-1191-126213258484970/AnsiballZ_file.py Feb 20 08:59:26 np0005625201 sudo[384087]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:26 np0005625201 sudo[384087]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:26 np0005625201 sudo[384237]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ewxpdedgnwekhspzhcwpsqbmuwrlurnj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577966.5373256-1191-46062234797862/AnsiballZ_file.py Feb 20 08:59:26 np0005625201 sudo[384237]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:27 np0005625201 sudo[384237]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:27 np0005625201 sudo[384329]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uyhvgipkwpwreumkulsjimmgtbvhywzr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577967.2130542-1191-149979962196188/AnsiballZ_file.py Feb 20 08:59:27 np0005625201 sudo[384329]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:27 np0005625201 sudo[384329]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:28 np0005625201 sudo[384421]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jdeujsuemmiytblgokgcgjwzvoocnkmk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577967.9502203-1191-163825215343415/AnsiballZ_file.py Feb 20 08:59:28 np0005625201 sudo[384421]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:28 np0005625201 sudo[384421]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:28 np0005625201 sudo[384513]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hptszzensqmeafwipnkoxgfhftevdpmv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577968.5590186-1191-169561559368329/AnsiballZ_file.py Feb 20 08:59:28 np0005625201 sudo[384513]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:29 np0005625201 sudo[384513]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:29 np0005625201 sudo[384605]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dnscvlsvfzqlanshlnzalhdveloegaok ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577969.1595035-1191-95854751312334/AnsiballZ_file.py Feb 20 08:59:29 np0005625201 sudo[384605]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:29 np0005625201 sudo[384605]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:30 np0005625201 sudo[384697]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wqysqlyjjnizjkpvavzbwbujjroeqcng ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577969.7631257-1191-96181508440148/AnsiballZ_file.py Feb 20 08:59:30 np0005625201 sudo[384697]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:30 np0005625201 sudo[384697]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:30 np0005625201 sudo[384789]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bvsnwlokzdkrpjhdtojuglonrxjdrrck ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577970.3720274-1191-114607903067270/AnsiballZ_file.py Feb 20 08:59:30 np0005625201 sudo[384789]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:30 np0005625201 sudo[384789]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:31 np0005625201 sudo[384881]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zylxnurygiomqazfhvwyzylcqyetjybx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577971.0703096-1191-276256959722643/AnsiballZ_file.py Feb 20 08:59:31 np0005625201 sudo[384881]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:31 np0005625201 sudo[384881]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:32 np0005625201 sudo[384973]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rcxtcdnpbqeykqrahqjlddyyfztyktra ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577971.7921472-1191-269845927639788/AnsiballZ_file.py Feb 20 08:59:32 np0005625201 sudo[384973]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:32 np0005625201 sudo[384973]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:32 np0005625201 sudo[385065]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-otmmqfbewuwqwznjffodowuintkwmofc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577972.4096372-1191-133563314128643/AnsiballZ_file.py Feb 20 08:59:32 np0005625201 sudo[385065]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:32 np0005625201 sudo[385065]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:33 np0005625201 sudo[385157]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fqljzflcjwmlkmbylmocvxcmmjhqacng ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577973.0366673-1191-263042199766055/AnsiballZ_file.py Feb 20 08:59:33 np0005625201 sudo[385157]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:33 np0005625201 sudo[385157]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:33 np0005625201 sudo[385249]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qkwoznwwwgndeccansboerfsqnazogrx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577973.692732-1191-21820987368140/AnsiballZ_file.py Feb 20 08:59:33 np0005625201 sudo[385249]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:34 np0005625201 sudo[385249]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:34 np0005625201 sudo[385343]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ugbfpjenxjzgjfgsglkpprnvmdpxdwpg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577974.2919815-1191-91403296439786/AnsiballZ_file.py Feb 20 08:59:34 np0005625201 sudo[385343]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:34 np0005625201 sudo[385343]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:35 np0005625201 sudo[385435]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgkzlfgaqdlwngsnsoclmyawziywolia ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577974.910219-1191-113951710198108/AnsiballZ_file.py Feb 20 08:59:35 np0005625201 sudo[385435]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:35 np0005625201 sudo[385435]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:35 np0005625201 sshd[385252]: Received disconnect from 111.68.98.152 port 37628:11: Bye Bye [preauth] Feb 20 08:59:35 np0005625201 sshd[385252]: Disconnected from authenticating user root 111.68.98.152 port 37628 [preauth] Feb 20 08:59:35 np0005625201 sudo[385527]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhtgytmdzhuaysnogjgonemskcwejwvf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577975.4869032-1191-263145728396334/AnsiballZ_file.py Feb 20 08:59:35 np0005625201 sudo[385527]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:35 np0005625201 sudo[385527]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:36 np0005625201 sudo[385619]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-htsxiougielpplikehkvewokpfvawpsg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577976.0427933-1191-242983184245538/AnsiballZ_file.py Feb 20 08:59:36 np0005625201 sudo[385619]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:36 np0005625201 sudo[385619]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:36 np0005625201 sudo[385711]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lpgivcywfveewktlnsrlpyvcgoffjjdd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577976.6366339-1191-216362491353368/AnsiballZ_file.py Feb 20 08:59:36 np0005625201 sudo[385711]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:37 np0005625201 sudo[385711]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:37 np0005625201 sudo[385803]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kinwgsulupjbdjpmifzoyyrrsvmpsiap ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577977.3008096-1191-219850739288135/AnsiballZ_file.py Feb 20 08:59:37 np0005625201 sudo[385803]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:37 np0005625201 sudo[385803]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:37 np0005625201 sshd[385806]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 08:59:38 np0005625201 sudo[385897]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mgbzeaosiqgzqatlgmquuncabbkpcjqk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577977.8641691-1191-266896814792951/AnsiballZ_file.py Feb 20 08:59:38 np0005625201 sudo[385897]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:38 np0005625201 sudo[385897]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:38 np0005625201 sudo[385989]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oqbkkpempedhtukenvzowbnzgzsqhtep ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577978.4232864-1191-250747394699052/AnsiballZ_file.py Feb 20 08:59:38 np0005625201 sudo[385989]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:38 np0005625201 sudo[385989]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:39 np0005625201 sudo[386081]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bjgekvasdhudwdipefyicjaptaeelymx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577979.0056198-1191-120444039326356/AnsiballZ_file.py Feb 20 08:59:39 np0005625201 sudo[386081]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:39 np0005625201 sudo[386081]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:39 np0005625201 sudo[386173]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxpiivkmfjjqvaeuynmwbiemgmpyfykg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577979.5882468-1191-4466025808047/AnsiballZ_file.py Feb 20 08:59:39 np0005625201 sudo[386173]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:40 np0005625201 sudo[386173]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:40 np0005625201 sudo[386265]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vrthfsjesehjnuijvzdpgagwqjnimjpa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577980.190671-1191-74313317121050/AnsiballZ_file.py Feb 20 08:59:40 np0005625201 sudo[386265]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:40 np0005625201 sudo[386265]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:41 np0005625201 sudo[386357]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hblohpzawpqugyssdpecaalaewynvawh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577980.806907-1191-181065447061602/AnsiballZ_file.py Feb 20 08:59:41 np0005625201 sudo[386357]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:41 np0005625201 sudo[386357]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:41 np0005625201 sudo[386449]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-twzlcvdsmpbwhapcqzseyheprxosgkxf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577981.421925-1191-175714861412343/AnsiballZ_file.py Feb 20 08:59:41 np0005625201 sudo[386449]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:41 np0005625201 sudo[386449]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:42 np0005625201 sudo[386541]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qltsywpebjvtfpqszonfuucrjyukgohl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577982.012761-1191-93928918539130/AnsiballZ_file.py Feb 20 08:59:42 np0005625201 sudo[386541]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:42 np0005625201 sudo[386541]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:42 np0005625201 sudo[386633]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntkjgmuigcteibylgradkdswmiqragjv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577982.5556965-1191-219277511205453/AnsiballZ_file.py Feb 20 08:59:42 np0005625201 sudo[386633]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:43 np0005625201 sudo[386633]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:43 np0005625201 sudo[386725]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdolsqrcvuvcxxhhwoveygagvsivjret ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577983.2492454-1191-91616966303814/AnsiballZ_file.py Feb 20 08:59:43 np0005625201 sudo[386725]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:43 np0005625201 sudo[386725]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:44 np0005625201 sudo[386817]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-msajrtshrpbsxpvzpogcemybapsujivt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577983.856902-1191-97321755396515/AnsiballZ_file.py Feb 20 08:59:44 np0005625201 sudo[386817]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:44 np0005625201 sudo[386817]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:44 np0005625201 sudo[386909]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qghpjspnphpcbkbwihcyhejdvuxsrhrd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577984.4110618-1191-5115197584173/AnsiballZ_file.py Feb 20 08:59:44 np0005625201 sudo[386909]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:44 np0005625201 sudo[386909]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:45 np0005625201 sudo[387001]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzlrkhdcbnwzqudazgcfpssitwkixcuy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577985.0018713-1191-109463850263318/AnsiballZ_file.py Feb 20 08:59:45 np0005625201 sudo[387001]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:45 np0005625201 sudo[387001]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:45 np0005625201 sudo[387093]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxqkmxbzxcqlslqwlnwwezxsvosyotpf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577985.60514-1191-77891214994474/AnsiballZ_file.py Feb 20 08:59:45 np0005625201 sudo[387093]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:46 np0005625201 sudo[387093]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:46 np0005625201 sudo[387185]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kziwlfxbmszpidnavktxeovrcywzhqfj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577986.1803055-1191-117066712130765/AnsiballZ_file.py Feb 20 08:59:46 np0005625201 sudo[387185]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:46 np0005625201 sudo[387185]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:46 np0005625201 sudo[387277]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbifuxgwrflezhthxfogytwsajcegezr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577986.74464-1191-24659747762993/AnsiballZ_file.py Feb 20 08:59:46 np0005625201 sudo[387277]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:47 np0005625201 sudo[387277]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:47 np0005625201 sudo[387369]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dtxwiigprcuuefajlvmpkbccssovztwk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577987.2665002-1191-127698903106285/AnsiballZ_file.py Feb 20 08:59:47 np0005625201 sudo[387369]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:47 np0005625201 sudo[387369]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:48 np0005625201 sudo[387461]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agfdrpdwxdtyqpdwfypnmbuohukpvkye ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577987.851031-1191-1094614322020/AnsiballZ_file.py Feb 20 08:59:48 np0005625201 sudo[387461]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:48 np0005625201 sudo[387461]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:48 np0005625201 sudo[387523]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 08:59:48 np0005625201 sudo[387523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:59:48 np0005625201 sudo[387523]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:48 np0005625201 sudo[387552]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 08:59:48 np0005625201 sudo[387552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:59:48 np0005625201 sudo[387582]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tnvjofwxysbquwlcsxatwzcdghjfksdb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577988.3999002-1191-177267513238381/AnsiballZ_file.py Feb 20 08:59:48 np0005625201 sudo[387582]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:49 np0005625201 sudo[387582]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:49 np0005625201 sudo[387696]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mgsfscxjwkmfwdrdkcfgviqopzbhxylz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577989.224768-1191-29060937627335/AnsiballZ_file.py Feb 20 08:59:49 np0005625201 sudo[387696]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:49 np0005625201 sudo[387552]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:49 np0005625201 sudo[387696]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:50 np0005625201 sudo[387781]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 08:59:50 np0005625201 sudo[387781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 08:59:50 np0005625201 sudo[387781]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:50 np0005625201 sudo[387811]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xwjdmhobfkpujseigtwlnebtuezzaakl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577989.7921593-1191-97158052611100/AnsiballZ_file.py Feb 20 08:59:50 np0005625201 sudo[387811]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:50 np0005625201 sudo[387811]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:50 np0005625201 sudo[387904]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdvxuwtivmtncipzsnwwekmtyfuqbxhi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577990.3960233-1191-43354692548020/AnsiballZ_file.py Feb 20 08:59:50 np0005625201 sudo[387904]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:50 np0005625201 sudo[387904]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:51 np0005625201 sudo[387996]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvwpjacxdayqsmfnjxpwhymxnlgjowbh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577990.9428189-1191-89812027668356/AnsiballZ_file.py Feb 20 08:59:51 np0005625201 sudo[387996]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:51 np0005625201 sudo[387996]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:51 np0005625201 sudo[388088]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lzbwyrxnlppeeqvcjmofwrmxicmfbqbi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577991.4706042-1191-196560473234269/AnsiballZ_file.py Feb 20 08:59:51 np0005625201 sudo[388088]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:51 np0005625201 sudo[388088]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:52 np0005625201 sudo[388180]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kcvijdgchujquwydwsrdfodghwqywafa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577992.5339506-2265-138270382685271/AnsiballZ_file.py Feb 20 08:59:52 np0005625201 sudo[388180]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:52 np0005625201 sudo[388180]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:53 np0005625201 sudo[388402]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ngrqxuenjwnflixvppijinkjdfsbhelj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577993.1318932-2265-65300001388471/AnsiballZ_file.py Feb 20 08:59:53 np0005625201 sudo[388402]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:53 np0005625201 sudo[388402]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:53 np0005625201 sudo[388533]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ocukdobrwgxejyvllcmmadaxfkbgodhb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577993.6623278-2265-262694679043712/AnsiballZ_file.py Feb 20 08:59:53 np0005625201 sudo[388533]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:54 np0005625201 sudo[388533]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:54 np0005625201 sudo[388625]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dssfjtkqokmwmdvfojbtograbzmckmdj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577994.2668066-2265-276879801727273/AnsiballZ_file.py Feb 20 08:59:54 np0005625201 sudo[388625]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:54 np0005625201 sudo[388625]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:55 np0005625201 sudo[388717]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ipbewrcxcqbbzgnadijtsgcaxixnedme ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577995.1223843-2265-85309110417727/AnsiballZ_file.py Feb 20 08:59:55 np0005625201 sudo[388717]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:55 np0005625201 sudo[388717]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:56 np0005625201 sudo[388809]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cihoyfpxrdprlcjenrxlmdbiihwyfhfy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577995.7279058-2265-177788517411011/AnsiballZ_file.py Feb 20 08:59:56 np0005625201 sudo[388809]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:56 np0005625201 sudo[388809]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:56 np0005625201 sudo[388901]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pzproxvvebfoixipwvfhssmdnrdwacdt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577996.3836005-2265-111654456422634/AnsiballZ_file.py Feb 20 08:59:56 np0005625201 sudo[388901]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:56 np0005625201 sudo[388901]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:57 np0005625201 sudo[388993]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-czolqsluhguliapwhmfgvzjnmizcszhj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577996.9384894-2265-235379141714878/AnsiballZ_file.py Feb 20 08:59:57 np0005625201 sudo[388993]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:57 np0005625201 sudo[388993]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:57 np0005625201 sudo[389085]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pwatdutqwnyojsbrybruwrxecaufzaoy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577997.4682722-2265-91203633791845/AnsiballZ_file.py Feb 20 08:59:57 np0005625201 sudo[389085]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:58 np0005625201 sudo[389085]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:58 np0005625201 sudo[389177]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ksxaogtkjpnmrurknqdlyxtrqzqkvrum ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577998.1257532-2265-8677940588595/AnsiballZ_file.py Feb 20 08:59:58 np0005625201 sudo[389177]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:58 np0005625201 sudo[389177]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:58 np0005625201 sudo[389269]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qlrzjwwtqwbbycomjfmiglrbmdwwkzrb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577998.6878083-2265-49547129769268/AnsiballZ_file.py Feb 20 08:59:58 np0005625201 sudo[389269]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:59 np0005625201 sudo[389269]: pam_unix(sudo:session): session closed for user root Feb 20 08:59:59 np0005625201 sudo[389361]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-upcvdzcwggboraxzbalqlisuqhxswhgk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577999.250614-2265-214122482719680/AnsiballZ_file.py Feb 20 08:59:59 np0005625201 sudo[389361]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 08:59:59 np0005625201 sudo[389361]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:00 np0005625201 sudo[389485]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nzajvurcqsxzhcgfitcyvrbeofdsvrht ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771577999.868193-2265-37220291781348/AnsiballZ_file.py Feb 20 09:00:00 np0005625201 sudo[389485]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:00 np0005625201 sudo[389485]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:00 np0005625201 sudo[389579]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aaslyeqkibhhepgzlbamfaijgbvscgew ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578000.703273-2265-43514124426852/AnsiballZ_file.py Feb 20 09:00:00 np0005625201 sudo[389579]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:01 np0005625201 sudo[389579]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:01 np0005625201 sudo[389671]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-awvmnhiwcxohpgsyrxrxaiqqxdqkaond ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578001.2815228-2265-34819100694725/AnsiballZ_file.py Feb 20 09:00:01 np0005625201 sudo[389671]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:01 np0005625201 sudo[389671]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:02 np0005625201 sudo[389763]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-anzyghdhmnipcomfehehrugrtxmrnjjj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578001.8392162-2265-133487907215790/AnsiballZ_file.py Feb 20 09:00:02 np0005625201 sudo[389763]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:02 np0005625201 sudo[389763]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:02 np0005625201 sudo[389855]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rftzslnjbrrhzsjzqzsyxzslhjofmexc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578002.4185266-2265-46916851038311/AnsiballZ_file.py Feb 20 09:00:02 np0005625201 sudo[389855]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:02 np0005625201 sudo[389855]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:03 np0005625201 sudo[389947]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ubogckttyjirbigvaqzlcabelltosfev ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578002.912293-2265-161232268743283/AnsiballZ_file.py Feb 20 09:00:03 np0005625201 sudo[389947]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:03 np0005625201 sudo[389947]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:03 np0005625201 sudo[390097]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ysttgrxmodddhactabdzcyovjqadqxcg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578003.476072-2265-209626634216237/AnsiballZ_file.py Feb 20 09:00:03 np0005625201 sudo[390097]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:03 np0005625201 sudo[390097]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:04 np0005625201 sudo[390189]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gucisyjiyftcxzgscjsmzgibofdsghtp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578004.0332596-2265-45574854842534/AnsiballZ_file.py Feb 20 09:00:04 np0005625201 sudo[390189]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:04 np0005625201 sudo[390189]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:04 np0005625201 sshd[390192]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:00:04 np0005625201 sudo[390283]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cxmxugqgebyrynqpqxzkxdoeohaiirbg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578004.5669875-2265-180442170013506/AnsiballZ_file.py Feb 20 09:00:04 np0005625201 sudo[390283]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:05 np0005625201 sudo[390283]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:05 np0005625201 sudo[390375]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bpudcffqnuyziwsrvirqazquejfruhtu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578005.1150932-2265-89243649510950/AnsiballZ_file.py Feb 20 09:00:05 np0005625201 sudo[390375]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:05 np0005625201 sudo[390375]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:05 np0005625201 sudo[390467]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ypmpzdloafdnniztvssjnubgtxsfkgwy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578005.5870152-2265-108748381466519/AnsiballZ_file.py Feb 20 09:00:05 np0005625201 sudo[390467]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:06 np0005625201 sudo[390467]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:06 np0005625201 sudo[390559]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzzevxivqqiiqdmtugiyxiaxvnxvympe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578006.1379445-2265-87613751245492/AnsiballZ_file.py Feb 20 09:00:06 np0005625201 sudo[390559]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:06 np0005625201 sudo[390559]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:07 np0005625201 sudo[390651]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vfrkxcygbzzfcisignjecxsfeuxtpdin ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578006.9008458-2265-116525289174824/AnsiballZ_file.py Feb 20 09:00:07 np0005625201 sudo[390651]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:07 np0005625201 sudo[390651]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:07 np0005625201 sudo[390743]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gwkqctcgfwcolgbrkzznmrlpdelfaxcw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578007.4652765-2265-6081325129535/AnsiballZ_file.py Feb 20 09:00:07 np0005625201 sudo[390743]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:07 np0005625201 sudo[390743]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:08 np0005625201 sudo[390835]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zbidnbsuhhglbukdkmxubngngdsaeqki ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578008.0258498-2265-192224138735465/AnsiballZ_file.py Feb 20 09:00:08 np0005625201 sudo[390835]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:09 np0005625201 sudo[390835]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:09 np0005625201 sudo[390927]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ehmjvlozfbvshtuetlohzicdxgzcivxp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578009.2901676-2265-262795978781857/AnsiballZ_file.py Feb 20 09:00:09 np0005625201 sudo[390927]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:09 np0005625201 sudo[390927]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:10 np0005625201 sudo[391019]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-povaoqdeiwrzgaockdjsjrykzxehgnfa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578009.8421419-2265-107888240301033/AnsiballZ_file.py Feb 20 09:00:10 np0005625201 sudo[391019]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:10 np0005625201 sudo[391019]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:10 np0005625201 sudo[391111]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcufjjzecyjfaheioycchszciqevyqpm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578010.3946757-2265-135295611940296/AnsiballZ_file.py Feb 20 09:00:10 np0005625201 sudo[391111]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:10 np0005625201 sudo[391111]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:11 np0005625201 sudo[391203]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zgkxgvrlarrberetjclpwncarlyjucab ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578010.9627352-2265-181790240748515/AnsiballZ_file.py Feb 20 09:00:11 np0005625201 sudo[391203]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:11 np0005625201 sudo[391203]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:11 np0005625201 sudo[391295]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdudcmcdpkpoyzmrxkovidcigowhyayj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578011.5758088-2265-278844499875255/AnsiballZ_file.py Feb 20 09:00:11 np0005625201 sudo[391295]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:12 np0005625201 sudo[391295]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:12 np0005625201 sudo[391390]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ldfoquntrhnfxdvutaowcsppvfijqzou ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578012.1764314-2265-160261022598667/AnsiballZ_file.py Feb 20 09:00:12 np0005625201 sudo[391390]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:12 np0005625201 sudo[391390]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:13 np0005625201 sudo[391482]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-symgqvhzzaxkigkiyxyesayeayykkezl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578012.7610047-2265-138465389662331/AnsiballZ_file.py Feb 20 09:00:13 np0005625201 sudo[391482]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:13 np0005625201 sudo[391482]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:13 np0005625201 sudo[391575]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djruntwvxzifinccyzwiqwsuverdcpvp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578013.3492012-2265-263620112242473/AnsiballZ_file.py Feb 20 09:00:13 np0005625201 sudo[391575]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:13 np0005625201 sudo[391575]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:14 np0005625201 sudo[391669]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tzpqsdtfgpbhpmxeezpdjkieunfjkwrd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578013.945693-2265-208205540535206/AnsiballZ_file.py Feb 20 09:00:14 np0005625201 sudo[391669]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:14 np0005625201 sudo[391669]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:14 np0005625201 sshd[391578]: Invalid user dixi from 212.233.136.201 port 50302 Feb 20 09:00:14 np0005625201 sshd[391578]: Received disconnect from 212.233.136.201 port 50302:11: Bye Bye [preauth] Feb 20 09:00:14 np0005625201 sshd[391578]: Disconnected from invalid user dixi 212.233.136.201 port 50302 [preauth] Feb 20 09:00:14 np0005625201 sudo[391761]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-otmylfnwxcgijbthcttcuyltjsvcoiyv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578014.5508447-2265-175732623636580/AnsiballZ_file.py Feb 20 09:00:14 np0005625201 sudo[391761]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:15 np0005625201 sudo[391761]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:15 np0005625201 sudo[391853]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iqeitzlnpnqfyznwvrsuynwmvbknxzhc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578015.16246-2265-58876845279062/AnsiballZ_file.py Feb 20 09:00:15 np0005625201 sudo[391853]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:15 np0005625201 sudo[391853]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:16 np0005625201 sudo[391945]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpphsxpawksauzehoaywhqmnnztpjozj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578015.8454454-2265-145260034038752/AnsiballZ_file.py Feb 20 09:00:16 np0005625201 sudo[391945]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:16 np0005625201 sudo[391945]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:16 np0005625201 sudo[392037]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-clagscfuhdrlhzwujttjtxpoxxgyigmd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578016.4553287-2265-52518165941224/AnsiballZ_file.py Feb 20 09:00:16 np0005625201 sudo[392037]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:16 np0005625201 sudo[392037]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:17 np0005625201 sudo[392129]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-trbmxwdyjzpejumirwttwwkzvuabbdue ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578017.0537548-2265-77915153348975/AnsiballZ_file.py Feb 20 09:00:17 np0005625201 sudo[392129]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:17 np0005625201 sudo[392129]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:17 np0005625201 sudo[392221]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wgyxzcgvepfwczahjjzwlrqpoldvqrsg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578017.670365-2265-703552788715/AnsiballZ_file.py Feb 20 09:00:17 np0005625201 sudo[392221]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:18 np0005625201 sudo[392221]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:18 np0005625201 sudo[392313]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ctrdkioqdrbqdqdlrvvjhopnzlfzlrmo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578018.2762656-2265-6411431118360/AnsiballZ_file.py Feb 20 09:00:18 np0005625201 sudo[392313]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:18 np0005625201 sudo[392313]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:19 np0005625201 sudo[392405]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mmhgeqdibrxbhfzfixugvigyrbtjpvxs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578018.8552048-2265-97492278594012/AnsiballZ_file.py Feb 20 09:00:19 np0005625201 sudo[392405]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:19 np0005625201 sudo[392405]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:19 np0005625201 sudo[392497]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tokwofjvcfnulzkmhzqedkaqgizdiwbf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578019.4352274-2265-53715880604726/AnsiballZ_file.py Feb 20 09:00:19 np0005625201 sudo[392497]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:19 np0005625201 sudo[392497]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:20 np0005625201 sudo[392589]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ebjeziskwaqycedypwulgymbsmfukqhv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578019.9876447-2265-29678755682625/AnsiballZ_file.py Feb 20 09:00:20 np0005625201 sudo[392589]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:20 np0005625201 sudo[392589]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:20 np0005625201 sudo[392681]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-noztszxaespyipjggyftstedatfwbmim ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578020.5373857-2265-134238222905402/AnsiballZ_file.py Feb 20 09:00:20 np0005625201 sudo[392681]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:21 np0005625201 sudo[392681]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:21 np0005625201 sudo[392773]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vshjpqxahwrovakefpxwenlatcjsbpyd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578021.0982425-2265-164804095628401/AnsiballZ_file.py Feb 20 09:00:21 np0005625201 sudo[392773]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:21 np0005625201 sudo[392773]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:21 np0005625201 sudo[392865]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-csostlmwoydgqmsxvxxtbnfkgcwsiyrt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578021.6025972-2265-269633341391952/AnsiballZ_file.py Feb 20 09:00:21 np0005625201 sudo[392865]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:22 np0005625201 sudo[392865]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:22 np0005625201 sudo[392957]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yhyjqrfrvhafvbkjsrkygqlbxpxqxnkn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578022.154095-2265-136129369006888/AnsiballZ_file.py Feb 20 09:00:22 np0005625201 sudo[392957]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:22 np0005625201 sudo[392957]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:22 np0005625201 sudo[393049]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nejrgisgmhdvhoptsvjmfbnkeuihmybj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578022.7628956-2265-102939536136248/AnsiballZ_file.py Feb 20 09:00:22 np0005625201 sudo[393049]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:23 np0005625201 sudo[393049]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:24 np0005625201 sudo[393311]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tqxiirujbacrwfldiujxchasupoaflqy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578024.34426-3343-138449886662230/AnsiballZ_command.py Feb 20 09:00:24 np0005625201 sudo[393311]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:24 np0005625201 sudo[393311]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:26 np0005625201 sshd[393375]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:00:27 np0005625201 sudo[393555]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icrwjozeszkdqwppgxgomrjpbfolefqk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578027.1994188-3396-236494061333047/AnsiballZ_systemd_service.py Feb 20 09:00:27 np0005625201 sudo[393555]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:28 np0005625201 sudo[393555]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:28 np0005625201 sudo[393682]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nskjrbucfqftfbzdimmhucvdpzhfycyb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578028.379265-3420-199988397544651/AnsiballZ_command.py Feb 20 09:00:28 np0005625201 sudo[393682]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:28 np0005625201 sudo[393682]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:29 np0005625201 sudo[393775]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lqidsjiqbewkzmgeecgryvjsmtdxvkmx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578029.027476-3420-171620414921976/AnsiballZ_command.py Feb 20 09:00:29 np0005625201 sudo[393775]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:29 np0005625201 sudo[393775]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:29 np0005625201 sudo[393868]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mojffnrzffdxhbetyabsddunrtqbzlji ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578029.6134465-3420-165283885308728/AnsiballZ_command.py Feb 20 09:00:29 np0005625201 sudo[393868]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:30 np0005625201 sudo[393868]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:30 np0005625201 sudo[393961]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kczzcxsvjorudzfkqaremyrbesdiedxy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578030.409992-3420-43305738552757/AnsiballZ_command.py Feb 20 09:00:30 np0005625201 sudo[393961]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:30 np0005625201 sudo[393961]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:31 np0005625201 sudo[394054]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lnsbfcidvimyscznbzgowrspcslvzmsb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578031.03087-3420-106441532075705/AnsiballZ_command.py Feb 20 09:00:31 np0005625201 sudo[394054]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:31 np0005625201 sudo[394054]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:31 np0005625201 sudo[394147]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pnnwylxrzaxjdtjoqfettregjdjndggk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578031.5234509-3420-256084789462205/AnsiballZ_command.py Feb 20 09:00:31 np0005625201 sudo[394147]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:32 np0005625201 sudo[394147]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:32 np0005625201 sudo[394240]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mjpmbmwsawnwkxtffebpgiactvgrxpew ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578032.1131618-3420-134859627748273/AnsiballZ_command.py Feb 20 09:00:32 np0005625201 sudo[394240]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:33 np0005625201 sudo[394240]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:33 np0005625201 sudo[394333]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvpatedqwbembjpvktseqsgxwezcmlti ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578033.7558258-3420-146573212108296/AnsiballZ_command.py Feb 20 09:00:33 np0005625201 sudo[394333]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:34 np0005625201 sudo[394333]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:34 np0005625201 sudo[394426]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ibhkbgvsptoojwceilciealvrltsytmd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578034.322833-3420-68067414473951/AnsiballZ_command.py Feb 20 09:00:34 np0005625201 sudo[394426]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:34 np0005625201 sudo[394426]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:35 np0005625201 sudo[394519]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-btfhoblqwffuwezdguyfjwqilsebncmm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578034.880223-3420-37533925919942/AnsiballZ_command.py Feb 20 09:00:35 np0005625201 sudo[394519]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:36 np0005625201 sudo[394519]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:36 np0005625201 sudo[394612]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tmfxhbtpqwvjklldpfokkssqdbbgtcyn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578036.4956858-3420-200185727804430/AnsiballZ_command.py Feb 20 09:00:36 np0005625201 sudo[394612]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:36 np0005625201 sudo[394612]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:37 np0005625201 sudo[394705]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gfzmnpnxqoevfvypwixsibphiwaltmkg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578037.061227-3420-60623741671040/AnsiballZ_command.py Feb 20 09:00:37 np0005625201 sudo[394705]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:37 np0005625201 sudo[394705]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:37 np0005625201 sudo[394798]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgateumdhdmwmdlvxscwfalpqmryngog ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578037.6545203-3420-125567619483733/AnsiballZ_command.py Feb 20 09:00:37 np0005625201 sudo[394798]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:38 np0005625201 sudo[394798]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:38 np0005625201 sudo[394891]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-idgoyljjktniyaxgmropoijtzkumgbjf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578038.290183-3420-184679675574765/AnsiballZ_command.py Feb 20 09:00:38 np0005625201 sudo[394891]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:39 np0005625201 sudo[394891]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:40 np0005625201 sudo[394984]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wgvhnqcjrnrwsplafgkdobriohalpntg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578039.9508598-3420-117043370642053/AnsiballZ_command.py Feb 20 09:00:40 np0005625201 sudo[394984]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:40 np0005625201 sudo[394984]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:40 np0005625201 sudo[395077]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yyqbidyrikqfmtgkgmffrnwdtvuatpte ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578040.4562814-3420-197110214063847/AnsiballZ_command.py Feb 20 09:00:40 np0005625201 sudo[395077]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:40 np0005625201 sudo[395077]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:41 np0005625201 sudo[395170]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nvslwanmpaopfiiklrbwdyywcftjhnkp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578040.9959478-3420-32204066025128/AnsiballZ_command.py Feb 20 09:00:41 np0005625201 sudo[395170]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:41 np0005625201 sudo[395170]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:41 np0005625201 sudo[395263]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xqorttdupxiptlnomkuxrrxgpoqvbkmd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578041.624206-3420-221625297875408/AnsiballZ_command.py Feb 20 09:00:41 np0005625201 sudo[395263]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:42 np0005625201 sudo[395263]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:42 np0005625201 sudo[395356]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnrcugsadbtjumzbjvsjuytxcucjpexi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578042.235865-3420-176919067815343/AnsiballZ_command.py Feb 20 09:00:42 np0005625201 sudo[395356]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:43 np0005625201 sudo[395356]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:44 np0005625201 sudo[395449]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fkoaalfgiavxegbnwwnhunfktyilxzwa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578043.8423734-3420-147113540778170/AnsiballZ_command.py Feb 20 09:00:44 np0005625201 sudo[395449]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:44 np0005625201 sudo[395449]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:44 np0005625201 sudo[395542]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-duiqwjldmuaqzmzugasqzerstduhhjqv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578044.4000459-3420-52358779599294/AnsiballZ_command.py Feb 20 09:00:44 np0005625201 sudo[395542]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:44 np0005625201 sudo[395542]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:45 np0005625201 sudo[395635]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yckbzwurfluwgmxeasilqlekdrxbaauv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578044.968024-3420-151132470788083/AnsiballZ_command.py Feb 20 09:00:45 np0005625201 sudo[395635]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:45 np0005625201 sudo[395635]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:45 np0005625201 sudo[395728]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzjefdvugfhklmjhpbftjgthippkibwh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578045.5651028-3420-271564021157598/AnsiballZ_command.py Feb 20 09:00:45 np0005625201 sudo[395728]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:46 np0005625201 sudo[395728]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:46 np0005625201 sudo[395821]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kgoyluzolqelnmxonstdgvlemqkcgvxp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578046.1363127-3420-44491909428571/AnsiballZ_command.py Feb 20 09:00:46 np0005625201 sudo[395821]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:46 np0005625201 sudo[395821]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:46 np0005625201 sudo[395914]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mnmadljfqmuqajhubiaybudbkmyfzrkl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578046.7058365-3420-48019453665341/AnsiballZ_command.py Feb 20 09:00:46 np0005625201 sudo[395914]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:48 np0005625201 sudo[395914]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:48 np0005625201 sudo[396007]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmcuwevygnnaissosieytlaslpuerzlu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578048.3211064-3420-178009517136858/AnsiballZ_command.py Feb 20 09:00:48 np0005625201 sudo[396007]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:48 np0005625201 sudo[396007]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:49 np0005625201 sudo[396158]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nljfvsxsqnbsctteqozpkknaxhlfeabh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578048.8888946-3420-276361040355509/AnsiballZ_command.py Feb 20 09:00:49 np0005625201 sudo[396158]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:49 np0005625201 sudo[396158]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:49 np0005625201 sudo[396251]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zzogignuumelmsniygiiuygkauyzlbdt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578049.4787211-3420-266135658144366/AnsiballZ_command.py Feb 20 09:00:49 np0005625201 sudo[396251]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:49 np0005625201 sudo[396251]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:50 np0005625201 sudo[396346]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fahfddumrrjievnxnxhrejquszpuuymd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578050.0238223-3420-25849149262656/AnsiballZ_command.py Feb 20 09:00:50 np0005625201 sudo[396346]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:50 np0005625201 sshd[396321]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:00:50 np0005625201 sudo[396349]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:00:50 np0005625201 sudo[396349]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:00:50 np0005625201 sudo[396349]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:50 np0005625201 sudo[396364]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:00:50 np0005625201 sudo[396364]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:00:50 np0005625201 sudo[396346]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:50 np0005625201 sudo[396489]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bugfyrgaadvqknvlaceigttbdoufxbgo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578050.595844-3420-166971224089145/AnsiballZ_command.py Feb 20 09:00:50 np0005625201 sudo[396489]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:51 np0005625201 sudo[396489]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:51 np0005625201 sudo[396653]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tonqianrfdhptbcjvawbsykrqjptisdr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578051.255691-3420-256769504723433/AnsiballZ_command.py Feb 20 09:00:51 np0005625201 sudo[396653]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:51 np0005625201 sudo[396653]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:51 np0005625201 sudo[396364]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:51 np0005625201 sudo[396782]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:00:51 np0005625201 sudo[396782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:00:51 np0005625201 sudo[396782]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:52 np0005625201 sudo[396840]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmkncnjeuijndxiulratocxexubgqdoh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578051.8112025-3420-43232130849122/AnsiballZ_command.py Feb 20 09:00:52 np0005625201 sudo[396817]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:00:52 np0005625201 sudo[396840]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:52 np0005625201 sudo[396817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:00:52 np0005625201 sudo[396840]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:52 np0005625201 sudo[396955]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-osdpxrumkcoviwdvnhtxbcoxlbmxtsdy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578052.3595665-3420-73655258552886/AnsiballZ_command.py Feb 20 09:00:52 np0005625201 sudo[396955]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:52 np0005625201 sudo[396817]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:52 np0005625201 sudo[396955]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:53 np0005625201 sudo[397060]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmgdsfqfnahgajrezcyqlfxrohaitbbu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578052.9713407-3420-73167117490257/AnsiballZ_command.py Feb 20 09:00:53 np0005625201 sudo[397060]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:53 np0005625201 sudo[397060]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:53 np0005625201 sudo[397153]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ssfsiyuzmzsdztkqfmrejqwpjwtdcbuq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578053.556406-3420-71642836065180/AnsiballZ_command.py Feb 20 09:00:53 np0005625201 sudo[397153]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:53 np0005625201 sudo[397156]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:00:53 np0005625201 sudo[397156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:00:53 np0005625201 sudo[397156]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:54 np0005625201 sudo[397153]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:54 np0005625201 sudo[397261]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nikrxgdsjvapqwckqkdeyxlkwuvkfmao ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578054.141976-3420-211650142342067/AnsiballZ_command.py Feb 20 09:00:54 np0005625201 sudo[397261]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:54 np0005625201 sudo[397261]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:55 np0005625201 sudo[397523]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pwpqvnsxmffalqajfnukqbipzuipmshg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578054.7813735-3420-44680633999248/AnsiballZ_command.py Feb 20 09:00:55 np0005625201 sudo[397523]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:55 np0005625201 sshd[397526]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:00:56 np0005625201 sudo[397523]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:56 np0005625201 sudo[397618]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hkwqgohdifflgvzsmjgaghpyfnxrapif ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578056.3945336-3420-122899585168389/AnsiballZ_command.py Feb 20 09:00:56 np0005625201 sudo[397618]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:56 np0005625201 sudo[397618]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:57 np0005625201 sudo[397711]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-onpesrtaxjmoclgphgyyztdamttzeldp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578057.0212932-3420-247470736627838/AnsiballZ_command.py Feb 20 09:00:57 np0005625201 sudo[397711]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:57 np0005625201 sudo[397711]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:57 np0005625201 sudo[397804]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qvpnbfvvajkukhjvrbddqlotnpdvclfl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578057.7160428-3420-239327181143259/AnsiballZ_command.py Feb 20 09:00:57 np0005625201 sudo[397804]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:58 np0005625201 sudo[397804]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:58 np0005625201 sudo[397897]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xpnhsgchmwbmyfiepgqwbpngdftystdo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578058.3320065-3420-96621682470324/AnsiballZ_command.py Feb 20 09:00:58 np0005625201 sudo[397897]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:58 np0005625201 sudo[397897]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:59 np0005625201 sudo[397990]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnlqfieclwaqaachpphdpdipbcdtnmsc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578058.9306066-3420-11986079275260/AnsiballZ_command.py Feb 20 09:00:59 np0005625201 sudo[397990]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:59 np0005625201 sudo[397990]: pam_unix(sudo:session): session closed for user root Feb 20 09:00:59 np0005625201 sudo[398083]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spwybzlubelebjxrihwsbvzjhfsrglvp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578059.5386965-3420-35463134024501/AnsiballZ_command.py Feb 20 09:00:59 np0005625201 sudo[398083]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:00:59 np0005625201 sudo[398083]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:00 np0005625201 sudo[398206]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tzwbvwrrofdgcbkaaygijuszstoiqync ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578060.095424-3420-73553309958743/AnsiballZ_command.py Feb 20 09:01:00 np0005625201 sudo[398206]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:00 np0005625201 sudo[398206]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:00 np0005625201 sudo[398299]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xhvdkkmcmgwoleejrfkxyuczlhmexbpu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578060.62034-3420-78158634749874/AnsiballZ_command.py Feb 20 09:01:00 np0005625201 sudo[398299]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:01 np0005625201 sudo[398299]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:01 np0005625201 sudo[398403]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-igypedbibfmqaufawqemkljfktmcuwse ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578061.1601372-3420-273415398728328/AnsiballZ_command.py Feb 20 09:01:01 np0005625201 sudo[398403]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:01 np0005625201 sudo[398403]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:01 np0005625201 sudo[398496]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-krimvxthfxwhxkurxqtgmpnrdlfzlosu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578061.7530878-3420-148489316317552/AnsiballZ_command.py Feb 20 09:01:01 np0005625201 sudo[398496]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:02 np0005625201 sudo[398496]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:02 np0005625201 sudo[398589]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iixgqhawlkpdvjafxqjreipopqwnbdnd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578062.3229053-3420-251149809342660/AnsiballZ_command.py Feb 20 09:01:02 np0005625201 sudo[398589]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:02 np0005625201 sudo[398589]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:03 np0005625201 sudo[398682]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ndbzqcimkldackbovmqlqkgmqwowsyjy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578062.894232-3420-235457875799544/AnsiballZ_command.py Feb 20 09:01:03 np0005625201 sudo[398682]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:03 np0005625201 sudo[398682]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:03 np0005625201 sudo[398775]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nidvvetkrxlroobbbooyidaszqtrmico ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578063.4428892-3420-57845542298132/AnsiballZ_command.py Feb 20 09:01:03 np0005625201 sudo[398775]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:03 np0005625201 sudo[398775]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:04 np0005625201 sudo[398868]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xbjoaiuzcnhkaffnlaivuhnyocclbajm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578064.0374603-3420-63194096883577/AnsiballZ_command.py Feb 20 09:01:04 np0005625201 sudo[398868]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:01:04 np0005625201 sudo[398868]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:06 np0005625201 sshd[372499]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:01:12 np0005625201 sshd[398887]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:01:34 np0005625201 sshd[399144]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:01:54 np0005625201 sudo[399204]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:01:54 np0005625201 sudo[399204]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:01:54 np0005625201 sudo[399204]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:54 np0005625201 sudo[399219]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 09:01:54 np0005625201 sudo[399219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:01:54 np0005625201 sudo[399219]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:54 np0005625201 sudo[399256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:01:54 np0005625201 sudo[399256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:01:54 np0005625201 sudo[399256]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:55 np0005625201 sudo[399271]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:01:55 np0005625201 sudo[399271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:01:55 np0005625201 sudo[399271]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:56 np0005625201 sudo[399318]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:01:56 np0005625201 sudo[399318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:01:56 np0005625201 sudo[399318]: pam_unix(sudo:session): session closed for user root Feb 20 09:01:56 np0005625201 sshd[399503]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:02:19 np0005625201 sshd[399542]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:02:26 np0005625201 sshd[399602]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:02:42 np0005625201 sshd[399838]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:02:56 np0005625201 sudo[399840]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:02:56 np0005625201 sudo[399840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:02:56 np0005625201 sudo[399840]: pam_unix(sudo:session): session closed for user root Feb 20 09:02:56 np0005625201 sudo[399855]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:02:56 np0005625201 sudo[399855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:02:57 np0005625201 sudo[399855]: pam_unix(sudo:session): session closed for user root Feb 20 09:02:57 np0005625201 sudo[399901]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:02:57 np0005625201 sudo[399901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:02:57 np0005625201 sudo[399901]: pam_unix(sudo:session): session closed for user root Feb 20 09:03:04 np0005625201 sshd[400113]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:03:26 np0005625201 sshd[400177]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:03:50 np0005625201 sshd[400466]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:03:54 np0005625201 sshd[400468]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:03:57 np0005625201 sudo[400470]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:03:57 np0005625201 sudo[400470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:03:57 np0005625201 sudo[400470]: pam_unix(sudo:session): session closed for user root Feb 20 09:03:58 np0005625201 sudo[400485]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:03:58 np0005625201 sudo[400485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:03:58 np0005625201 sudo[400485]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:00 np0005625201 sudo[400709]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:04:00 np0005625201 sudo[400709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:04:00 np0005625201 sudo[400709]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:11 np0005625201 sshd[400758]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:04:37 np0005625201 sshd[401049]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:04:43 np0005625201 sshd[401051]: Accepted publickey for zuul from 192.168.122.31 port 38318 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:04:43 np0005625201 systemd[401054]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:04:44 np0005625201 sshd[401051]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:04:46 np0005625201 sudo[401354]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fnnibcaummmxungmnwinbipxebdvavxs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578286.5789745-90-196379135952076/AnsiballZ_command.py Feb 20 09:04:46 np0005625201 sudo[401354]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:47 np0005625201 sudo[401354]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:48 np0005625201 sudo[401447]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mqjqalyibasiaejtlfyimwodfzbtkyyi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578287.6848524-126-138902664708770/AnsiballZ_stat.py Feb 20 09:04:48 np0005625201 sudo[401447]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:48 np0005625201 sudo[401447]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:48 np0005625201 sudo[401539]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dskvxnrbtzrfkrdlzjxnjyncqxzsexlq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578288.5233977-150-188906322010848/AnsiballZ_file.py Feb 20 09:04:48 np0005625201 sudo[401539]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:49 np0005625201 sudo[401539]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:49 np0005625201 sudo[401631]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eacvyzpmhrrnuucuztnhkunbtdnhgdan ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578289.3799787-175-193866637606278/AnsiballZ_stat.py Feb 20 09:04:49 np0005625201 sudo[401631]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:49 np0005625201 sudo[401631]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:50 np0005625201 sudo[401704]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-crfkjjvrrliyvulmkulhdlhqxdsxmlev ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578289.3799787-175-193866637606278/AnsiballZ_copy.py Feb 20 09:04:50 np0005625201 sudo[401704]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:50 np0005625201 sudo[401704]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:51 np0005625201 sudo[401796]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icwsrauqvemfvybozgoowojhwuuxfstx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578290.8442583-219-117761397903125/AnsiballZ_setup.py Feb 20 09:04:51 np0005625201 sudo[401796]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:51 np0005625201 sudo[401796]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:52 np0005625201 sudo[401892]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xinyuntciwnbdyouummtpftrsgyltogs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578291.9630034-244-13644857964498/AnsiballZ_file.py Feb 20 09:04:52 np0005625201 sudo[401892]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:52 np0005625201 sudo[401892]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:52 np0005625201 sudo[401984]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ybwensihnswvitcxaazdicdlzawijtxg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578292.7217267-271-91978133263328/AnsiballZ_file.py Feb 20 09:04:52 np0005625201 sudo[401984]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:04:53 np0005625201 sudo[401984]: pam_unix(sudo:session): session closed for user root Feb 20 09:04:54 np0005625201 sshd[402105]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:05:00 np0005625201 sudo[402420]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:05:00 np0005625201 sudo[402420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:05:00 np0005625201 sudo[402420]: pam_unix(sudo:session): session closed for user root Feb 20 09:05:00 np0005625201 sudo[402475]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:05:00 np0005625201 sudo[402475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:05:00 np0005625201 sudo[402587]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hogeatlvifcjykinvmbilkwblcjglvju ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578300.5512636-373-20786330851746/AnsiballZ_command.py Feb 20 09:05:00 np0005625201 sudo[402587]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:05:01 np0005625201 sudo[402475]: pam_unix(sudo:session): session closed for user root Feb 20 09:05:01 np0005625201 sudo[402748]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:05:01 np0005625201 sudo[402748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:05:01 np0005625201 sudo[402748]: pam_unix(sudo:session): session closed for user root Feb 20 09:05:10 np0005625201 sshd[51358]: Received signal 15; terminating. Feb 20 09:05:10 np0005625201 sshd[402795]: Server listening on 0.0.0.0 port 22. Feb 20 09:05:10 np0005625201 sshd[402795]: Server listening on :: port 22. Feb 20 09:05:11 np0005625201 sshd[402795]: Received signal 15; terminating. Feb 20 09:05:11 np0005625201 sshd[403070]: Server listening on 0.0.0.0 port 22. Feb 20 09:05:11 np0005625201 sshd[403070]: Server listening on :: port 22. Feb 20 09:05:23 np0005625201 sshd[403231]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:05:24 np0005625201 sshd[403212]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:05:38 np0005625201 sshd[403503]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:06:02 np0005625201 sudo[403985]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:06:02 np0005625201 sudo[403985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:06:02 np0005625201 sudo[403985]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:02 np0005625201 sudo[404002]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:06:02 np0005625201 sudo[404002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:06:02 np0005625201 sudo[404002]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:03 np0005625201 sudo[404057]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:06:03 np0005625201 sudo[404057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:06:03 np0005625201 sudo[404057]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:08 np0005625201 sshd[404133]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:06:20 np0005625201 sshd[404169]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:06:24 np0005625201 sudo[402587]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:28 np0005625201 sudo[404399]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xnzebsetyrhrroykkletcrlwmotpmmmd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578388.4871378-400-50785607646746/AnsiballZ_file.py Feb 20 09:06:28 np0005625201 sudo[404399]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:29 np0005625201 sudo[404399]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:29 np0005625201 sudo[404636]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gfmcdpsdsarsnaxriknpadnoidrunyde ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578389.2882893-424-241847089423039/AnsiballZ_stat.py Feb 20 09:06:29 np0005625201 sudo[404636]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:29 np0005625201 sudo[404636]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:30 np0005625201 sudo[404709]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spfnrclfqqcgzusdvukbivsogenvupai ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578389.2882893-424-241847089423039/AnsiballZ_copy.py Feb 20 09:06:30 np0005625201 sudo[404709]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:30 np0005625201 sudo[404709]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:32 np0005625201 sudo[404966]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zoelycwftuqwmvnouycxwqwlpbitzxep ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578391.9450872-498-69468461367547/AnsiballZ_setup.py Feb 20 09:06:32 np0005625201 sudo[404966]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:32 np0005625201 sudo[404966]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:33 np0005625201 sudo[405122]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xefbinmzrijqeuftcechbkgjrflaeywy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578391.9450872-498-69468461367547/AnsiballZ_dnf.py Feb 20 09:06:33 np0005625201 sudo[405122]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:38 np0005625201 sudo[405122]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:38 np0005625201 sudo[405261]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ubfjvpimfsgkvqblpiujpsmvtxbwvaif ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578398.677126-535-39370707369483/AnsiballZ_command.py Feb 20 09:06:38 np0005625201 sudo[405261]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:40 np0005625201 sudo[405261]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:40 np0005625201 sudo[405524]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vyoiyzbjqkbdrwipaobixbwoythmkgze ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578400.2043433-559-113125340743452/AnsiballZ_selinux.py Feb 20 09:06:40 np0005625201 sudo[405524]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:41 np0005625201 sudo[405524]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:41 np0005625201 sudo[405616]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jtnftfoudrjvmbxuakfknvbkjctqjfje ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578401.4641206-592-211605300694598/AnsiballZ_command.py Feb 20 09:06:41 np0005625201 sudo[405616]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:42 np0005625201 sudo[405616]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:42 np0005625201 sudo[405709]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-edegyweefnfmdeuzjotxttnsumifoexb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578402.5886495-615-24869387977745/AnsiballZ_file.py Feb 20 09:06:42 np0005625201 sudo[405709]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:43 np0005625201 sudo[405709]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:44 np0005625201 sudo[405801]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-deebodwsovzefcnofutifcjrybxwmfgp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578403.7040198-639-166077611700465/AnsiballZ_mount.py Feb 20 09:06:44 np0005625201 sudo[405801]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:44 np0005625201 sudo[405801]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:45 np0005625201 sudo[405893]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iuaeneybclumzfqcnepcwszgxziwuboz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578405.240998-724-4894378157775/AnsiballZ_file.py Feb 20 09:06:45 np0005625201 sudo[405893]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:45 np0005625201 sudo[405893]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:46 np0005625201 sudo[405985]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ritixekusvgnskjydfvnrntkrxnvhvki ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578405.9173455-748-124906379041947/AnsiballZ_stat.py Feb 20 09:06:46 np0005625201 sudo[405985]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:46 np0005625201 sudo[405985]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:46 np0005625201 sudo[406059]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gnqsolyddpqljdccfbuhgihpigaidebd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578405.9173455-748-124906379041947/AnsiballZ_copy.py Feb 20 09:06:46 np0005625201 sudo[406059]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:46 np0005625201 sudo[406059]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:47 np0005625201 sshd[405988]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:06:47 np0005625201 sudo[406152]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znevaxtmwddehyduyiveegtbqvamqjpb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578407.57888-820-260152220383226/AnsiballZ_stat.py Feb 20 09:06:47 np0005625201 sudo[406152]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:51 np0005625201 sudo[406152]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:51 np0005625201 sudo[406244]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iptshnfiyjnpvyccbgwddiahumgxpyhj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578411.3225293-844-116870459896665/AnsiballZ_command.py Feb 20 09:06:51 np0005625201 sudo[406244]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:52 np0005625201 sudo[406244]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:52 np0005625201 sudo[406337]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bzmcrmyvuhhdmfxlwevjitpczrgnawdz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578412.3272712-868-237517658594844/AnsiballZ_file.py Feb 20 09:06:52 np0005625201 sudo[406337]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:52 np0005625201 sudo[406337]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:53 np0005625201 sshd[406354]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:06:53 np0005625201 sudo[406431]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-guajbpshxuodufxxdpwkfguvpahaymet ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578413.3201551-901-8965093646041/AnsiballZ_getent.py Feb 20 09:06:53 np0005625201 sudo[406431]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:53 np0005625201 sudo[406431]: pam_unix(sudo:session): session closed for user root Feb 20 09:06:58 np0005625201 sudo[406524]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cjkyixvokesabhvwpoibqweixabjbfae ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578417.8592298-931-58641229496934/AnsiballZ_getent.py Feb 20 09:06:58 np0005625201 sudo[406524]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:06:58 np0005625201 sudo[406524]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:03 np0005625201 sudo[406781]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdqbcsfewcxabvmmnucmpbsietyrkovc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578423.0148249-954-80676853587024/AnsiballZ_group.py Feb 20 09:07:03 np0005625201 sudo[406781]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:03 np0005625201 groupmod[406832]: group changed in /etc/group (group hugetlbfs/985, new gid: 42477) Feb 20 09:07:03 np0005625201 groupmod[406832]: group changed in /etc/passwd (group hugetlbfs/985, new gid: 42477) Feb 20 09:07:03 np0005625201 sudo[406781]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:03 np0005625201 sudo[406839]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:07:03 np0005625201 sudo[406839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:07:03 np0005625201 sudo[406839]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:03 np0005625201 sudo[406868]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:07:03 np0005625201 sudo[406868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:07:04 np0005625201 sshd[406883]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:07:04 np0005625201 sudo[406975]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lphymzyogskkowzwbwuhxddtyfgfcgsp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578423.9506943-981-233149764733451/AnsiballZ_file.py Feb 20 09:07:04 np0005625201 sudo[406975]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:04 np0005625201 sudo[406975]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:04 np0005625201 sudo[406868]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:04 np0005625201 sudo[407041]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:07:04 np0005625201 sudo[407041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:07:04 np0005625201 sudo[407041]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:05 np0005625201 sudo[407099]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yjxicbvxofzlkaknrdxtnrffnwyfuxbe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578424.8103442-1015-179057147791710/AnsiballZ_dnf.py Feb 20 09:07:05 np0005625201 sudo[407099]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:08 np0005625201 sudo[407099]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:09 np0005625201 sudo[407193]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qjleznpcvzirmosttkbteplexrdfownc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578428.8472455-1039-4719210818734/AnsiballZ_file.py Feb 20 09:07:09 np0005625201 sudo[407193]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:09 np0005625201 sudo[407193]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:09 np0005625201 sudo[407285]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdboguabouywptpddtxftrdayzitrclc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578429.7097363-1062-188487629227182/AnsiballZ_stat.py Feb 20 09:07:09 np0005625201 sudo[407285]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:10 np0005625201 sudo[407285]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:10 np0005625201 sudo[407358]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lgqmeyirtnirhprxwyhvlqwlaeskcgps ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578429.7097363-1062-188487629227182/AnsiballZ_copy.py Feb 20 09:07:10 np0005625201 sudo[407358]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:10 np0005625201 sudo[407358]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:11 np0005625201 sudo[407450]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vjhdvihtosjbhpblpvmuscxgnplcamke ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578430.9703972-1109-92961363697292/AnsiballZ_systemd.py Feb 20 09:07:11 np0005625201 sudo[407450]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:11 np0005625201 sudo[407450]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:12 np0005625201 sudo[407546]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hrggqxaauwznjnarrynisgevyeqbhfnw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578432.078137-1132-29120249588385/AnsiballZ_stat.py Feb 20 09:07:12 np0005625201 sudo[407546]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:12 np0005625201 sudo[407546]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:12 np0005625201 sudo[407619]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-skcascasbejkiezuaszevlzuitgpuvgu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578432.078137-1132-29120249588385/AnsiballZ_copy.py Feb 20 09:07:12 np0005625201 sudo[407619]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:13 np0005625201 sudo[407619]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:13 np0005625201 sudo[407711]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvujlyloznwtkxgactemokluejebfzxl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578433.6103766-1186-280066479354573/AnsiballZ_dnf.py Feb 20 09:07:13 np0005625201 sudo[407711]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:17 np0005625201 sudo[407711]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:20 np0005625201 sudo[408077]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jzogwoysjafhpsungvvegiuybtnjqcxc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578440.6732821-1309-54674221323903/AnsiballZ_systemd.py Feb 20 09:07:20 np0005625201 sudo[408077]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:22 np0005625201 sudo[408077]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:26 np0005625201 sudo[408275]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pemebkjegedjtziuhnxmxizptfntzdvs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578446.508561-1481-143437219289505/AnsiballZ_systemd.py Feb 20 09:07:26 np0005625201 sudo[408275]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:27 np0005625201 sudo[408275]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:27 np0005625201 sudo[408406]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bdrfmpvajjqwafqpgzzqgtbxyftxofyn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578447.6239488-1481-144473668389329/AnsiballZ_systemd.py Feb 20 09:07:27 np0005625201 sudo[408406]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:28 np0005625201 sudo[408406]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:29 np0005625201 sudo[408536]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mphesqpoxnpxzqysavjfooxjoryhczae ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578449.156255-1528-30804221839192/AnsiballZ_command.py Feb 20 09:07:29 np0005625201 sudo[408536]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:29 np0005625201 sudo[408536]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:30 np0005625201 sudo[408629]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fcazmxczerxxbdwqfuqqlossvhccljsb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578449.9390795-1552-220387862938217/AnsiballZ_command.py Feb 20 09:07:30 np0005625201 sudo[408629]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:30 np0005625201 sudo[408629]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:30 np0005625201 sudo[408722]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vdyicpvcrqvyhptvjswctnwtalzwhpky ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578450.6407697-1576-185437667809246/AnsiballZ_command.py Feb 20 09:07:30 np0005625201 sudo[408722]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:32 np0005625201 sudo[408722]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:32 np0005625201 sudo[408821]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-igptnirhlpqprifacapjramsfnmliygl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578452.4256654-1599-279194522674092/AnsiballZ_command.py Feb 20 09:07:32 np0005625201 sudo[408821]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:32 np0005625201 sudo[408821]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:33 np0005625201 sudo[408914]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zhzpznofopnxdbejjmfmmzrtwnihikjb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578453.1303668-1624-168271505375197/AnsiballZ_systemd.py Feb 20 09:07:33 np0005625201 sudo[408914]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:33 np0005625201 sudo[408914]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:34 np0005625201 sshd[401051]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:07:35 np0005625201 sshd[409110]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:07:39 np0005625201 sshd[409112]: Accepted publickey for zuul from 192.168.122.31 port 48298 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:07:39 np0005625201 sshd[409112]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:07:43 np0005625201 sudo[409393]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-csaivipdebjgcdhmannelpvryvvvrdpz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578463.07265-107-46641953086235/AnsiballZ_command.py Feb 20 09:07:43 np0005625201 sudo[409393]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:43 np0005625201 sudo[409393]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:45 np0005625201 sudo[409580]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tjbvbmbfopejuougyidhuyxncmhzllks ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578465.2668998-167-90717046769754/AnsiballZ_setup.py Feb 20 09:07:45 np0005625201 sudo[409580]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:46 np0005625201 sudo[409580]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:46 np0005625201 sshd[409587]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:07:46 np0005625201 sudo[409636]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dfurcjwzbibivjwqxdqhcousgddntnyg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578465.2668998-167-90717046769754/AnsiballZ_dnf.py Feb 20 09:07:46 np0005625201 sudo[409636]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:49 np0005625201 sudo[409636]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:50 np0005625201 sudo[409730]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahjorsgtzoakcfxqgrfgdogdyivlihjd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578470.217963-203-141391414289711/AnsiballZ_setup.py Feb 20 09:07:50 np0005625201 sudo[409730]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:51 np0005625201 sudo[409730]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:51 np0005625201 sudo[409877]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kfqaqwvdsmhaoisrjwfcsamfydueljfi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578471.3740933-236-121806352706103/AnsiballZ_file.py Feb 20 09:07:51 np0005625201 sudo[409877]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:52 np0005625201 sudo[409877]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:52 np0005625201 sudo[409969]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gvkhgthhcdmqeopbpqnltmisircacmlg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578472.2036393-261-91749171870273/AnsiballZ_command.py Feb 20 09:07:52 np0005625201 sudo[409969]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:52 np0005625201 sudo[409969]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:53 np0005625201 sudo[410072]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qdkockdqntvecduopdkkkdqwairjhuvu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578472.971331-284-187787847280716/AnsiballZ_stat.py Feb 20 09:07:53 np0005625201 sudo[410072]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:53 np0005625201 sudo[410072]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:53 np0005625201 sudo[410120]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uddawpkbpuyxoyvjtabadnyjsiigyinr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578472.971331-284-187787847280716/AnsiballZ_file.py Feb 20 09:07:53 np0005625201 sudo[410120]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:54 np0005625201 sudo[410120]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:54 np0005625201 sudo[410212]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pvvszhoamcpmrxznfnptgjuspznlpvct ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578474.22047-320-135639360342788/AnsiballZ_stat.py Feb 20 09:07:54 np0005625201 sudo[410212]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:54 np0005625201 sudo[410212]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:55 np0005625201 sudo[410285]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzokjysyeepzvqfodwfyihdivumibwwu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578474.22047-320-135639360342788/AnsiballZ_copy.py Feb 20 09:07:55 np0005625201 sudo[410285]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:55 np0005625201 sudo[410285]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:56 np0005625201 sudo[410377]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hxsdxbnazvzjkqovoiwnlsnalxpmqvbv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578475.6240633-368-184779291585099/AnsiballZ_ini_file.py Feb 20 09:07:56 np0005625201 sudo[410377]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:56 np0005625201 sudo[410377]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:56 np0005625201 sudo[410469]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nypzmykexyvdzowbjjzctfhlptaluacy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578476.3891664-368-213237570260339/AnsiballZ_ini_file.py Feb 20 09:07:56 np0005625201 sudo[410469]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:56 np0005625201 sudo[410469]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:57 np0005625201 sudo[410561]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ftfxmzufqvvuhqbybhtlhcaoscufnigv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578476.9887888-368-236465008134784/AnsiballZ_ini_file.py Feb 20 09:07:57 np0005625201 sudo[410561]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:57 np0005625201 sudo[410561]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:57 np0005625201 sudo[410653]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uaazmrbzajrojcdwzustnnmldwzannqe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578477.5887878-368-83337263252572/AnsiballZ_ini_file.py Feb 20 09:07:57 np0005625201 sudo[410653]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:07:58 np0005625201 sudo[410653]: pam_unix(sudo:session): session closed for user root Feb 20 09:07:59 np0005625201 sudo[410837]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mroaubmuekoshmjeduwtlqizdjotftlt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578479.3212392-489-8732276734974/AnsiballZ_dnf.py Feb 20 09:07:59 np0005625201 sudo[410837]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:02 np0005625201 sudo[410837]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:03 np0005625201 sudo[410965]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wmogdttwvmdodoofarovzmixggxqpdkx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578483.6396844-512-105606094830675/AnsiballZ_dnf.py Feb 20 09:08:03 np0005625201 sudo[410965]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:05 np0005625201 sudo[411136]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:08:05 np0005625201 sudo[411136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:08:05 np0005625201 sudo[411136]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:05 np0005625201 sudo[411151]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:08:05 np0005625201 sudo[411151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:08:05 np0005625201 sudo[411151]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:07 np0005625201 sudo[410965]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:08 np0005625201 sudo[411288]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zdcytwbacpzmgbbmqeemcthnycagelic ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578488.1958418-542-54763569714236/AnsiballZ_dnf.py Feb 20 09:08:08 np0005625201 sudo[411288]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:09 np0005625201 sudo[411293]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:08:09 np0005625201 sudo[411293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:08:09 np0005625201 sudo[411293]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:11 np0005625201 sshd[411308]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:08:12 np0005625201 sudo[411288]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:13 np0005625201 sudo[411405]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ijuvgmpzghlummpwvhvjrzwyuvfghfxi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578493.3111532-569-73810705554772/AnsiballZ_dnf.py Feb 20 09:08:13 np0005625201 sudo[411405]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:16 np0005625201 sudo[411405]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:17 np0005625201 sudo[411499]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qixphltkzwpynhkvzdhnqbsaeaeowlvd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578497.6534057-605-88086592868775/AnsiballZ_dnf.py Feb 20 09:08:17 np0005625201 sudo[411499]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:18 np0005625201 sshd[411502]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:08:21 np0005625201 sudo[411499]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:23 np0005625201 sudo[411595]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xpoaeaqnptlunmsdxoeyvosebntztqmq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578503.0101862-632-178893099544601/AnsiballZ_dnf.py Feb 20 09:08:23 np0005625201 sudo[411595]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:25 np0005625201 sshd[411600]: Invalid user from 194.187.176.152 port 26224 Feb 20 09:08:25 np0005625201 sshd[411600]: Connection closed by invalid user 194.187.176.152 port 26224 [preauth] Feb 20 09:08:26 np0005625201 sudo[411595]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:27 np0005625201 sudo[411694]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xeptxthutgkavxeyqutafgzkjkjdpryz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578507.412558-677-253997909144387/AnsiballZ_file.py Feb 20 09:08:27 np0005625201 sudo[411694]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:27 np0005625201 sudo[411694]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:28 np0005625201 sudo[411800]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sprssydpwzcvmrkhtoohrimptqwlgsjl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578508.1403267-701-121490910096120/AnsiballZ_stat.py Feb 20 09:08:28 np0005625201 sudo[411800]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:29 np0005625201 sudo[411800]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:29 np0005625201 sudo[411873]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmifgiecflpbozrbehkifgfgwirdqysx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578508.1403267-701-121490910096120/AnsiballZ_copy.py Feb 20 09:08:29 np0005625201 sudo[411873]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:29 np0005625201 sudo[411873]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:30 np0005625201 sudo[411965]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qghncjtnwxoqyhwhztiurhjdgdzgzylb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578510.1987295-755-28190504439734/AnsiballZ_podman_image.py Feb 20 09:08:30 np0005625201 sudo[411965]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:32 np0005625201 sshd[411993]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:08:37 np0005625201 sudo[411965]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:39 np0005625201 sudo[412358]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pckbruwkjvzxvmuackznlmdwmnklooke ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578518.9232368-788-172564476948001/AnsiballZ_podman_image.py Feb 20 09:08:39 np0005625201 sudo[412358]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:48 np0005625201 sudo[412358]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:49 np0005625201 sshd[409112]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:08:54 np0005625201 sshd[412499]: Accepted publickey for zuul from 192.168.122.31 port 45844 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:08:54 np0005625201 sshd[412499]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:08:57 np0005625201 sudo[412686]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uymmurguuzpqvswddxrbgzhtlicnmoar ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578536.592316-68-78979715204338/AnsiballZ_getent.py Feb 20 09:08:57 np0005625201 sudo[412686]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:57 np0005625201 sudo[412686]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:58 np0005625201 sudo[412779]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hoqkjxhusofkylugcqkzkblgablvlfad ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578537.8740306-104-114534231095602/AnsiballZ_setup.py Feb 20 09:08:58 np0005625201 sudo[412779]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:08:58 np0005625201 sudo[412779]: pam_unix(sudo:session): session closed for user root Feb 20 09:08:59 np0005625201 sudo[412833]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mrxolyyexuszswmknyzzltpkrlejvzfr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578537.8740306-104-114534231095602/AnsiballZ_dnf.py Feb 20 09:08:59 np0005625201 sudo[412833]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:01 np0005625201 sshd[412838]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:09:03 np0005625201 sudo[412833]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:06 np0005625201 sudo[413043]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpqavljlvofqdfktjnivhtpozgdtzsop ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578545.9899747-146-235626806756126/AnsiballZ_dnf.py Feb 20 09:09:06 np0005625201 sudo[413043]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:09 np0005625201 sudo[413390]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:09:09 np0005625201 sudo[413390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:09 np0005625201 sudo[413390]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:10 np0005625201 sudo[413405]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:09:10 np0005625201 sudo[413405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:10 np0005625201 sudo[413405]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:10 np0005625201 sudo[413453]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:09:10 np0005625201 sudo[413453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:10 np0005625201 sudo[413453]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:10 np0005625201 sudo[413468]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:09:10 np0005625201 sudo[413468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:12 np0005625201 sudo[413468]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:12 np0005625201 sudo[413043]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:12 np0005625201 sudo[413502]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:09:12 np0005625201 sudo[413502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:12 np0005625201 sudo[413502]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:13 np0005625201 sudo[413531]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 -- inventory --format=json-pretty --filter-for-batch Feb 20 09:09:13 np0005625201 sudo[413531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:13 np0005625201 sudo[413661]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lbmfmgkzmpkxkrcaipzhnjyhklbkpknd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578553.1092632-171-238686038572441/AnsiballZ_systemd.py Feb 20 09:09:13 np0005625201 sudo[413661]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:14 np0005625201 sudo[413661]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:15 np0005625201 sudo[413531]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:15 np0005625201 sudo[414844]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tiwoxzodltqvktorsafgaudmihaufaku ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578555.3506148-228-255251756581134/AnsiballZ_sefcontext.py Feb 20 09:09:15 np0005625201 sudo[414844]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:17 np0005625201 sudo[414844]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:17 np0005625201 sudo[414866]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:09:17 np0005625201 sudo[414866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:09:17 np0005625201 sudo[414866]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:18 np0005625201 sudo[415054]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tfmrjfmyzmmxzruchesblspuvxijvdzq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578558.5605204-281-199970685361015/AnsiballZ_dnf.py Feb 20 09:09:18 np0005625201 sudo[415054]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:18 np0005625201 sshd[415036]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:09:22 np0005625201 sudo[415054]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:22 np0005625201 sudo[415148]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wocxqnxwbsovdgrpultmddzimukiremr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578562.5602849-305-104913170978662/AnsiballZ_command.py Feb 20 09:09:22 np0005625201 sudo[415148]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:23 np0005625201 sudo[415148]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:24 np0005625201 sudo[415417]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rfqxgkjweekgncborplpefxcdkfzqcqb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578564.194304-329-33056912043121/AnsiballZ_file.py Feb 20 09:09:24 np0005625201 sudo[415417]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:24 np0005625201 sudo[415417]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:26 np0005625201 sudo[415601]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bmxogwrpfgckuwoxkfwprdvfaaeoqqte ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578565.9790745-383-84877546742882/AnsiballZ_dnf.py Feb 20 09:09:26 np0005625201 sudo[415601]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:29 np0005625201 sudo[415601]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:30 np0005625201 sudo[415698]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cwjowpdqplbaofrsfrkapphsjorekddc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578570.0160952-407-189694342689299/AnsiballZ_dnf.py Feb 20 09:09:30 np0005625201 sudo[415698]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:33 np0005625201 sudo[415698]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:34 np0005625201 sudo[415793]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-siotzlzseoemrvnmgxczgrkvdsamkcit ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578573.9996114-431-210739243692807/AnsiballZ_systemd.py Feb 20 09:09:34 np0005625201 sudo[415793]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:34 np0005625201 sudo[415793]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:35 np0005625201 sudo[415927]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uudhpoodbnzoosvmvrrzxtcindmkwxqw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578575.2833319-461-123585846800662/AnsiballZ_stat.py Feb 20 09:09:35 np0005625201 sudo[415927]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:35 np0005625201 sshd[415836]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:09:35 np0005625201 sudo[415927]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:36 np0005625201 sudo[416019]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qydsuwddfgybzpnmvfnipkitfdpgdcej ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578575.9995184-488-48235479776831/AnsiballZ_ini_file.py Feb 20 09:09:36 np0005625201 sudo[416019]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:36 np0005625201 sudo[416019]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:37 np0005625201 sudo[416261]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nuaofgvzgvnadrhxsriibnwykszgaazi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578577.2477834-512-78331983122375/AnsiballZ_ini_file.py Feb 20 09:09:37 np0005625201 sudo[416261]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:37 np0005625201 sudo[416261]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:38 np0005625201 sudo[416379]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wncryvvdokmosnjwdndxgiibhncwwwsz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578577.930268-536-244204348374119/AnsiballZ_ini_file.py Feb 20 09:09:38 np0005625201 sudo[416379]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:38 np0005625201 sudo[416379]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:38 np0005625201 sudo[416471]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-onyggdverfsvfwhbpuiponoormgscffi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578578.718698-566-193287330055306/AnsiballZ_stat.py Feb 20 09:09:38 np0005625201 sudo[416471]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:39 np0005625201 sudo[416471]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:39 np0005625201 sudo[416544]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ciktwexvtjxlcupsfkefpycuuofqugtv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578578.718698-566-193287330055306/AnsiballZ_copy.py Feb 20 09:09:39 np0005625201 sudo[416544]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:39 np0005625201 sudo[416544]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:40 np0005625201 sudo[416636]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-savrqhhlavblxitotafgfdjtkbdappkf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578580.1156347-611-241170494289443/AnsiballZ_file.py Feb 20 09:09:40 np0005625201 sudo[416636]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:40 np0005625201 sudo[416636]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:41 np0005625201 sudo[416728]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-udpdjfhssvcirgnitkeaeqiuvqflpxsi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578580.8670409-635-254912843720191/AnsiballZ_edpm_os_net_config_mappings.py Feb 20 09:09:41 np0005625201 sudo[416728]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:41 np0005625201 sudo[416728]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:41 np0005625201 sudo[416820]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-khsobtglrpoohvozzxypyvzwbatsavox ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578581.6819375-662-211542662139388/AnsiballZ_file.py Feb 20 09:09:41 np0005625201 sudo[416820]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:42 np0005625201 sudo[416820]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:42 np0005625201 sudo[416912]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-taxcumrjtkmbhzauetqdhpadcljodmky ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578582.4696925-692-112901599681540/AnsiballZ_stat.py Feb 20 09:09:42 np0005625201 sudo[416912]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:42 np0005625201 sudo[416912]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:43 np0005625201 sudo[416985]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ysrzsfkmemooafwuskkeoyimdujzvwhq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578582.4696925-692-112901599681540/AnsiballZ_copy.py Feb 20 09:09:43 np0005625201 sudo[416985]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:43 np0005625201 sudo[416985]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:44 np0005625201 sudo[417077]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vwaquslyjltmmptgsgdfrxtslbopnuto ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578583.7615662-737-269179164736742/AnsiballZ_slurp.py Feb 20 09:09:44 np0005625201 sudo[417077]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:44 np0005625201 sudo[417077]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:45 np0005625201 sudo[417182]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rrmitlwgkkjvhkbxaxkhjzbdfdnkdxkq ; ANSIBLE_ASYNC_DIR='~/.ansible_async' /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578584.7144332-764-81667478272903/async_wrapper.py j891193598100 300 /home/zuul/.ansible/tmp/ansible-tmp-1771578584.7144332-764-81667478272903/AnsiballZ_edpm_os_net_config.py _ Feb 20 09:09:45 np0005625201 sudo[417182]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:45 np0005625201 sudo[417182]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:46 np0005625201 sshd[417191]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:09:49 np0005625201 sudo[417294]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-onnmdeybwhcswkhwthyjgyanxsrvfrqx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578588.6464596-764-74870896110905/AnsiballZ_async_status.py Feb 20 09:09:49 np0005625201 sudo[417294]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:49 np0005625201 sudo[417294]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:49 np0005625201 sudo[417353]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srfqenohuxkbjkezslyzdiblcrclspem ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578588.6464596-764-74870896110905/AnsiballZ_async_status.py Feb 20 09:09:49 np0005625201 sudo[417353]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:49 np0005625201 sudo[417353]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:50 np0005625201 sudo[417445]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-enkdzeefyunqupyymtsrprscfqqmncby ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578589.9831371-830-57332832358125/AnsiballZ_stat.py Feb 20 09:09:50 np0005625201 sudo[417445]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:50 np0005625201 sudo[417445]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:50 np0005625201 sudo[417518]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ifqvdxqcluvhwpuxuyeuhvhaqecyyyws ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578589.9831371-830-57332832358125/AnsiballZ_copy.py Feb 20 09:09:50 np0005625201 sudo[417518]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:50 np0005625201 sudo[417518]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:51 np0005625201 sudo[417610]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rsfcifjsghonqdnquxealslimdmienre ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578591.280208-878-108200305898018/AnsiballZ_stat.py Feb 20 09:09:51 np0005625201 sudo[417610]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:51 np0005625201 sudo[417610]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:52 np0005625201 sudo[417683]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sapuhddoegyupstqabhhqlwudymndiib ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578591.280208-878-108200305898018/AnsiballZ_copy.py Feb 20 09:09:52 np0005625201 sudo[417683]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:52 np0005625201 sudo[417683]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:52 np0005625201 sudo[417775]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-udnenasxnldpskyhykdigzwuapuevosz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578592.543076-923-41578311442659/AnsiballZ_systemd.py Feb 20 09:09:52 np0005625201 sudo[417775]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:09:53 np0005625201 sudo[417775]: pam_unix(sudo:session): session closed for user root Feb 20 09:09:54 np0005625201 sshd[412499]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:10:00 np0005625201 sshd[417796]: Accepted publickey for zuul from 192.168.122.31 port 53250 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:10:00 np0005625201 sshd[417796]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:10:04 np0005625201 sshd[417796]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:10:04 np0005625201 sshd[418178]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:10:09 np0005625201 sshd[418350]: Accepted publickey for zuul from 192.168.122.31 port 35746 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:10:09 np0005625201 sshd[418350]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:10:12 np0005625201 sudo[418631]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dcabxjokdlfkvqzdhfqutdcntuvryrso ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578612.1243546-77-228014017874298/AnsiballZ_setup.py Feb 20 09:10:12 np0005625201 sudo[418631]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:13 np0005625201 sudo[418631]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:13 np0005625201 sudo[418685]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nzslitijofjnnvtziwftisjybpwkwqse ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578612.1243546-77-228014017874298/AnsiballZ_dnf.py Feb 20 09:10:13 np0005625201 sudo[418685]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:16 np0005625201 sudo[418685]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:17 np0005625201 sudo[418779]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-psinzlvdqxmbszluonshiyljcnwxujod ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578617.1325183-113-265171701468221/AnsiballZ_setup.py Feb 20 09:10:17 np0005625201 sudo[418779]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:17 np0005625201 sudo[418782]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:10:17 np0005625201 sudo[418782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:10:17 np0005625201 sudo[418782]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:17 np0005625201 sudo[418817]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:10:17 np0005625201 sudo[418817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:10:17 np0005625201 sudo[418779]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:18 np0005625201 sudo[418817]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:18 np0005625201 sudo[418988]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uaebvlphxvnrqdttwlryfkciedclyiym ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578618.3080227-146-257524899223230/AnsiballZ_file.py Feb 20 09:10:18 np0005625201 sudo[418988]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:18 np0005625201 sudo[418988]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:19 np0005625201 sudo[419080]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wwaovkmbiemaknocknckgzouhwvynaaz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578619.1788754-171-6946694852842/AnsiballZ_command.py Feb 20 09:10:19 np0005625201 sudo[419080]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:19 np0005625201 sudo[419080]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:20 np0005625201 sudo[419184]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eczxqcecyhgfdgeowiapelyudyxvmqki ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578620.0917556-195-41882162670037/AnsiballZ_stat.py Feb 20 09:10:20 np0005625201 sudo[419184]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:20 np0005625201 sudo[419184]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:21 np0005625201 sudo[419232]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bfbsjbnchxtcbgsolgbfazinqbievosz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578620.0917556-195-41882162670037/AnsiballZ_file.py Feb 20 09:10:21 np0005625201 sudo[419232]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:21 np0005625201 sudo[419235]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:10:21 np0005625201 sudo[419235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:10:21 np0005625201 sudo[419235]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:21 np0005625201 sudo[419232]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:21 np0005625201 sudo[419339]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ymmaxjmymuznnrmyeiomiludhjoiyjwo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578621.5048091-231-242411432047232/AnsiballZ_stat.py Feb 20 09:10:21 np0005625201 sudo[419339]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:22 np0005625201 sudo[419339]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:22 np0005625201 sudo[419387]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pmudylwdeytkfoazktgudtmfmtigxeve ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578621.5048091-231-242411432047232/AnsiballZ_file.py Feb 20 09:10:22 np0005625201 sudo[419387]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:22 np0005625201 sudo[419387]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:23 np0005625201 sudo[419479]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agaemnqmmuzzkxwdbkkbnugkqlfodsjf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578622.6325858-269-18385302003876/AnsiballZ_ini_file.py Feb 20 09:10:23 np0005625201 sudo[419479]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:23 np0005625201 sudo[419479]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:23 np0005625201 sudo[419571]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qxyjkqwfyowbtusnavhpjrjtjzkyzdcy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578623.475035-269-142699930978854/AnsiballZ_ini_file.py Feb 20 09:10:23 np0005625201 sudo[419571]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:23 np0005625201 sudo[419571]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:24 np0005625201 sudo[419663]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mngwwmyypzjkxbeleqngmartntbsnaqn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578624.0619717-269-143981755099883/AnsiballZ_ini_file.py Feb 20 09:10:24 np0005625201 sudo[419663]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:24 np0005625201 sudo[419663]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:24 np0005625201 sudo[419755]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ojgsggnbhprnxwobfzjhhqtutpayntfy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578624.6960893-269-172539987910385/AnsiballZ_ini_file.py Feb 20 09:10:24 np0005625201 sudo[419755]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:25 np0005625201 sudo[419755]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:25 np0005625201 sudo[419847]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dkhgifoslorpdyosdnfcdurqljvamzjq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578625.4464755-362-182774723945798/AnsiballZ_dnf.py Feb 20 09:10:25 np0005625201 sudo[419847]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:30 np0005625201 sudo[419847]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:30 np0005625201 sudo[419941]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cpmsczprhavgidprlkmuwgpjbzzoujhi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578630.5465178-395-175600425620920/AnsiballZ_setup.py Feb 20 09:10:30 np0005625201 sudo[419941]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:31 np0005625201 sudo[419941]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:31 np0005625201 sudo[420038]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vamxprmyvgqsvsqecbwicflgpdxjubny ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578631.4698787-419-76614725949878/AnsiballZ_stat.py Feb 20 09:10:31 np0005625201 sudo[420038]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:31 np0005625201 sudo[420038]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:32 np0005625201 sshd[420041]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:10:32 np0005625201 sudo[420133]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lmgrcdjcyftinhiadwcswjjeruiancze ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578632.1844687-447-3200209123856/AnsiballZ_stat.py Feb 20 09:10:32 np0005625201 sudo[420133]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:32 np0005625201 sudo[420133]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:33 np0005625201 sudo[420225]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qyywzoqgjmnfghbbflvypkhmxrsgloty ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578633.0800056-476-250149206974738/AnsiballZ_command.py Feb 20 09:10:33 np0005625201 sudo[420225]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:33 np0005625201 sudo[420225]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:34 np0005625201 sudo[420318]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sypnbvqnipqjyqfddigbfdxieqbreclq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578633.869073-506-176431468271596/AnsiballZ_service_facts.py Feb 20 09:10:34 np0005625201 sudo[420318]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:39 np0005625201 sudo[420318]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:40 np0005625201 sudo[420728]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fyysjspyoldbtupmuuwtwkkhfhqwiufg ; /bin/bash /home/zuul/.ansible/tmp/ansible-tmp-1771578640.4900272-552-162030653753360/AnsiballZ_timesync_provider.sh /home/zuul/.ansible/tmp/ansible-tmp-1771578640.4900272-552-162030653753360/args Feb 20 09:10:40 np0005625201 sudo[420728]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:40 np0005625201 sudo[420728]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:41 np0005625201 sudo[420835]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dixmhvggvvzbogvdkuodfidnrisengpf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578641.3262627-586-81322622608667/AnsiballZ_dnf.py Feb 20 09:10:41 np0005625201 sudo[420835]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:45 np0005625201 sudo[420835]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:46 np0005625201 sudo[420929]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yutwxblwflsrmynxujwuyypskqnkgdbs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578645.6501408-624-226136646285724/AnsiballZ_package_facts.py Feb 20 09:10:46 np0005625201 sudo[420929]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:46 np0005625201 sudo[420929]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:48 np0005625201 sudo[421021]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffrypwonhemwkslfnhlygxhakbpfqzip ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578647.7514913-656-156557639434976/AnsiballZ_stat.py Feb 20 09:10:48 np0005625201 sudo[421021]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:48 np0005625201 sudo[421021]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:48 np0005625201 sudo[421096]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gmxxlabblksgfunzpqxejfahsyeeycbb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578647.7514913-656-156557639434976/AnsiballZ_copy.py Feb 20 09:10:48 np0005625201 sudo[421096]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:49 np0005625201 sudo[421096]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:49 np0005625201 sudo[421190]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xtisdglpgtwmqtxgyzjqhgjgdblufmod ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578649.5633955-700-114021856282318/AnsiballZ_stat.py Feb 20 09:10:49 np0005625201 sudo[421190]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:50 np0005625201 sudo[421190]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:50 np0005625201 sudo[421265]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ytyosdwrtvegysemvpzmwnzawdykpqox ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578649.5633955-700-114021856282318/AnsiballZ_copy.py Feb 20 09:10:50 np0005625201 sudo[421265]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:50 np0005625201 sudo[421265]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:51 np0005625201 sudo[421359]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oowkovumblokjpbqgjueibwpzejhvxlj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578651.514586-762-184524102895439/AnsiballZ_lineinfile.py Feb 20 09:10:51 np0005625201 sudo[421359]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:52 np0005625201 sudo[421359]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:53 np0005625201 sudo[421453]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ddlgxotjodidnbpwasifshjmggppzaab ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578653.3294482-807-13701369659060/AnsiballZ_setup.py Feb 20 09:10:53 np0005625201 sudo[421453]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:54 np0005625201 sudo[421453]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:54 np0005625201 sshd[421463]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:10:55 np0005625201 sudo[421509]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgixmtrollwzknslyhzmecsksweprvqq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578653.3294482-807-13701369659060/AnsiballZ_systemd.py Feb 20 09:10:55 np0005625201 sudo[421509]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:55 np0005625201 sudo[421509]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:55 np0005625201 sshd[421512]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:10:57 np0005625201 sudo[421605]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xefjjgljasesolzfzbkoqnixruhlnwlc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578657.2946432-857-12319610833422/AnsiballZ_setup.py Feb 20 09:10:57 np0005625201 sudo[421605]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:58 np0005625201 sudo[421605]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:58 np0005625201 sudo[421659]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chfxozwvrgfzkoagzyufkgomwyuqaahj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578657.2946432-857-12319610833422/AnsiballZ_systemd.py Feb 20 09:10:58 np0005625201 sudo[421659]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:10:58 np0005625201 sudo[421659]: pam_unix(sudo:session): session closed for user root Feb 20 09:10:59 np0005625201 sshd[418350]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:11:05 np0005625201 sshd[421719]: Accepted publickey for zuul from 192.168.122.31 port 60220 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:11:05 np0005625201 sshd[421719]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:11:07 np0005625201 sudo[421906]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xtcuixfbopstomwejoqtzziuahrpbgor ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578667.049829-56-54391517654160/AnsiballZ_file.py Feb 20 09:11:07 np0005625201 sudo[421906]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:07 np0005625201 sudo[421906]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:08 np0005625201 sudo[422108]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ykmnddldyrqdtrahiczgyhhrpkbpkrnf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578667.81206-80-141479062957575/AnsiballZ_stat.py Feb 20 09:11:08 np0005625201 sudo[422108]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:08 np0005625201 sudo[422108]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:08 np0005625201 sudo[422203]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmlsnujsjguyzfnpxwhdxajzyjlqpsjs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578667.81206-80-141479062957575/AnsiballZ_file.py Feb 20 09:11:08 np0005625201 sudo[422203]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:08 np0005625201 sudo[422203]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:09 np0005625201 sudo[422323]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qscxavkyobtyqwmaaifpvsgiqnimldfl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578669.3703284-140-238400756894302/AnsiballZ_stat.py Feb 20 09:11:09 np0005625201 sudo[422323]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:09 np0005625201 sudo[422323]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:10 np0005625201 sudo[422399]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kecpxwnlzozompdfkyhyigwutbtsadoy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578669.3703284-140-238400756894302/AnsiballZ_copy.py Feb 20 09:11:10 np0005625201 sudo[422399]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:10 np0005625201 sudo[422399]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:11 np0005625201 sudo[422491]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbaxcmjwvcvhckxqlreudnsozintxqpl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578670.9366932-189-227201777841020/AnsiballZ_file.py Feb 20 09:11:11 np0005625201 sudo[422491]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:11 np0005625201 sudo[422491]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:11 np0005625201 sudo[422583]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lhdrgqzndpbnyapodanbqclwwephalgw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578671.5710762-212-232964084176189/AnsiballZ_stat.py Feb 20 09:11:11 np0005625201 sudo[422583]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:12 np0005625201 sudo[422583]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:12 np0005625201 sudo[422656]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ginyllvlmjshvrdyycijetunmyxmqaem ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578671.5710762-212-232964084176189/AnsiballZ_copy.py Feb 20 09:11:12 np0005625201 sudo[422656]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:12 np0005625201 sudo[422656]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:12 np0005625201 sudo[422748]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkmlbgxbjthhgoxolfdxmolpjqcxluhj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578672.7231157-212-236490235853660/AnsiballZ_stat.py Feb 20 09:11:12 np0005625201 sudo[422748]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:13 np0005625201 sudo[422748]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:13 np0005625201 sudo[422821]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyrzwdcojyrjyzdpaokdhbfmdmuovmfq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578672.7231157-212-236490235853660/AnsiballZ_copy.py Feb 20 09:11:13 np0005625201 sudo[422821]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:13 np0005625201 sudo[422821]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:14 np0005625201 sudo[422913]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wdnfjcbgudfqmjwlynakpvyujakdergf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578673.9610927-300-42476058868085/AnsiballZ_file.py Feb 20 09:11:14 np0005625201 sudo[422913]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:14 np0005625201 sudo[422913]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:14 np0005625201 sudo[423005]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sghkmsokcocnmqtpxitkunwrqjzjlydv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578674.617814-324-37676254187881/AnsiballZ_stat.py Feb 20 09:11:14 np0005625201 sudo[423005]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:15 np0005625201 sudo[423005]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:15 np0005625201 sudo[423078]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fgzlobfaonmocfnibhvqudpmzxsowwle ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578674.617814-324-37676254187881/AnsiballZ_copy.py Feb 20 09:11:15 np0005625201 sudo[423078]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:15 np0005625201 sudo[423078]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:16 np0005625201 sudo[423170]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tapybgqumbmpatjoojplpbgzdinpvwkj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578675.8228738-368-156067892284434/AnsiballZ_stat.py Feb 20 09:11:16 np0005625201 sudo[423170]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:16 np0005625201 sudo[423170]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:16 np0005625201 sudo[423243]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dpljvccqqcawlifgnonffmmoyfcynoie ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578675.8228738-368-156067892284434/AnsiballZ_copy.py Feb 20 09:11:16 np0005625201 sudo[423243]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:16 np0005625201 sudo[423243]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:17 np0005625201 sudo[423335]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ppaiuksuhsxfczbqlztsttwndkjtyqvv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578677.066329-413-125376449894455/AnsiballZ_systemd.py Feb 20 09:11:17 np0005625201 sudo[423335]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:18 np0005625201 sshd[423411]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:11:18 np0005625201 sudo[423335]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:19 np0005625201 sudo[423505]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwcdfpxiogujxqvqkiofmlxdaimjnhsf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578678.984537-438-271246728529226/AnsiballZ_stat.py Feb 20 09:11:19 np0005625201 sudo[423505]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:19 np0005625201 sudo[423505]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:19 np0005625201 sudo[423578]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sytypqovugnhobtktbcldrcqhtrkuasv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578678.984537-438-271246728529226/AnsiballZ_copy.py Feb 20 09:11:19 np0005625201 sudo[423578]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:20 np0005625201 sudo[423578]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:20 np0005625201 sudo[423670]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agkuamsargfcvxfyhjrrztpwtbuzrdva ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578680.19483-482-221882705446372/AnsiballZ_stat.py Feb 20 09:11:20 np0005625201 sudo[423670]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:20 np0005625201 sudo[423670]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:20 np0005625201 sudo[423747]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vhsecdwdfhjjullolybhwoxywgppeaxm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578680.19483-482-221882705446372/AnsiballZ_copy.py Feb 20 09:11:20 np0005625201 sudo[423747]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:21 np0005625201 sudo[423747]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:21 np0005625201 sudo[423818]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:11:21 np0005625201 sudo[423818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:11:21 np0005625201 sudo[423818]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:21 np0005625201 sudo[423848]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:11:21 np0005625201 sudo[423848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:11:21 np0005625201 sudo[423879]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dedmfglusgukslfuqgznmotklplzxdnk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578681.401788-528-213940623824586/AnsiballZ_systemd.py Feb 20 09:11:21 np0005625201 sudo[423879]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:22 np0005625201 sudo[423879]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:23 np0005625201 sudo[423848]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:23 np0005625201 sudo[424177]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:11:23 np0005625201 sudo[424177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:11:23 np0005625201 sudo[424177]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:23 np0005625201 sudo[424198]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:11:23 np0005625201 sudo[424198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:11:23 np0005625201 sudo[424198]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:25 np0005625201 sudo[424370]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:11:25 np0005625201 sudo[424370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:11:25 np0005625201 sudo[424370]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:28 np0005625201 sudo[424476]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dvvighqepsgzyqwrnrwmgkidadhfywnm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578688.5842981-606-89267129817912/AnsiballZ_stat.py Feb 20 09:11:28 np0005625201 sudo[424476]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:29 np0005625201 sudo[424476]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:29 np0005625201 sudo[424551]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-clrjcmrpfivordbvotzjnyhpovtvmoeg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578688.5842981-606-89267129817912/AnsiballZ_copy.py Feb 20 09:11:29 np0005625201 sudo[424551]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:29 np0005625201 sudo[424551]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:30 np0005625201 sudo[424644]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uonuemsggwuohdqpcszbrbedssivwtvl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578689.857085-651-174900515258910/AnsiballZ_systemd.py Feb 20 09:11:30 np0005625201 sudo[424644]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:30 np0005625201 sshd[403070]: Received SIGHUP; restarting. Feb 20 09:11:30 np0005625201 sshd[403070]: Server listening on 0.0.0.0 port 22. Feb 20 09:11:30 np0005625201 sshd[403070]: Server listening on :: port 22. Feb 20 09:11:30 np0005625201 sudo[424644]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:30 np0005625201 sudo[424740]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgbdefjedhcahsjzhqhgxijhkrqiqeic ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578690.7028654-675-57525718750419/AnsiballZ_file.py Feb 20 09:11:30 np0005625201 sudo[424740]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:31 np0005625201 sudo[424740]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:31 np0005625201 sudo[424832]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jbegejnkpsfbzrkfpxsjvyqmstlxxmmn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578691.452398-701-258348943627751/AnsiballZ_stat.py Feb 20 09:11:31 np0005625201 sudo[424832]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:31 np0005625201 sudo[424832]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:32 np0005625201 sudo[424905]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmpgutflauqzaintyzoircuocrtadczc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578691.452398-701-258348943627751/AnsiballZ_copy.py Feb 20 09:11:32 np0005625201 sudo[424905]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:32 np0005625201 sudo[424905]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:33 np0005625201 sudo[424997]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dkvaivtwewmxkatmihfkedlnaziuuchc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578692.7986116-752-157538342842808/AnsiballZ_timezone.py Feb 20 09:11:33 np0005625201 sudo[424997]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:33 np0005625201 sudo[424997]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:35 np0005625201 sudo[425097]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mzqnanndgjmfgsfxlgunahebakxylxkd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578694.8623388-779-265237091134895/AnsiballZ_file.py Feb 20 09:11:35 np0005625201 sudo[425097]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:35 np0005625201 sudo[425097]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:35 np0005625201 sudo[425189]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pdfwmhndimfswwiuginstvghdpxliohg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578695.5348306-805-274861832202538/AnsiballZ_stat.py Feb 20 09:11:35 np0005625201 sudo[425189]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:35 np0005625201 sudo[425189]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:36 np0005625201 sudo[425262]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-advvwklkfbqxnjhfdfonluhcozyccjfp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578695.5348306-805-274861832202538/AnsiballZ_copy.py Feb 20 09:11:36 np0005625201 sudo[425262]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:36 np0005625201 sudo[425262]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:36 np0005625201 sudo[425354]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-leofjkhtimqumjfwtozvgonvhmwptyaq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578696.6906219-849-264382954917396/AnsiballZ_stat.py Feb 20 09:11:36 np0005625201 sudo[425354]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:37 np0005625201 sudo[425354]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:37 np0005625201 sudo[425427]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bdxmztysivhyjytldmxmeuukhyttnfbs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578696.6906219-849-264382954917396/AnsiballZ_copy.py Feb 20 09:11:37 np0005625201 sudo[425427]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:37 np0005625201 sudo[425427]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:38 np0005625201 sudo[425519]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jsvftqkourltnpnxepdjdcxpstkjnswx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578697.8885179-894-76265682838742/AnsiballZ_stat.py Feb 20 09:11:38 np0005625201 sudo[425519]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:38 np0005625201 sudo[425519]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:38 np0005625201 sudo[425594]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-njgothfngzkrmjqellacpozktiygyprt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578697.8885179-894-76265682838742/AnsiballZ_copy.py Feb 20 09:11:38 np0005625201 sudo[425594]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:39 np0005625201 sudo[425594]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:39 np0005625201 sudo[425830]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lqeiiydmhewhsfjujvcuttqznxnpjxyy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578699.180978-938-30647456888535/AnsiballZ_command.py Feb 20 09:11:39 np0005625201 sudo[425830]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:39 np0005625201 sudo[425830]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:40 np0005625201 sudo[425951]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dperkvgitjyzwoythmrgdxacphzkejpb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578700.0131426-963-198883094388729/AnsiballZ_command.py Feb 20 09:11:40 np0005625201 sudo[425951]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:40 np0005625201 sudo[425951]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:41 np0005625201 sudo[426044]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tixwelzkmxdabxgsrjiasacwzyqywhrr ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771578700.691283-987-246738492100764/AnsiballZ_edpm_nftables_from_files.py Feb 20 09:11:41 np0005625201 sudo[426044]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:41 np0005625201 sudo[426044]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:41 np0005625201 sudo[426136]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovizryukwjyhthwwmzytxmdghntoeuus ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578701.5422654-1011-241274065688689/AnsiballZ_stat.py Feb 20 09:11:41 np0005625201 sudo[426136]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:42 np0005625201 sudo[426136]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:42 np0005625201 sudo[426211]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ojzlstfnmnyoulgksudmyjrlyczmwmfe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578701.5422654-1011-241274065688689/AnsiballZ_copy.py Feb 20 09:11:42 np0005625201 sudo[426211]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:42 np0005625201 sshd[426180]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:11:42 np0005625201 sudo[426211]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:43 np0005625201 sudo[426303]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-skqeglzamyuxccfxwvbsnlnyxejqphqv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578702.7618852-1056-192376477294283/AnsiballZ_stat.py Feb 20 09:11:43 np0005625201 sudo[426303]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:43 np0005625201 sudo[426303]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:43 np0005625201 sudo[426376]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-huocdibvyfknxupvuggzawlpjvipobuh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578702.7618852-1056-192376477294283/AnsiballZ_copy.py Feb 20 09:11:43 np0005625201 sudo[426376]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:43 np0005625201 sudo[426376]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:44 np0005625201 sudo[426468]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vbkhytgnkblxwhotxsgoekdrmvmcpfxs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578704.0585814-1101-127262684177751/AnsiballZ_stat.py Feb 20 09:11:44 np0005625201 sudo[426468]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:44 np0005625201 sudo[426468]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:44 np0005625201 sudo[426541]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jvgqeasichkinmromwskqysyhziioiim ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578704.0585814-1101-127262684177751/AnsiballZ_copy.py Feb 20 09:11:44 np0005625201 sudo[426541]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:45 np0005625201 sudo[426541]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:45 np0005625201 sudo[426633]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xffplavmfugmxuwrrdkxykvsofqfapov ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578705.3192923-1146-161710701717835/AnsiballZ_stat.py Feb 20 09:11:45 np0005625201 sudo[426633]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:45 np0005625201 sudo[426633]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:46 np0005625201 sudo[426706]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fpqlppegpuvnpovgskkwoxkqiubfsgee ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578705.3192923-1146-161710701717835/AnsiballZ_copy.py Feb 20 09:11:46 np0005625201 sudo[426706]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:46 np0005625201 sudo[426706]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:46 np0005625201 sudo[426798]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icwnvcziomfkubzjacuxvscbmliqkjqe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578706.6239076-1191-227990954520824/AnsiballZ_stat.py Feb 20 09:11:46 np0005625201 sudo[426798]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:47 np0005625201 sudo[426798]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:47 np0005625201 sudo[426871]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iwtgirpxbmcrwzmuhjvetjlqxgopobpr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578706.6239076-1191-227990954520824/AnsiballZ_copy.py Feb 20 09:11:47 np0005625201 sudo[426871]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:47 np0005625201 sudo[426871]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:48 np0005625201 sudo[426963]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bqialrkzswpcsuwmjgowncbevkgqhksc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578707.896789-1235-111803636250657/AnsiballZ_file.py Feb 20 09:11:48 np0005625201 sudo[426963]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:48 np0005625201 sudo[426963]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:48 np0005625201 sudo[427055]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jefsqtviwmmyeusndpecyibvzfzbtaei ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578708.5175397-1260-279823204789886/AnsiballZ_command.py Feb 20 09:11:48 np0005625201 sudo[427055]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:49 np0005625201 sudo[427055]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:49 np0005625201 sudo[427150]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hyjoyzxuipqrrgpruundfnuvjhdobpzt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578709.2082987-1284-13245766602220/AnsiballZ_blockinfile.py Feb 20 09:11:49 np0005625201 sudo[427150]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:49 np0005625201 sudo[427150]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:50 np0005625201 sudo[427243]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffuxtqehsqtyvmqykqpwllvxdwbbzdzs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578710.0949123-1311-167849537813542/AnsiballZ_file.py Feb 20 09:11:50 np0005625201 sudo[427243]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:50 np0005625201 sudo[427243]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:50 np0005625201 sudo[427335]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ywawzynrvuytukloltzfvtfclbwolpde ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578710.6796982-1311-48344381250636/AnsiballZ_file.py Feb 20 09:11:50 np0005625201 sudo[427335]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:51 np0005625201 sudo[427335]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:51 np0005625201 sudo[427427]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gbkgxontbbykvlgnqslvzcmprhasestd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578711.3797774-1356-165833876865195/AnsiballZ_mount.py Feb 20 09:11:51 np0005625201 sudo[427427]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:51 np0005625201 sudo[427427]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:52 np0005625201 sudo[427520]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dmoxgcinobcwzqvbbghnydbkyuvwyhzh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578712.1101074-1356-132202762490595/AnsiballZ_mount.py Feb 20 09:11:52 np0005625201 sudo[427520]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:11:52 np0005625201 sudo[427520]: pam_unix(sudo:session): session closed for user root Feb 20 09:11:53 np0005625201 sshd[421719]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:11:58 np0005625201 sshd[427538]: Accepted publickey for zuul from 192.168.122.31 port 38602 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:11:58 np0005625201 sshd[427538]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:12:00 np0005625201 sudo[427725]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iinkzvlvgpfghinsforjlizadcutaqtm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578720.2375314-53-111698296109723/AnsiballZ_systemd.py Feb 20 09:12:00 np0005625201 sudo[427725]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:01 np0005625201 sudo[427725]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:01 np0005625201 sudo[427819]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ablvtfsyjhivgfnijsgmprvsveailaci ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578721.349806-77-56562028241309/AnsiballZ_systemd.py Feb 20 09:12:01 np0005625201 sudo[427819]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:01 np0005625201 sudo[427819]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:02 np0005625201 sshd[427873]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:12:02 np0005625201 sudo[427946]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jmiihqwetkszlpcsshlfzcvppiyuknwn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578722.1891754-104-54130958298288/AnsiballZ_command.py Feb 20 09:12:02 np0005625201 sudo[427946]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:02 np0005625201 sudo[427946]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:03 np0005625201 sudo[428039]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qphayogvwwyhsmifdjxucvhccndjrgrc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578723.0059993-128-79110675037874/AnsiballZ_stat.py Feb 20 09:12:03 np0005625201 sudo[428039]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:03 np0005625201 sudo[428039]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:04 np0005625201 sudo[428135]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xybdsmpvrlniuxilbsjvstrwqsachthu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578723.8083112-152-236970136328279/AnsiballZ_command.py Feb 20 09:12:04 np0005625201 sudo[428135]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:04 np0005625201 sudo[428135]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:04 np0005625201 sudo[428230]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fubtejfoabhzxenatvtyxvwuhmodkaok ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578724.502488-177-9948998644930/AnsiballZ_file.py Feb 20 09:12:04 np0005625201 sudo[428230]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:05 np0005625201 sudo[428230]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:05 np0005625201 sshd[427538]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:12:11 np0005625201 sshd[428419]: Accepted publickey for zuul from 192.168.122.31 port 43266 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:12:11 np0005625201 sshd[428419]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:12:12 np0005625201 sudo[428607]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oryknevpvvzuahxdjjtpmbrdciphgmbq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578732.581579-59-273154314286614/AnsiballZ_setup.py Feb 20 09:12:12 np0005625201 sudo[428607]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:13 np0005625201 sshd[428579]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:12:13 np0005625201 sudo[428607]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:13 np0005625201 sudo[428662]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ywpexmsupcyhbkvwpqmwwyhsqtsiktlz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578732.581579-59-273154314286614/AnsiballZ_dnf.py Feb 20 09:12:13 np0005625201 sudo[428662]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:17 np0005625201 sudo[428662]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:19 np0005625201 sudo[428847]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shsdfevqniowfubwkhssspneqirokwyu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578739.1499994-122-113365468086994/AnsiballZ_file.py Feb 20 09:12:19 np0005625201 sudo[428847]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:19 np0005625201 sudo[428847]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:20 np0005625201 sudo[428939]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rkyyzronwvwilkepnmogxjrvksjfviaf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578739.994049-146-135487331518514/AnsiballZ_file.py Feb 20 09:12:20 np0005625201 sudo[428939]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:20 np0005625201 sudo[428939]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:21 np0005625201 sudo[429031]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzfhpfsxwxeljszkgfjszachexmhjamn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578740.6186583-170-52605693672562/AnsiballZ_lineinfile.py Feb 20 09:12:21 np0005625201 sudo[429031]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:21 np0005625201 sudo[429031]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:23 np0005625201 sshd[428419]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:12:25 np0005625201 sudo[429322]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:12:25 np0005625201 sudo[429322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:12:25 np0005625201 sudo[429322]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:26 np0005625201 sudo[429337]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 09:12:26 np0005625201 sudo[429337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:12:26 np0005625201 sudo[429337]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:26 np0005625201 sudo[429374]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:12:26 np0005625201 sudo[429374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:12:26 np0005625201 sudo[429374]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:26 np0005625201 sudo[429389]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:12:26 np0005625201 sudo[429389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:12:27 np0005625201 sudo[429389]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:28 np0005625201 sudo[429437]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:12:28 np0005625201 sudo[429437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:12:28 np0005625201 sudo[429437]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:28 np0005625201 sshd[429452]: Accepted publickey for zuul from 192.168.122.31 port 57326 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:12:28 np0005625201 sshd[429452]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:12:31 np0005625201 sshd[429577]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:12:31 np0005625201 sudo[429641]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qffdpdonuqhcgtyomhkwdnjigzwgmpst ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578751.387202-155-78171041406894/AnsiballZ_file.py Feb 20 09:12:31 np0005625201 sudo[429641]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:32 np0005625201 sudo[429641]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:32 np0005625201 sudo[429733]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chxhgxzimyehzocxyrdnsqyocxhscbyg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578752.1387863-178-159248588412816/AnsiballZ_stat.py Feb 20 09:12:32 np0005625201 sudo[429733]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:32 np0005625201 sudo[429733]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:33 np0005625201 sudo[429806]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fqkenuujhvtkfuslslmyawbybihtmpth ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578752.1387863-178-159248588412816/AnsiballZ_copy.py Feb 20 09:12:33 np0005625201 sudo[429806]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:33 np0005625201 sudo[429806]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:33 np0005625201 sudo[429898]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nwxfrszpjrqjsehrfmxvvcummcezgsxz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578753.583121-225-212064816925494/AnsiballZ_file.py Feb 20 09:12:33 np0005625201 sudo[429898]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:34 np0005625201 sudo[429898]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:34 np0005625201 sudo[429990]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ugbbmbbcirsiyuakpxbmqszhgyduhjzr ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578754.1509624-248-94268439709036/AnsiballZ_stat.py Feb 20 09:12:34 np0005625201 sudo[429990]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:34 np0005625201 sudo[429990]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:35 np0005625201 sudo[430066]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uihvrpabmrkpdtobsirtxtodvsdfuaqb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578754.1509624-248-94268439709036/AnsiballZ_copy.py Feb 20 09:12:35 np0005625201 sudo[430066]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:35 np0005625201 sudo[430066]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:35 np0005625201 sudo[430158]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bfvmbybcdafxaabepkevcioomfzfsndt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578755.6533923-299-49898435706451/AnsiballZ_file.py Feb 20 09:12:35 np0005625201 sudo[430158]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:36 np0005625201 sudo[430158]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:36 np0005625201 sudo[430251]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ivsmguwrgequqlvyanaglejflcpulggk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578756.3111303-326-103782295712236/AnsiballZ_stat.py Feb 20 09:12:36 np0005625201 sudo[430251]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:36 np0005625201 sudo[430251]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:37 np0005625201 sudo[430324]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nfvqaawhkldzbuypqsneumertbcbsoxs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578756.3111303-326-103782295712236/AnsiballZ_copy.py Feb 20 09:12:37 np0005625201 sudo[430324]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:37 np0005625201 sudo[430324]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:37 np0005625201 sshd[429452]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:12:37 np0005625201 sshd[430341]: Accepted publickey for zuul from 192.168.122.30 port 60018 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:12:37 np0005625201 sshd[430341]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:12:38 np0005625201 sudo[430434]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahcihxaorogrkoemtjgkbgdlqljpgaab ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578758.0727534-80-41694249678721/AnsiballZ_tempfile.py Feb 20 09:12:38 np0005625201 sudo[430434]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:38 np0005625201 sudo[430434]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:39 np0005625201 sudo[430526]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hgwxquuonllngnunmhazupmayxchlzfd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578759.472875-133-83304015637886/AnsiballZ_stat.py Feb 20 09:12:39 np0005625201 sudo[430526]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:39 np0005625201 sudo[430526]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:41 np0005625201 sudo[430641]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hpwaekxshupcofxlquvhaihbzlhayfry ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578760.838995-180-101374138287115/AnsiballZ_slurp.py Feb 20 09:12:41 np0005625201 sudo[430641]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:41 np0005625201 sudo[430641]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:42 np0005625201 sudo[430886]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eopfpghpxmngnjvalpbejjrysgwtkant ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578762.6606305-264-173493994260796/AnsiballZ_stat.py Feb 20 09:12:42 np0005625201 sudo[430886]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:43 np0005625201 sshd[430889]: Accepted publickey for zuul from 192.168.122.31 port 46666 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:12:43 np0005625201 sshd[430889]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:12:43 np0005625201 sudo[430886]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:43 np0005625201 sudo[430997]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bbejydyqhucwgzqslkssoaeygrgyamlg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578762.6606305-264-173493994260796/AnsiballZ_copy.py Feb 20 09:12:43 np0005625201 sudo[430997]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:43 np0005625201 sudo[430997]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:45 np0005625201 sudo[431233]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gzylbptrzuaiggjmejmwmwhcrnxvhxmb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578764.777881-314-225588227399300/AnsiballZ_setup.py Feb 20 09:12:45 np0005625201 sudo[431233]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:45 np0005625201 sudo[431242]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eotbsjwxiheraeqzvhsgncprdbhdpgvg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578764.6795957-59-168973886577119/AnsiballZ_file.py Feb 20 09:12:45 np0005625201 sudo[431242]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:45 np0005625201 sudo[431242]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:45 np0005625201 sudo[431233]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:45 np0005625201 sudo[431349]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-shqwksentjqasxlojadmypfdpeidqadn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578765.3839095-59-27792355359837/AnsiballZ_file.py Feb 20 09:12:45 np0005625201 sudo[431349]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:45 np0005625201 sudo[431349]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:46 np0005625201 sudo[431517]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-geyhiraruizqbiyvxpfhsldwwwileeww ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578766.291443-368-98802192630417/AnsiballZ_blockinfile.py Feb 20 09:12:46 np0005625201 sudo[431517]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:46 np0005625201 sudo[431517]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:46 np0005625201 sshd[431539]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:12:47 np0005625201 sudo[431625]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ojbestkctfvmaeotdmiwdwcmhjtyoieu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578766.7174768-128-210397267747600/AnsiballZ_seboolean.py Feb 20 09:12:47 np0005625201 sudo[431625]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:47 np0005625201 sudo[431625]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:47 np0005625201 sudo[431717]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nuanbfypeqiozhpifacyofxpplcbbgfw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578767.603525-415-57054516153877/AnsiballZ_command.py Feb 20 09:12:47 np0005625201 sudo[431717]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:48 np0005625201 sudo[431717]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:48 np0005625201 sudo[431798]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qbztjueirjuhrlnrglporimyiorjmxyq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578767.8836915-158-252705417653971/AnsiballZ_setup.py Feb 20 09:12:48 np0005625201 sudo[431798]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:48 np0005625201 sudo[431798]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:49 np0005625201 sudo[431898]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fbcseesepaocbkmeqguifweosgpfmanb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578767.8836915-158-252705417653971/AnsiballZ_dnf.py Feb 20 09:12:49 np0005625201 sudo[431898]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:49 np0005625201 sudo[431943]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nqsluiaoawyuhmdxkonhgybctaclormu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578769.0461612-463-107711092281413/AnsiballZ_file.py Feb 20 09:12:49 np0005625201 sudo[431943]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:49 np0005625201 sudo[431943]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:49 np0005625201 sshd[430341]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:12:52 np0005625201 sudo[431898]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:53 np0005625201 sudo[432051]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mloklehkceoifxruxlhmzbslmctlbtdw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578772.8155472-195-197581529675371/AnsiballZ_systemd.py Feb 20 09:12:53 np0005625201 sudo[432051]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:54 np0005625201 sudo[432051]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:55 np0005625201 sudo[432146]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jrekizytssxusjkajdyhtqgnkjcochlq ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771578774.922322-218-19707820827993/AnsiballZ_edpm_nftables_snippet.py Feb 20 09:12:55 np0005625201 sudo[432146]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:55 np0005625201 sudo[432146]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:56 np0005625201 sudo[432238]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dyqzlbildeepnkzusavikgkiklfnpejc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578775.9326406-245-199687457672072/AnsiballZ_file.py Feb 20 09:12:56 np0005625201 sudo[432238]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:56 np0005625201 sudo[432238]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:57 np0005625201 sudo[432330]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvoxmsxwpblodzccmllmsluxijopyyrz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578776.615871-269-264641511234843/AnsiballZ_stat.py Feb 20 09:12:57 np0005625201 sudo[432330]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:57 np0005625201 sudo[432330]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:57 np0005625201 sudo[432378]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sellsxmpcerdpzifauvdmkolhpkkkwcp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578776.615871-269-264641511234843/AnsiballZ_file.py Feb 20 09:12:57 np0005625201 sudo[432378]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:57 np0005625201 sudo[432378]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:58 np0005625201 sudo[432470]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzqzkmucxzdrbkqqbhdbzawfzelgqpep ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578778.0815642-305-277192762002479/AnsiballZ_stat.py Feb 20 09:12:58 np0005625201 sudo[432470]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:58 np0005625201 sudo[432470]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:59 np0005625201 sudo[432518]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-esccqqfwucutrrlzqyffisytxbawubzc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578778.0815642-305-277192762002479/AnsiballZ_file.py Feb 20 09:12:59 np0005625201 sudo[432518]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:12:59 np0005625201 sudo[432518]: pam_unix(sudo:session): session closed for user root Feb 20 09:12:59 np0005625201 sudo[432610]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-niqbyzmtcmowtaflpumapyehcrerkjom ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578779.4998674-341-219960220518831/AnsiballZ_stat.py Feb 20 09:12:59 np0005625201 sudo[432610]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:00 np0005625201 sudo[432610]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:00 np0005625201 sudo[432658]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntsxptkvpfbuzywfeestakythmivzxaa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578779.4998674-341-219960220518831/AnsiballZ_file.py Feb 20 09:13:00 np0005625201 sudo[432658]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:00 np0005625201 sudo[432658]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:01 np0005625201 sudo[432750]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-abxpzlgmcjjhohgboisamqllusluyvor ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578780.7841249-381-19796449894912/AnsiballZ_command.py Feb 20 09:13:01 np0005625201 sudo[432750]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:01 np0005625201 sudo[432750]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:02 np0005625201 sudo[432843]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bhqfptljvvhjhiltlwehdmndswkicahp ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771578781.6659112-405-196413131953503/AnsiballZ_edpm_nftables_from_files.py Feb 20 09:13:02 np0005625201 sudo[432843]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:02 np0005625201 sudo[432843]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:02 np0005625201 sudo[432965]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mlhykadsiujpoayvlwcidvdwkbfzimre ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578782.4695745-429-152235990032073/AnsiballZ_stat.py Feb 20 09:13:02 np0005625201 sudo[432965]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:02 np0005625201 sudo[432965]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:03 np0005625201 sudo[433040]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sbwrpzpwgitiutuecvlwnyndkqucygaf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578782.4695745-429-152235990032073/AnsiballZ_copy.py Feb 20 09:13:03 np0005625201 sudo[433040]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:03 np0005625201 sudo[433040]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:04 np0005625201 sudo[433132]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhjkiwdbmyigzagtkvsirlfkghwyjfhx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578783.8127372-473-142081964656345/AnsiballZ_stat.py Feb 20 09:13:04 np0005625201 sudo[433132]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:04 np0005625201 sudo[433132]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:04 np0005625201 sudo[433207]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uhfnweectzaqiqgtxmknkefwmixrrzyk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578783.8127372-473-142081964656345/AnsiballZ_copy.py Feb 20 09:13:04 np0005625201 sudo[433207]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:05 np0005625201 sudo[433207]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:05 np0005625201 sudo[433299]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ksobpduepngvuewutdlordxqwlzllrpj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578785.2758608-519-122646079938055/AnsiballZ_stat.py Feb 20 09:13:05 np0005625201 sudo[433299]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:05 np0005625201 sudo[433299]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:06 np0005625201 sudo[433374]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cusbhnhfvrexhfielaxqkfamkqxmlwze ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578785.2758608-519-122646079938055/AnsiballZ_copy.py Feb 20 09:13:06 np0005625201 sudo[433374]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:06 np0005625201 sudo[433374]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:06 np0005625201 sudo[433466]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xjewenodmraarisdyiyjwvsaheigtiyt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578786.5073276-563-228708644832483/AnsiballZ_stat.py Feb 20 09:13:06 np0005625201 sudo[433466]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:07 np0005625201 sudo[433466]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:07 np0005625201 sudo[433541]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hjajzthohgbtixragntjtrlzwwtayryi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578786.5073276-563-228708644832483/AnsiballZ_copy.py Feb 20 09:13:07 np0005625201 sudo[433541]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:07 np0005625201 sudo[433541]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:08 np0005625201 sudo[433633]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dumcdwkvxlexcslhqziuwnyfgbqzqqxc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578787.8266194-609-113601396401639/AnsiballZ_stat.py Feb 20 09:13:08 np0005625201 sudo[433633]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:08 np0005625201 sudo[433633]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:08 np0005625201 sudo[433708]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iasvoocxpsmdqjbpxygqiaubvclrdxqs ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578787.8266194-609-113601396401639/AnsiballZ_copy.py Feb 20 09:13:08 np0005625201 sudo[433708]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:08 np0005625201 sudo[433708]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:09 np0005625201 sudo[433800]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-abawiecrsyvmbuezipxakastvnlxozdu ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578789.5054066-653-154051727648716/AnsiballZ_file.py Feb 20 09:13:09 np0005625201 sudo[433800]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:10 np0005625201 sudo[433800]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:10 np0005625201 sudo[433892]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nhyajchjytnpvaitwhntzuyfsflitmub ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578790.1677535-677-274699490869322/AnsiballZ_command.py Feb 20 09:13:10 np0005625201 sudo[433892]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:10 np0005625201 sudo[433892]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:11 np0005625201 sudo[433987]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ldjpbiirqiqdnjxzcjtdfyshxctcmsli ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578790.8086596-702-93179998712584/AnsiballZ_blockinfile.py Feb 20 09:13:11 np0005625201 sudo[433987]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:11 np0005625201 sudo[433987]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:11 np0005625201 sudo[434079]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iquussytgejnwhxcfszyhttnfmlehrfi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578791.6612716-728-10406515234990/AnsiballZ_command.py Feb 20 09:13:11 np0005625201 sudo[434079]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:12 np0005625201 sudo[434079]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:12 np0005625201 sudo[434339]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qzogerckcnzzbhqhjnhclkbphbafefqk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578792.3491337-752-176937916846579/AnsiballZ_stat.py Feb 20 09:13:12 np0005625201 sudo[434339]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:12 np0005625201 sudo[434339]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:13 np0005625201 sudo[434433]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nteeybxoljmsjomwtkadpcunxodihdbm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578793.0319269-776-240074398538045/AnsiballZ_command.py Feb 20 09:13:13 np0005625201 sudo[434433]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:13 np0005625201 sudo[434433]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:13 np0005625201 sudo[434528]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iviquabiqvgglasakbtyhqmutymezpyd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578793.7455409-801-44182317806008/AnsiballZ_file.py Feb 20 09:13:13 np0005625201 sudo[434528]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:14 np0005625201 sudo[434528]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:15 np0005625201 su[434705]: pam_unix(su:session): session opened for user redis(uid=42460) by (uid=0) Feb 20 09:13:15 np0005625201 su[434705]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Feb 20 09:13:15 np0005625201 su[434705]: pam_unix(su:session): session closed for user redis Feb 20 09:13:16 np0005625201 sudo[434814]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cdcubavesxjmjsbfonreisyzbycjhknc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578796.166829-923-152872288917703/AnsiballZ_command.py Feb 20 09:13:16 np0005625201 sudo[434814]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:16 np0005625201 sudo[434814]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:17 np0005625201 sudo[434908]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ntleriswydoztvcoczlqekrupgahqbwk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578796.89142-950-151117919129355/AnsiballZ_command.py Feb 20 09:13:17 np0005625201 sudo[434908]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:17 np0005625201 sudo[434908]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:17 np0005625201 sudo[435004]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qevjogvpiddapnocwomtzdtzllpvtjtw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578797.534725-974-135443786008016/AnsiballZ_command.py Feb 20 09:13:17 np0005625201 sudo[435004]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:18 np0005625201 sudo[435004]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:19 np0005625201 sudo[435190]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pswcxglpkyiqwoarxsbbzvgdwremnxmh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578798.9039652-1025-37434321391890/AnsiballZ_file.py Feb 20 09:13:19 np0005625201 sudo[435190]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:19 np0005625201 sudo[435190]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:19 np0005625201 sshd[435208]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:13:19 np0005625201 sudo[435285]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lmntskofmxwcdgcipxlqirjaapuhydwd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578799.5622194-1049-185611591839207/AnsiballZ_stat.py Feb 20 09:13:19 np0005625201 sudo[435285]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:20 np0005625201 sudo[435285]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:20 np0005625201 sudo[435333]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qichuodpitcfhifxnwhyisopiaqlzfyt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578799.5622194-1049-185611591839207/AnsiballZ_file.py Feb 20 09:13:20 np0005625201 sudo[435333]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:20 np0005625201 sudo[435333]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:20 np0005625201 sudo[435426]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bfqwthoomllozpvtdralmthtmltznokl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578800.647042-1049-40787732707552/AnsiballZ_stat.py Feb 20 09:13:20 np0005625201 sudo[435426]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:21 np0005625201 sudo[435426]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:21 np0005625201 sudo[435475]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chkblibsnyxovdpcuhkyygwvkrvqufst ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578800.647042-1049-40787732707552/AnsiballZ_file.py Feb 20 09:13:21 np0005625201 sudo[435475]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:21 np0005625201 sudo[435475]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:22 np0005625201 sudo[435569]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kmjdndhittaunuxtiuogscwmlrqvoqie ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578801.838342-1119-46526861642140/AnsiballZ_file.py Feb 20 09:13:22 np0005625201 sudo[435569]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:22 np0005625201 sshd[435491]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:13:22 np0005625201 sudo[435569]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:22 np0005625201 sudo[435662]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rmyeebfhuoeyaodsnxnkrnjgxrznlrqb ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578802.533068-1142-78953461131590/AnsiballZ_stat.py Feb 20 09:13:22 np0005625201 sudo[435662]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:23 np0005625201 sudo[435662]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:23 np0005625201 sudo[435710]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hktzeqwthrfbokoasaeonrknocwzhxlw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578802.533068-1142-78953461131590/AnsiballZ_file.py Feb 20 09:13:23 np0005625201 sudo[435710]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:23 np0005625201 sudo[435710]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:24 np0005625201 sudo[435803]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zijvwxzvxamdrfuznlsjkhghowolqofc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578803.838668-1179-275440381404221/AnsiballZ_stat.py Feb 20 09:13:24 np0005625201 sudo[435803]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:24 np0005625201 sudo[435803]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:24 np0005625201 sudo[435852]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ivbzuftnjrjhxdpeceembzxjpuhmwexn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578803.838668-1179-275440381404221/AnsiballZ_file.py Feb 20 09:13:24 np0005625201 sudo[435852]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:24 np0005625201 sudo[435852]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:25 np0005625201 sudo[435944]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-btfnciucuoadgzjyrqtnrmhxryewtuua ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578805.0111027-1215-13486091795911/AnsiballZ_systemd.py Feb 20 09:13:25 np0005625201 sudo[435944]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:26 np0005625201 sudo[435944]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:26 np0005625201 sudo[436077]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ganadppmochofkyrluxnrjbsourasefo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578806.2783203-1238-167121800209610/AnsiballZ_stat.py Feb 20 09:13:26 np0005625201 sudo[436077]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:26 np0005625201 sudo[436077]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:27 np0005625201 sudo[436125]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-llnrsuhvpjtzuqxurbxxjpbxktjlfhwz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578806.2783203-1238-167121800209610/AnsiballZ_file.py Feb 20 09:13:27 np0005625201 sudo[436125]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:27 np0005625201 sudo[436125]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:28 np0005625201 sudo[436219]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wandfgtuaztgzsoqbkvzkpjbipmropjc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578808.2341607-1275-245016942339204/AnsiballZ_stat.py Feb 20 09:13:28 np0005625201 sudo[436219]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:28 np0005625201 sudo[436222]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:13:28 np0005625201 sudo[436222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:13:28 np0005625201 sudo[436222]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:28 np0005625201 sudo[436237]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:13:28 np0005625201 sudo[436237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:13:28 np0005625201 sudo[436219]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:29 np0005625201 sudo[436312]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-warfukgznpdnlhktgibiagxwrzgjikgg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578808.2341607-1275-245016942339204/AnsiballZ_file.py Feb 20 09:13:29 np0005625201 sudo[436312]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:29 np0005625201 sudo[436312]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:29 np0005625201 sudo[436237]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:29 np0005625201 sudo[436422]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fshhbiuhtxkgnnmxexbeotnvevwqyupy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578809.507957-1311-97685957710185/AnsiballZ_systemd.py Feb 20 09:13:29 np0005625201 sudo[436422]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:29 np0005625201 sudo[436425]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:13:29 np0005625201 sudo[436425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:13:29 np0005625201 sudo[436425]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:30 np0005625201 sudo[436422]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:31 np0005625201 sudo[436572]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qqxxovijouwkbxfpgrpwofcgpepjqkns ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578810.8670242-1341-61805560230512/AnsiballZ_file.py Feb 20 09:13:31 np0005625201 sudo[436572]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:31 np0005625201 sudo[436572]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:31 np0005625201 sudo[436665]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mhgafunqaurmgewoatsscxuxgwrlbxrl ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578811.5052342-1364-272631905214787/AnsiballZ_stat.py Feb 20 09:13:31 np0005625201 sudo[436665]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:31 np0005625201 sudo[436665]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:32 np0005625201 sshd[436668]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:13:32 np0005625201 sudo[436740]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vgtrobknrmqfgeyxdzwcbmjusrqvtptd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578811.5052342-1364-272631905214787/AnsiballZ_copy.py Feb 20 09:13:32 np0005625201 sudo[436740]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:32 np0005625201 sudo[436740]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:33 np0005625201 sudo[436833]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpqzckcgbocwjavmfcixqjeffkrusydh ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578812.9251282-1415-207763431265325/AnsiballZ_file.py Feb 20 09:13:33 np0005625201 sudo[436833]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:33 np0005625201 sudo[436833]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:33 np0005625201 sudo[436926]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qsdnidzrdiguqpnbpjvafwedlihwkyqf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578813.5513675-1440-254398968056502/AnsiballZ_file.py Feb 20 09:13:33 np0005625201 sudo[436926]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:34 np0005625201 sudo[436926]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:34 np0005625201 sudo[437019]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vnllexbzsmosesgwvdtgdotcgrjtfrix ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578814.25239-1463-11292035472045/AnsiballZ_stat.py Feb 20 09:13:34 np0005625201 sudo[437019]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:34 np0005625201 sudo[437019]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:35 np0005625201 sudo[437094]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vocrbhsewxbcohlvlipfqxyiaevnfmsi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578814.25239-1463-11292035472045/AnsiballZ_copy.py Feb 20 09:13:35 np0005625201 sudo[437094]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:35 np0005625201 sudo[437094]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:37 np0005625201 sudo[437443]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nfeojqwetdhpswsakzalgxdwdsrxwugz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578817.454305-1583-224758394058380/AnsiballZ_container_config_data.py Feb 20 09:13:37 np0005625201 sudo[437443]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:38 np0005625201 sudo[437443]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:38 np0005625201 sudo[437537]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nhxjphmmmmyebxziuilujzvxwfscwzyo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578818.4832249-1616-31275775705539/AnsiballZ_container_config_hash.py Feb 20 09:13:38 np0005625201 sudo[437537]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:39 np0005625201 sudo[437537]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:39 np0005625201 sudo[437631]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsjuuqzlbbpofsglsqvfzcmltwfuzhea ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771578819.4905958-1646-151520795923173/AnsiballZ_edpm_container_manage.py Feb 20 09:13:39 np0005625201 sudo[437631]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:40 np0005625201 sudo[437631]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:41 np0005625201 sudo[437828]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xcybrzwzaytafdawbxeucxccbcgjdvid ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578821.1227243-1670-140113989159569/AnsiballZ_stat.py Feb 20 09:13:41 np0005625201 sudo[437828]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:41 np0005625201 sudo[437828]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:42 np0005625201 sudo[437923]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oeonhynwhtgkxymyozmnhtdavydqdtwq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578821.8932483-1697-258639517859841/AnsiballZ_file.py Feb 20 09:13:42 np0005625201 sudo[437923]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:42 np0005625201 sudo[437923]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:42 np0005625201 sudo[437970]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ekohcaihijjhnrkrtmhibjzvqkjlcvir ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578821.8932483-1697-258639517859841/AnsiballZ_stat.py Feb 20 09:13:42 np0005625201 sudo[437970]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:42 np0005625201 sudo[437970]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:43 np0005625201 sudo[438233]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pimiqijshpyminumnekqdqsngwwjjogg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578822.7940605-1697-122888020687139/AnsiballZ_copy.py Feb 20 09:13:43 np0005625201 sudo[438233]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:43 np0005625201 sudo[438233]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:43 np0005625201 sudo[438280]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-unxqupndofqhhlkjottdxpqxliuflzel ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578822.7940605-1697-122888020687139/AnsiballZ_systemd.py Feb 20 09:13:43 np0005625201 sudo[438280]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:44 np0005625201 sudo[438280]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:44 np0005625201 sudo[438362]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pbowmviukumiqxotbecmjgkcdojmyajp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578822.7940605-1697-122888020687139/AnsiballZ_systemd.py Feb 20 09:13:44 np0005625201 sudo[438362]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:45 np0005625201 systemd[438448]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Feb 20 09:13:46 np0005625201 sudo[438362]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:48 np0005625201 sudo[438710]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qxnvxrnujntceryxuvydumpgtyrststm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578828.0355198-1833-21678600034289/AnsiballZ_stat.py Feb 20 09:13:48 np0005625201 sudo[438710]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:48 np0005625201 sudo[438710]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:48 np0005625201 sudo[438784]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-szcqvzwmvhyopuykbusdzctvexcvatox ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578828.0355198-1833-21678600034289/AnsiballZ_copy.py Feb 20 09:13:48 np0005625201 sudo[438784]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:49 np0005625201 sudo[438784]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:49 np0005625201 sudo[438877]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yvpkwsvmnruyipgiyqwyvfoiugznwyyq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578829.3113797-1878-263273815458098/AnsiballZ_command.py Feb 20 09:13:49 np0005625201 sudo[438877]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:49 np0005625201 sudo[438877]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:50 np0005625201 sudo[438970]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jsdxlurhgkkabduupgrtpuivmpiiqufw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578829.9531856-1901-192295379203390/AnsiballZ_command.py Feb 20 09:13:50 np0005625201 sudo[438970]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:50 np0005625201 sudo[438970]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:51 np0005625201 sudo[439066]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oyglzgnlphjgcwufkfgvxdscnhxijezp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578830.9566672-1940-199011396761530/AnsiballZ_command.py Feb 20 09:13:51 np0005625201 sudo[439066]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:51 np0005625201 sudo[439066]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:51 np0005625201 sshd[430889]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:13:56 np0005625201 sshd[439091]: Accepted publickey for zuul from 192.168.122.31 port 45644 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:13:56 np0005625201 sshd[439091]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:13:58 np0005625201 sudo[439280]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cglbmyndkiouvaezanhpbsznbevmgrwm ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578838.5395513-59-103613589403678/AnsiballZ_file.py Feb 20 09:13:58 np0005625201 sudo[439280]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:59 np0005625201 sudo[439280]: pam_unix(sudo:session): session closed for user root Feb 20 09:13:59 np0005625201 sudo[439373]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lwmpliuyxlnqtjesknsezaqdohltmgbd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578839.2980092-59-23729161057341/AnsiballZ_file.py Feb 20 09:13:59 np0005625201 sudo[439373]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:13:59 np0005625201 sudo[439373]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:00 np0005625201 sudo[439465]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ykysrevmvrczsgdtqrmfesbczrckohaf ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578839.9081783-59-3536801296451/AnsiballZ_file.py Feb 20 09:14:00 np0005625201 sudo[439465]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:00 np0005625201 sudo[439465]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:00 np0005625201 sudo[439558]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-paswmpqpsqrvavhyycwnbcehgnezjivy ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578840.4902823-59-235235940607796/AnsiballZ_file.py Feb 20 09:14:00 np0005625201 sudo[439558]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:00 np0005625201 sudo[439558]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:01 np0005625201 sudo[439650]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zxjcnkdkaeopmccvrpdjulwbjwdvgsxa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578841.0839853-59-135842402853706/AnsiballZ_file.py Feb 20 09:14:01 np0005625201 sudo[439650]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:01 np0005625201 sudo[439650]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:02 np0005625201 sudo[439868]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-divfhryufdbyswtnxnblgxdigfwnydgj ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578842.5480986-191-220245444654102/AnsiballZ_seboolean.py Feb 20 09:14:02 np0005625201 sudo[439868]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:03 np0005625201 sudo[439868]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:06 np0005625201 sudo[440287]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kvmdbziuwxpfpallqmqamtacpzejlfpe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578846.312793-311-158417477272321/AnsiballZ_setup.py Feb 20 09:14:06 np0005625201 sudo[440287]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:06 np0005625201 sshd[440290]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:14:07 np0005625201 sudo[440287]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:07 np0005625201 sudo[440343]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ltabhsjgnkpnnwntpdqwtjgwcktzugyq ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578846.312793-311-158417477272321/AnsiballZ_dnf.py Feb 20 09:14:07 np0005625201 sudo[440343]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:10 np0005625201 sudo[440343]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:11 np0005625201 sudo[440442]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jrhrhyyibylmvsyvtlytbgokwvvtpdop ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578851.2499392-347-18567408770246/AnsiballZ_systemd.py Feb 20 09:14:11 np0005625201 sudo[440442]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:12 np0005625201 sudo[440442]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:15 np0005625201 sshd[440955]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:14:18 np0005625201 sudo[441474]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwbpmliobkdlorklsekbslohygflbddt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578858.0032718-617-195736802663201/AnsiballZ_file.py Feb 20 09:14:18 np0005625201 sudo[441474]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:18 np0005625201 sudo[441474]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:18 np0005625201 sudo[441567]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gluvyeezovsymwxammavvayiwkqcutsa ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578858.6663985-641-146445688702882/AnsiballZ_stat.py Feb 20 09:14:18 np0005625201 sudo[441567]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:19 np0005625201 sudo[441567]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:19 np0005625201 sudo[441615]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vwpdpbazawznpzwxcxzotxxlzydmjubw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578858.6663985-641-146445688702882/AnsiballZ_file.py Feb 20 09:14:19 np0005625201 sudo[441615]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:19 np0005625201 sudo[441615]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:19 np0005625201 sudo[441708]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qehdeudhifbhmeiftwrdurokvuzrvxqw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578859.7477915-641-153790587365643/AnsiballZ_stat.py Feb 20 09:14:19 np0005625201 sudo[441708]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:20 np0005625201 sudo[441708]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:20 np0005625201 sudo[441756]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmhfrdfouipcjavqprymaxvcnfutvrbx ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578859.7477915-641-153790587365643/AnsiballZ_file.py Feb 20 09:14:20 np0005625201 sudo[441756]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:20 np0005625201 sudo[441756]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:21 np0005625201 sudo[441849]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zbuoyzikkssmykwhiuagakcmnzsfmzig ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578860.8308682-711-258035216856046/AnsiballZ_file.py Feb 20 09:14:21 np0005625201 sudo[441849]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:21 np0005625201 sudo[441849]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:21 np0005625201 sudo[441942]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvwajpfpdabfnueueysmjaornpdklrvi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578861.5095112-735-4199631713991/AnsiballZ_stat.py Feb 20 09:14:21 np0005625201 sudo[441942]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:21 np0005625201 sudo[441942]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:22 np0005625201 sudo[441990]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yrpbgdjrkvgepvpatrbiamqpadntteob ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578861.5095112-735-4199631713991/AnsiballZ_file.py Feb 20 09:14:22 np0005625201 sudo[441990]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:22 np0005625201 sudo[441990]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:22 np0005625201 sudo[442083]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xhqcxgzufdljxiugmobqlgczhcxlbnsn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578862.6130903-771-245285668428400/AnsiballZ_stat.py Feb 20 09:14:22 np0005625201 sudo[442083]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:23 np0005625201 sudo[442083]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:23 np0005625201 sudo[442131]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-epbestaznhvpwtccoqfptzkjkegielje ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578862.6130903-771-245285668428400/AnsiballZ_file.py Feb 20 09:14:23 np0005625201 sudo[442131]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:23 np0005625201 sudo[442131]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:23 np0005625201 sudo[442224]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tqjpwtarzjjsvappuvdzqpqkpeccmquc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578863.7112207-807-248013066953090/AnsiballZ_systemd.py Feb 20 09:14:23 np0005625201 sudo[442224]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:24 np0005625201 sudo[442224]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:25 np0005625201 sudo[442354]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-scfddzcinswsewdwexwjmivwtzulqgkt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578864.8646202-830-11819622044110/AnsiballZ_stat.py Feb 20 09:14:25 np0005625201 sudo[442354]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:25 np0005625201 sudo[442354]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:25 np0005625201 sudo[442403]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gklwulxaynwparqurxvorkwxatcqxopc ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578864.8646202-830-11819622044110/AnsiballZ_file.py Feb 20 09:14:25 np0005625201 sudo[442403]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:25 np0005625201 sudo[442403]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:26 np0005625201 sudo[442495]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xkapicohtviommafhdjxjxajicnixokd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578866.1744874-866-218452801527427/AnsiballZ_stat.py Feb 20 09:14:26 np0005625201 sudo[442495]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:26 np0005625201 sudo[442495]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:26 np0005625201 sudo[442544]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mtiftztzcxkaelquhxxmjiqhtparcgqg ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578866.1744874-866-218452801527427/AnsiballZ_file.py Feb 20 09:14:26 np0005625201 sudo[442544]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:27 np0005625201 sudo[442544]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:27 np0005625201 sudo[442637]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ienxyokrznbyaifmhztectpoxfejjerd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578867.3766155-902-57265005921970/AnsiballZ_systemd.py Feb 20 09:14:27 np0005625201 sudo[442637]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:28 np0005625201 sudo[442637]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:29 np0005625201 sudo[442774]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nmfbwfcptymaitwegnlvyxuizoxqqkry ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578869.3367758-933-271572897259677/AnsiballZ_file.py Feb 20 09:14:29 np0005625201 sudo[442774]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:29 np0005625201 sudo[442774]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:30 np0005625201 sshd[442697]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:14:30 np0005625201 sudo[442837]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:14:30 np0005625201 sudo[442837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:14:30 np0005625201 sudo[442837]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:30 np0005625201 sudo[442888]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nqzlwospxubmuanyjqsxkedfqgctlwrv ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578870.027923-956-253001033231258/AnsiballZ_stat.py Feb 20 09:14:30 np0005625201 sudo[442888]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:30 np0005625201 sudo[442880]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:14:30 np0005625201 sudo[442880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:14:30 np0005625201 sudo[442888]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:30 np0005625201 sudo[442880]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:30 np0005625201 sudo[443004]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kjnmxeqzhbzdhjopvfqvzoejykrbhnnp ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578870.027923-956-253001033231258/AnsiballZ_copy.py Feb 20 09:14:30 np0005625201 sudo[443004]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:31 np0005625201 sudo[443004]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:31 np0005625201 sudo[443097]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cptlkmzqyvbolbdmpkgwvgrxaqjopwkw ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578871.6638613-1008-32730208205337/AnsiballZ_file.py Feb 20 09:14:31 np0005625201 sudo[443097]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:32 np0005625201 sudo[443097]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:32 np0005625201 sudo[443190]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zlokelxrxthrskbldltwrkevzcwkcstd ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578872.324592-1031-36123731402147/AnsiballZ_file.py Feb 20 09:14:32 np0005625201 sudo[443190]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:32 np0005625201 sudo[443194]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:14:32 np0005625201 sudo[443194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:14:32 np0005625201 sudo[443194]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:32 np0005625201 sudo[443190]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:33 np0005625201 sudo[443298]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkhywprbaviglogltheevynsqycikwjk ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578873.0232944-1055-120569960786620/AnsiballZ_stat.py Feb 20 09:14:33 np0005625201 sudo[443298]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:33 np0005625201 sudo[443298]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:33 np0005625201 sudo[443372]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-umbdgsjjjleuqiaekytsifrkkjfkgnah ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578873.0232944-1055-120569960786620/AnsiballZ_copy.py Feb 20 09:14:33 np0005625201 sudo[443372]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:34 np0005625201 sudo[443372]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:37 np0005625201 sudo[443718]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gsvcxzoeiimnydwemunsdbwwxoeacvme ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578876.912075-1175-126315876856929/AnsiballZ_container_config_data.py Feb 20 09:14:37 np0005625201 sudo[443718]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:37 np0005625201 sudo[443718]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:38 np0005625201 sudo[443811]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xbjjlvvwhgcrmrqivviftakrdqyzktbe ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578878.1009781-1208-165942928169789/AnsiballZ_container_config_hash.py Feb 20 09:14:38 np0005625201 sudo[443811]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:38 np0005625201 sudo[443811]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:39 np0005625201 sudo[443907]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ryprzbhnbxzijjzijyliirlhvxdarvje ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1771578879.0664778-1238-152072964399311/AnsiballZ_edpm_container_manage.py Feb 20 09:14:39 np0005625201 sudo[443907]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:40 np0005625201 sudo[443907]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:40 np0005625201 sudo[444075]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ulauecyqbhdaindxvxozacpwyjoqgrxo ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578880.487889-1263-214846341446521/AnsiballZ_stat.py Feb 20 09:14:40 np0005625201 sudo[444075]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:40 np0005625201 sudo[444075]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:41 np0005625201 sudo[444169]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bqdqmlvceltqfzwoztxsazldlqiwerww ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578881.2422364-1289-68572001453267/AnsiballZ_file.py Feb 20 09:14:41 np0005625201 sudo[444169]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:41 np0005625201 sudo[444169]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:41 np0005625201 sudo[444216]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gqnntpmnwfxqcejamyybsvwmwvmfvfhi ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578881.2422364-1289-68572001453267/AnsiballZ_stat.py Feb 20 09:14:41 np0005625201 sudo[444216]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:42 np0005625201 sudo[444216]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:42 np0005625201 sudo[444307]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkxjqwgqlbwihbikhupxjipxjnhlbtdz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578882.1572042-1289-69499119809682/AnsiballZ_copy.py Feb 20 09:14:42 np0005625201 sudo[444307]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:42 np0005625201 sudo[444307]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:43 np0005625201 sudo[444354]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fnellqwnlydezvdclpwgxhzpwzhzonnt ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578882.1572042-1289-69499119809682/AnsiballZ_systemd.py Feb 20 09:14:43 np0005625201 sudo[444354]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:43 np0005625201 sudo[444354]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:43 np0005625201 sudo[444539]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ellvtesyyoptltkxjcqnwlsolllxmczn ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578882.1572042-1289-69499119809682/AnsiballZ_systemd.py Feb 20 09:14:43 np0005625201 sudo[444539]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:45 np0005625201 sudo[444539]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:47 np0005625201 sudo[444974]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kvezemfbbdqfxqjxccoqcferfpzymwif ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578887.290739-1425-127532891177111/AnsiballZ_stat.py Feb 20 09:14:47 np0005625201 sudo[444974]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:47 np0005625201 sudo[444974]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:48 np0005625201 sudo[445051]: zuul : TTY=pts/0 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nudqeqzkqjhrfyfvhyetjmrrwjcpsolz ; /usr/bin/python3.9 /home/zuul/.ansible/tmp/ansible-tmp-1771578887.290739-1425-127532891177111/AnsiballZ_copy.py Feb 20 09:14:48 np0005625201 sudo[445051]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Feb 20 09:14:48 np0005625201 sudo[445051]: pam_unix(sudo:session): session closed for user root Feb 20 09:14:49 np0005625201 sshd[439091]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:14:49 np0005625201 sshd[445068]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:14:59 np0005625201 sshd[445080]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:15:33 np0005625201 sudo[445378]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:15:33 np0005625201 sudo[445378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:15:33 np0005625201 sudo[445378]: pam_unix(sudo:session): session closed for user root Feb 20 09:15:33 np0005625201 sudo[445393]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:15:33 np0005625201 sudo[445393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:15:33 np0005625201 sudo[445393]: pam_unix(sudo:session): session closed for user root Feb 20 09:15:34 np0005625201 sudo[445442]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:15:34 np0005625201 sudo[445442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:15:34 np0005625201 sudo[445442]: pam_unix(sudo:session): session closed for user root Feb 20 09:15:36 np0005625201 sshd[445459]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:15:38 np0005625201 sshd[445463]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:15:44 np0005625201 sshd[445475]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:16:21 np0005625201 sshd[445974]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:16:30 np0005625201 sshd[446006]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:16:34 np0005625201 sudo[446012]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:16:34 np0005625201 sudo[446012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:16:34 np0005625201 sudo[446012]: pam_unix(sudo:session): session closed for user root Feb 20 09:16:34 np0005625201 sudo[446027]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:16:34 np0005625201 sudo[446027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:16:35 np0005625201 sudo[446027]: pam_unix(sudo:session): session closed for user root Feb 20 09:16:35 np0005625201 sudo[446219]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:16:35 np0005625201 sudo[446219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:16:35 np0005625201 sudo[446219]: pam_unix(sudo:session): session closed for user root Feb 20 09:16:46 np0005625201 sshd[446238]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:17:05 np0005625201 sshd[446494]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:17:16 np0005625201 sshd[446496]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:17:36 np0005625201 sudo[446713]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:17:36 np0005625201 sudo[446713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:17:36 np0005625201 sudo[446713]: pam_unix(sudo:session): session closed for user root Feb 20 09:17:36 np0005625201 sudo[446728]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:17:36 np0005625201 sudo[446728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:17:36 np0005625201 sudo[446728]: pam_unix(sudo:session): session closed for user root Feb 20 09:17:37 np0005625201 sudo[446775]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:17:37 np0005625201 sudo[446775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:17:37 np0005625201 sudo[446775]: pam_unix(sudo:session): session closed for user root Feb 20 09:17:46 np0005625201 sshd[446794]: Invalid user mcserver from 190.60.48.194 port 46080 Feb 20 09:17:46 np0005625201 sshd[446794]: Received disconnect from 190.60.48.194 port 46080:11: Bye Bye [preauth] Feb 20 09:17:46 np0005625201 sshd[446794]: Disconnected from invalid user mcserver 190.60.48.194 port 46080 [preauth] Feb 20 09:17:49 np0005625201 sshd[446796]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:17:54 np0005625201 sshd[447018]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:18:02 np0005625201 sshd[447020]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:18:33 np0005625201 sshd[447262]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:18:37 np0005625201 sudo[447264]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:18:37 np0005625201 sudo[447264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:18:37 np0005625201 sudo[447264]: pam_unix(sudo:session): session closed for user root Feb 20 09:18:37 np0005625201 sudo[447279]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:18:37 np0005625201 sudo[447279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:18:38 np0005625201 sudo[447279]: pam_unix(sudo:session): session closed for user root Feb 20 09:18:39 np0005625201 sudo[447326]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:18:39 np0005625201 sudo[447326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:18:39 np0005625201 sudo[447326]: pam_unix(sudo:session): session closed for user root Feb 20 09:18:48 np0005625201 sshd[447345]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:19:01 np0005625201 sshd[447559]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:19:15 np0005625201 sshd[447597]: Invalid user n8n from 103.179.57.150 port 37148 Feb 20 09:19:15 np0005625201 sshd[447597]: Received disconnect from 103.179.57.150 port 37148:11: Bye Bye [preauth] Feb 20 09:19:15 np0005625201 sshd[447597]: Disconnected from invalid user n8n 103.179.57.150 port 37148 [preauth] Feb 20 09:19:16 np0005625201 sshd[447599]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:19:32 np0005625201 sshd[447821]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:19:39 np0005625201 sudo[447823]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:19:39 np0005625201 sudo[447823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:19:39 np0005625201 sudo[447823]: pam_unix(sudo:session): session closed for user root Feb 20 09:19:39 np0005625201 sudo[447838]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:19:39 np0005625201 sudo[447838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:19:40 np0005625201 sudo[447838]: pam_unix(sudo:session): session closed for user root Feb 20 09:19:40 np0005625201 sudo[447884]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:19:40 np0005625201 sudo[447884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:19:40 np0005625201 sudo[447884]: pam_unix(sudo:session): session closed for user root Feb 20 09:19:59 np0005625201 sshd[448122]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:20:07 np0005625201 sshd[448158]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:20:14 np0005625201 sshd[448160]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:20:41 np0005625201 sudo[448380]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:20:41 np0005625201 sudo[448380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:20:41 np0005625201 sudo[448380]: pam_unix(sudo:session): session closed for user root Feb 20 09:20:41 np0005625201 sudo[448395]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:20:41 np0005625201 sudo[448395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:20:41 np0005625201 sudo[448395]: pam_unix(sudo:session): session closed for user root Feb 20 09:20:42 np0005625201 sudo[448441]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:20:42 np0005625201 sudo[448441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:20:42 np0005625201 sudo[448441]: pam_unix(sudo:session): session closed for user root Feb 20 09:20:44 np0005625201 sshd[448456]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:20:56 np0005625201 sshd[448462]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:21:13 np0005625201 sshd[448714]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:21:35 np0005625201 sshd[448955]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:21:40 np0005625201 sshd[448957]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:21:42 np0005625201 sudo[448959]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:21:42 np0005625201 sudo[448959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:21:42 np0005625201 sudo[448959]: pam_unix(sudo:session): session closed for user root Feb 20 09:21:42 np0005625201 sudo[448974]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:21:42 np0005625201 sudo[448974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:21:44 np0005625201 sudo[448974]: pam_unix(sudo:session): session closed for user root Feb 20 09:21:44 np0005625201 sudo[449148]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:21:44 np0005625201 sudo[449148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:21:44 np0005625201 sudo[449148]: pam_unix(sudo:session): session closed for user root Feb 20 09:21:44 np0005625201 sudo[449163]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:21:44 np0005625201 sudo[449163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:21:45 np0005625201 sudo[449163]: pam_unix(sudo:session): session closed for user root Feb 20 09:21:46 np0005625201 sudo[449209]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:21:46 np0005625201 sudo[449209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:21:46 np0005625201 sudo[449209]: pam_unix(sudo:session): session closed for user root Feb 20 09:22:18 np0005625201 sshd[449480]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:22:24 np0005625201 sshd[449482]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:22:25 np0005625201 sshd[449484]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:22:46 np0005625201 sudo[449705]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:22:46 np0005625201 sudo[449705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:22:46 np0005625201 sudo[449705]: pam_unix(sudo:session): session closed for user root Feb 20 09:22:46 np0005625201 sudo[449720]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 09:22:46 np0005625201 sudo[449720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:22:47 np0005625201 sudo[449720]: pam_unix(sudo:session): session closed for user root Feb 20 09:22:47 np0005625201 sudo[449755]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:22:47 np0005625201 sudo[449755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:22:47 np0005625201 sudo[449755]: pam_unix(sudo:session): session closed for user root Feb 20 09:22:47 np0005625201 sudo[449770]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:22:47 np0005625201 sudo[449770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:22:48 np0005625201 sudo[449770]: pam_unix(sudo:session): session closed for user root Feb 20 09:22:48 np0005625201 sudo[449819]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:22:48 np0005625201 sudo[449819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:22:48 np0005625201 sudo[449819]: pam_unix(sudo:session): session closed for user root Feb 20 09:23:02 np0005625201 sshd[450027]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:23:08 np0005625201 sshd[450085]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:23:38 np0005625201 sshd[450309]: Received disconnect from 61.220.235.10 port 58220:11: Bye Bye [preauth] Feb 20 09:23:38 np0005625201 sshd[450309]: Disconnected from authenticating user root 61.220.235.10 port 58220 [preauth] Feb 20 09:23:47 np0005625201 sshd[450311]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:23:48 np0005625201 sudo[450313]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:23:48 np0005625201 sudo[450313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:23:48 np0005625201 sudo[450313]: pam_unix(sudo:session): session closed for user root Feb 20 09:23:48 np0005625201 sudo[450328]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:23:48 np0005625201 sudo[450328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:23:49 np0005625201 sudo[450328]: pam_unix(sudo:session): session closed for user root Feb 20 09:23:50 np0005625201 sshd[450376]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:23:50 np0005625201 sudo[450378]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:23:50 np0005625201 sudo[450378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:23:50 np0005625201 sudo[450378]: pam_unix(sudo:session): session closed for user root Feb 20 09:24:50 np0005625201 sudo[450860]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:24:50 np0005625201 sudo[450860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:24:50 np0005625201 sudo[450860]: pam_unix(sudo:session): session closed for user root Feb 20 09:24:50 np0005625201 sudo[450875]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:24:50 np0005625201 sudo[450875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:24:51 np0005625201 sudo[450875]: pam_unix(sudo:session): session closed for user root Feb 20 09:24:53 np0005625201 sudo[450922]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:24:53 np0005625201 sudo[450922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:24:53 np0005625201 sudo[450922]: pam_unix(sudo:session): session closed for user root Feb 20 09:25:18 np0005625201 sshd[451192]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:25:40 np0005625201 sshd[451414]: Invalid user jcarlos from 190.60.48.194 port 54536 Feb 20 09:25:40 np0005625201 sshd[451414]: Received disconnect from 190.60.48.194 port 54536:11: Bye Bye [preauth] Feb 20 09:25:40 np0005625201 sshd[451414]: Disconnected from invalid user jcarlos 190.60.48.194 port 54536 [preauth] Feb 20 09:25:53 np0005625201 sudo[451416]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:25:53 np0005625201 sudo[451416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:25:53 np0005625201 sudo[451416]: pam_unix(sudo:session): session closed for user root Feb 20 09:25:53 np0005625201 sudo[451431]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:25:53 np0005625201 sudo[451431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:25:54 np0005625201 sudo[451431]: pam_unix(sudo:session): session closed for user root Feb 20 09:25:54 np0005625201 sudo[451478]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:25:54 np0005625201 sudo[451478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:25:54 np0005625201 sudo[451478]: pam_unix(sudo:session): session closed for user root Feb 20 09:26:45 np0005625201 sshd[451976]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:26:55 np0005625201 sudo[451978]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:26:55 np0005625201 sudo[451978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:26:55 np0005625201 sudo[451978]: pam_unix(sudo:session): session closed for user root Feb 20 09:26:55 np0005625201 sudo[451993]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:26:55 np0005625201 sudo[451993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:26:56 np0005625201 sudo[451993]: pam_unix(sudo:session): session closed for user root Feb 20 09:26:59 np0005625201 sudo[452041]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:26:59 np0005625201 sudo[452041]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:26:59 np0005625201 sudo[452041]: pam_unix(sudo:session): session closed for user root Feb 20 09:27:37 np0005625201 sshd[452311]: error: kex_exchange_identification: read: Connection timed out Feb 20 09:27:37 np0005625201 sshd[452311]: banner exchange: Connection from 182.43.221.112 port 40342: Connection timed out Feb 20 09:27:59 np0005625201 sudo[452528]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:27:59 np0005625201 sudo[452528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:27:59 np0005625201 sudo[452528]: pam_unix(sudo:session): session closed for user root Feb 20 09:27:59 np0005625201 sudo[452543]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:27:59 np0005625201 sudo[452543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:28:00 np0005625201 sudo[452543]: pam_unix(sudo:session): session closed for user root Feb 20 09:28:01 np0005625201 sudo[452589]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:28:01 np0005625201 sudo[452589]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:28:01 np0005625201 sudo[452589]: pam_unix(sudo:session): session closed for user root Feb 20 09:28:13 np0005625201 sshd[452858]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:29:02 np0005625201 sudo[453078]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:29:02 np0005625201 sudo[453078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:29:02 np0005625201 sudo[453078]: pam_unix(sudo:session): session closed for user root Feb 20 09:29:02 np0005625201 sudo[453093]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:29:02 np0005625201 sudo[453093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:29:02 np0005625201 sudo[453093]: pam_unix(sudo:session): session closed for user root Feb 20 09:29:05 np0005625201 sudo[453170]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:29:05 np0005625201 sudo[453170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:29:05 np0005625201 sudo[453170]: pam_unix(sudo:session): session closed for user root Feb 20 09:29:22 np0005625201 sshd[453406]: Invalid user n8n from 190.60.48.194 port 45948 Feb 20 09:29:23 np0005625201 sshd[453406]: Received disconnect from 190.60.48.194 port 45948:11: Bye Bye [preauth] Feb 20 09:29:23 np0005625201 sshd[453406]: Disconnected from invalid user n8n 190.60.48.194 port 45948 [preauth] Feb 20 09:29:37 np0005625201 sshd[453408]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:29:47 np0005625201 sshd[453628]: Invalid user mcserver from 103.179.57.150 port 58716 Feb 20 09:29:48 np0005625201 sshd[453628]: Received disconnect from 103.179.57.150 port 58716:11: Bye Bye [preauth] Feb 20 09:29:48 np0005625201 sshd[453628]: Disconnected from invalid user mcserver 103.179.57.150 port 58716 [preauth] Feb 20 09:30:05 np0005625201 sudo[453662]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:30:05 np0005625201 sudo[453662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:30:05 np0005625201 sudo[453662]: pam_unix(sudo:session): session closed for user root Feb 20 09:30:05 np0005625201 sudo[453677]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:30:05 np0005625201 sudo[453677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:30:06 np0005625201 sudo[453677]: pam_unix(sudo:session): session closed for user root Feb 20 09:30:09 np0005625201 sudo[453728]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:30:09 np0005625201 sudo[453728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:30:09 np0005625201 sudo[453728]: pam_unix(sudo:session): session closed for user root Feb 20 09:30:44 np0005625201 sshd[453963]: Invalid user b from 61.220.235.10 port 41836 Feb 20 09:30:44 np0005625201 sshd[453963]: Received disconnect from 61.220.235.10 port 41836:11: Bye Bye [preauth] Feb 20 09:30:44 np0005625201 sshd[453963]: Disconnected from invalid user b 61.220.235.10 port 41836 [preauth] Feb 20 09:30:58 np0005625201 sshd[454184]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:31:06 np0005625201 sshd[454220]: error: kex_exchange_identification: Connection closed by remote host Feb 20 09:31:06 np0005625201 sshd[454220]: Connection closed by 167.172.180.30 port 35372 Feb 20 09:31:09 np0005625201 sudo[454221]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:31:09 np0005625201 sudo[454221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:31:09 np0005625201 sudo[454221]: pam_unix(sudo:session): session closed for user root Feb 20 09:31:09 np0005625201 sudo[454239]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:31:09 np0005625201 sudo[454239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:31:10 np0005625201 sudo[454239]: pam_unix(sudo:session): session closed for user root Feb 20 09:31:10 np0005625201 sudo[454288]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:31:10 np0005625201 sudo[454288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:31:10 np0005625201 sudo[454288]: pam_unix(sudo:session): session closed for user root Feb 20 09:31:30 np0005625201 sshd[454536]: Received disconnect from 151.57.106.49 port 17496:11: Bye Bye [preauth] Feb 20 09:31:30 np0005625201 sshd[454536]: Disconnected from authenticating user root 151.57.106.49 port 17496 [preauth] Feb 20 09:32:05 np0005625201 sshd[454758]: error: kex_exchange_identification: Connection closed by remote host Feb 20 09:32:05 np0005625201 sshd[454758]: Connection closed by 180.76.167.130 port 57780 Feb 20 09:32:11 np0005625201 sudo[454795]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:32:11 np0005625201 sudo[454795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:32:11 np0005625201 sudo[454795]: pam_unix(sudo:session): session closed for user root Feb 20 09:32:11 np0005625201 sudo[454810]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:32:11 np0005625201 sudo[454810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:32:12 np0005625201 sudo[454810]: pam_unix(sudo:session): session closed for user root Feb 20 09:32:12 np0005625201 sudo[454985]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:32:12 np0005625201 sudo[454985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:32:12 np0005625201 sudo[454985]: pam_unix(sudo:session): session closed for user root Feb 20 09:32:12 np0005625201 sudo[455000]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:32:12 np0005625201 sudo[455000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:32:13 np0005625201 sudo[455000]: pam_unix(sudo:session): session closed for user root Feb 20 09:32:14 np0005625201 sudo[455047]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:32:14 np0005625201 sudo[455047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:32:14 np0005625201 sudo[455047]: pam_unix(sudo:session): session closed for user root Feb 20 09:32:20 np0005625201 sshd[455249]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:32:59 np0005625201 sshd[455491]: Invalid user ubuntu from 190.60.48.194 port 36896 Feb 20 09:32:59 np0005625201 sshd[455491]: Received disconnect from 190.60.48.194 port 36896:11: Bye Bye [preauth] Feb 20 09:32:59 np0005625201 sshd[455491]: Disconnected from invalid user ubuntu 190.60.48.194 port 36896 [preauth] Feb 20 09:33:15 np0005625201 sudo[455530]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:33:15 np0005625201 sudo[455530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:33:15 np0005625201 sudo[455530]: pam_unix(sudo:session): session closed for user root Feb 20 09:33:15 np0005625201 sudo[455545]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 09:33:15 np0005625201 sudo[455545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:33:15 np0005625201 sudo[455545]: pam_unix(sudo:session): session closed for user root Feb 20 09:33:15 np0005625201 sudo[455580]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:33:15 np0005625201 sudo[455580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:33:15 np0005625201 sudo[455580]: pam_unix(sudo:session): session closed for user root Feb 20 09:33:15 np0005625201 sudo[455595]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:33:15 np0005625201 sudo[455595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:33:16 np0005625201 sudo[455595]: pam_unix(sudo:session): session closed for user root Feb 20 09:33:17 np0005625201 sudo[455643]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:33:17 np0005625201 sudo[455643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:33:17 np0005625201 sudo[455643]: pam_unix(sudo:session): session closed for user root Feb 20 09:33:38 np0005625201 sshd[455873]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:34:12 np0005625201 sshd[456124]: Invalid user ts2 from 61.220.235.10 port 47704 Feb 20 09:34:12 np0005625201 sshd[456124]: Received disconnect from 61.220.235.10 port 47704:11: Bye Bye [preauth] Feb 20 09:34:12 np0005625201 sshd[456124]: Disconnected from invalid user ts2 61.220.235.10 port 47704 [preauth] Feb 20 09:34:17 np0005625201 sudo[456130]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:34:17 np0005625201 sudo[456130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:34:17 np0005625201 sudo[456130]: pam_unix(sudo:session): session closed for user root Feb 20 09:34:17 np0005625201 sudo[456145]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:34:17 np0005625201 sudo[456145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:34:18 np0005625201 sudo[456145]: pam_unix(sudo:session): session closed for user root Feb 20 09:34:18 np0005625201 sudo[456191]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:34:18 np0005625201 sudo[456191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:34:18 np0005625201 sudo[456191]: pam_unix(sudo:session): session closed for user root Feb 20 09:34:51 np0005625201 sshd[456422]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:35:04 np0005625201 sshd[456634]: Received disconnect from 151.57.106.49 port 17641:11: Bye Bye [preauth] Feb 20 09:35:04 np0005625201 sshd[456634]: Disconnected from authenticating user root 151.57.106.49 port 17641 [preauth] Feb 20 09:35:08 np0005625201 sshd[456670]: Received disconnect from 103.179.57.150 port 34512:11: Bye Bye [preauth] Feb 20 09:35:08 np0005625201 sshd[456670]: Disconnected from authenticating user root 103.179.57.150 port 34512 [preauth] Feb 20 09:35:19 np0005625201 sudo[456676]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:35:19 np0005625201 sudo[456676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:35:19 np0005625201 sudo[456676]: pam_unix(sudo:session): session closed for user root Feb 20 09:35:19 np0005625201 sudo[456691]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:35:19 np0005625201 sudo[456691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:35:19 np0005625201 sudo[456691]: pam_unix(sudo:session): session closed for user root Feb 20 09:35:21 np0005625201 sudo[456739]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:35:21 np0005625201 sudo[456739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:35:21 np0005625201 sudo[456739]: pam_unix(sudo:session): session closed for user root Feb 20 09:36:01 np0005625201 sshd[457197]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:36:22 np0005625201 sudo[457252]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:36:22 np0005625201 sudo[457252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:36:22 np0005625201 sudo[457252]: pam_unix(sudo:session): session closed for user root Feb 20 09:36:22 np0005625201 sudo[457268]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:36:22 np0005625201 sudo[457268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:36:22 np0005625201 sudo[457268]: pam_unix(sudo:session): session closed for user root Feb 20 09:36:23 np0005625201 sudo[457322]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:36:23 np0005625201 sudo[457322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:36:23 np0005625201 sudo[457322]: pam_unix(sudo:session): session closed for user root Feb 20 09:36:24 np0005625201 sshd[457516]: Received disconnect from 190.60.48.194 port 49412:11: Bye Bye [preauth] Feb 20 09:36:24 np0005625201 sshd[457516]: Disconnected from authenticating user root 190.60.48.194 port 49412 [preauth] Feb 20 09:36:43 np0005625201 sshd[457558]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:37:10 np0005625201 sshd[457812]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:37:23 np0005625201 sudo[457819]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:37:24 np0005625201 sudo[457819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:37:24 np0005625201 sudo[457819]: pam_unix(sudo:session): session closed for user root Feb 20 09:37:24 np0005625201 sudo[457834]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:37:24 np0005625201 sudo[457834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:37:24 np0005625201 sudo[457834]: pam_unix(sudo:session): session closed for user root Feb 20 09:37:26 np0005625201 sudo[458065]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:37:26 np0005625201 sudo[458065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:37:26 np0005625201 sudo[458065]: pam_unix(sudo:session): session closed for user root Feb 20 09:37:39 np0005625201 sshd[458104]: Invalid user admin from 61.220.235.10 port 53576 Feb 20 09:37:39 np0005625201 sshd[458104]: Received disconnect from 61.220.235.10 port 53576:11: Bye Bye [preauth] Feb 20 09:37:39 np0005625201 sshd[458104]: Disconnected from invalid user admin 61.220.235.10 port 53576 [preauth] Feb 20 09:37:48 np0005625201 sshd[458106]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:37:59 np0005625201 sshd[458296]: Received disconnect from 151.57.106.49 port 17347:11: Bye Bye [preauth] Feb 20 09:37:59 np0005625201 sshd[458296]: Disconnected from authenticating user root 151.57.106.49 port 17347 [preauth] Feb 20 09:38:17 np0005625201 sshd[458357]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:38:27 np0005625201 sudo[458509]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:38:27 np0005625201 sudo[458509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:38:27 np0005625201 sudo[458509]: pam_unix(sudo:session): session closed for user root Feb 20 09:38:27 np0005625201 sudo[458550]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:38:27 np0005625201 sudo[458550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:38:28 np0005625201 sudo[458550]: pam_unix(sudo:session): session closed for user root Feb 20 09:38:28 np0005625201 sshd[458620]: Accepted publickey for zuul from 38.102.83.114 port 33780 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:38:28 np0005625201 systemd[458623]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:38:28 np0005625201 sshd[458620]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 09:38:28 np0005625201 sudo[458653]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-asuzujeopojvhoxlcmskutdwwygwydsi ; /usr/bin/python3 Feb 20 09:38:28 np0005625201 sudo[458653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 09:38:29 np0005625201 sudo[458653]: pam_unix(sudo:session): session closed for user root Feb 20 09:38:31 np0005625201 sudo[458683]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:38:31 np0005625201 sudo[458683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:38:31 np0005625201 sudo[458683]: pam_unix(sudo:session): session closed for user root Feb 20 09:38:53 np0005625201 sshd[458698]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:39:02 np0005625201 sudo[458917]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:02 np0005625201 sudo[458917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:02 np0005625201 sudo[458917]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:04 np0005625201 sudo[458933]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:04 np0005625201 sudo[458933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:04 np0005625201 sudo[458933]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:05 np0005625201 sudo[458949]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:05 np0005625201 sudo[458949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:05 np0005625201 sudo[458949]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:15 np0005625201 sshd[458932]: Connection closed by authenticating user root 213.209.159.158 port 10588 [preauth] Feb 20 09:39:18 np0005625201 sudo[459000]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:39:18 np0005625201 sudo[459000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:18 np0005625201 sudo[459000]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:19 np0005625201 sudo[459015]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:39:19 np0005625201 sudo[459015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:19 np0005625201 sudo[459015]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:19 np0005625201 sudo[459048]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:39:19 np0005625201 sudo[459048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:19 np0005625201 sudo[459048]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:19 np0005625201 sudo[459063]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 -- inventory --format=json-pretty --filter-for-batch Feb 20 09:39:19 np0005625201 sudo[459063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:21 np0005625201 sudo[459063]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:22 np0005625201 sudo[460269]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:22 np0005625201 sudo[460269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:22 np0005625201 sudo[460269]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:22 np0005625201 sudo[460284]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:22 np0005625201 sudo[460284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:22 np0005625201 sudo[460284]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:23 np0005625201 sudo[460299]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:23 np0005625201 sudo[460299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:23 np0005625201 sudo[460299]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:24 np0005625201 sshd[460314]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:39:24 np0005625201 sudo[460316]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:24 np0005625201 sudo[460316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:24 np0005625201 sudo[460316]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:25 np0005625201 sudo[460336]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:25 np0005625201 sudo[460336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:25 np0005625201 sudo[460336]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:27 np0005625201 sshd[458998]: Connection closed by authenticating user root 213.209.159.158 port 6588 [preauth] Feb 20 09:39:29 np0005625201 sshd[458639]: Received disconnect from 38.102.83.114 port 33780:11: disconnected by user Feb 20 09:39:29 np0005625201 sshd[458639]: Disconnected from user zuul 38.102.83.114 port 33780 Feb 20 09:39:29 np0005625201 sshd[458620]: pam_unix(sshd:session): session closed for user zuul Feb 20 09:39:34 np0005625201 sudo[460570]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:34 np0005625201 sudo[460570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:34 np0005625201 sudo[460570]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:34 np0005625201 sudo[460585]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:39:34 np0005625201 sudo[460585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:34 np0005625201 sudo[460585]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:34 np0005625201 sudo[460600]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:39:34 np0005625201 sudo[460600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:35 np0005625201 sudo[460600]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:37 np0005625201 sudo[460648]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:37 np0005625201 sudo[460648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:37 np0005625201 sudo[460648]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:38 np0005625201 sudo[460663]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:39:38 np0005625201 sudo[460663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:39:38 np0005625201 sudo[460663]: pam_unix(sudo:session): session closed for user root Feb 20 09:39:40 np0005625201 sshd[460351]: Connection closed by authenticating user root 213.209.159.158 port 15916 [preauth] Feb 20 09:39:52 np0005625201 sshd[460680]: Received disconnect from 190.60.48.194 port 46624:11: Bye Bye [preauth] Feb 20 09:39:52 np0005625201 sshd[460680]: Disconnected from authenticating user root 190.60.48.194 port 46624 [preauth] Feb 20 09:39:52 np0005625201 sshd[460678]: Connection closed by authenticating user root 213.209.159.158 port 49978 [preauth] Feb 20 09:39:55 np0005625201 sshd[460684]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:40:05 np0005625201 sshd[460682]: Connection closed by authenticating user root 213.209.159.158 port 12880 [preauth] Feb 20 09:40:08 np0005625201 sudo[460937]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:08 np0005625201 sudo[460937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:08 np0005625201 sudo[460937]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:10 np0005625201 sudo[460952]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:40:10 np0005625201 sudo[460952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:10 np0005625201 sudo[460952]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:10 np0005625201 sudo[460967]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 rm-daemon --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 --name mds.mds.np0005625201.iogohb --force Feb 20 09:40:10 np0005625201 sudo[460967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:15 np0005625201 sudo[460967]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:18 np0005625201 sshd[460900]: Connection closed by authenticating user root 213.209.159.158 port 30314 [preauth] Feb 20 09:40:22 np0005625201 sudo[461154]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:22 np0005625201 sudo[461154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:22 np0005625201 sudo[461154]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:22 np0005625201 sudo[461169]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:40:22 np0005625201 sudo[461169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:22 np0005625201 sudo[461169]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:22 np0005625201 sudo[461184]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:40:22 np0005625201 sudo[461184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:24 np0005625201 sudo[461184]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:25 np0005625201 sudo[461342]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:25 np0005625201 sudo[461342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:25 np0005625201 sudo[461342]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:26 np0005625201 sudo[461357]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:26 np0005625201 sudo[461357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:26 np0005625201 sudo[461357]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:30 np0005625201 sshd[461152]: Connection closed by authenticating user root 213.209.159.158 port 15614 [preauth] Feb 20 09:40:31 np0005625201 sshd[461573]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:40:32 np0005625201 sshd[461571]: Invalid user jcarlos from 103.179.57.150 port 38094 Feb 20 09:40:32 np0005625201 sshd[461571]: Received disconnect from 103.179.57.150 port 38094:11: Bye Bye [preauth] Feb 20 09:40:32 np0005625201 sshd[461571]: Disconnected from invalid user jcarlos 103.179.57.150 port 38094 [preauth] Feb 20 09:40:42 np0005625201 sshd[461389]: Connection closed by authenticating user root 213.209.159.158 port 8504 [preauth] Feb 20 09:40:52 np0005625201 sudo[461604]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:40:52 np0005625201 sudo[461604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:52 np0005625201 sudo[461604]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:52 np0005625201 sudo[461619]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:40:52 np0005625201 sudo[461619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:53 np0005625201 sshd[461602]: Connection closed by authenticating user root 213.209.159.158 port 25160 [preauth] Feb 20 09:40:53 np0005625201 sudo[461619]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:53 np0005625201 sudo[461667]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:53 np0005625201 sudo[461667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:53 np0005625201 sudo[461667]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:54 np0005625201 sudo[461682]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:54 np0005625201 sudo[461682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:54 np0005625201 sudo[461682]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:54 np0005625201 sshd[461665]: Invalid user oracle from 61.220.235.10 port 59464 Feb 20 09:40:54 np0005625201 sshd[461665]: Received disconnect from 61.220.235.10 port 59464:11: Bye Bye [preauth] Feb 20 09:40:54 np0005625201 sshd[461665]: Disconnected from invalid user oracle 61.220.235.10 port 59464 [preauth] Feb 20 09:40:55 np0005625201 sudo[461698]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:40:55 np0005625201 sudo[461698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:40:55 np0005625201 sudo[461698]: pam_unix(sudo:session): session closed for user root Feb 20 09:40:59 np0005625201 sshd[461714]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:41:03 np0005625201 sudo[461904]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:03 np0005625201 sudo[461904]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:03 np0005625201 sudo[461904]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:05 np0005625201 sudo[461919]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:05 np0005625201 sudo[461919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:05 np0005625201 sudo[461919]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:06 np0005625201 sshd[461694]: Connection closed by authenticating user root 213.209.159.158 port 31974 [preauth] Feb 20 09:41:06 np0005625201 sudo[461961]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:06 np0005625201 sudo[461961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:06 np0005625201 sudo[461961]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:07 np0005625201 sudo[461976]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:07 np0005625201 sudo[461976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:07 np0005625201 sudo[461976]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:11 np0005625201 sudo[462027]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:11 np0005625201 sudo[462027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:11 np0005625201 sudo[462027]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:14 np0005625201 sudo[462042]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:14 np0005625201 sudo[462042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:14 np0005625201 sudo[462042]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:18 np0005625201 sshd[461960]: Connection closed by authenticating user root 213.209.159.158 port 41754 [preauth] Feb 20 09:41:31 np0005625201 sshd[462057]: Connection closed by authenticating user root 213.209.159.158 port 36118 [preauth] Feb 20 09:41:32 np0005625201 sudo[462275]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:32 np0005625201 sudo[462275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:32 np0005625201 sudo[462275]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:37 np0005625201 sudo[462316]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:41:37 np0005625201 sudo[462316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:37 np0005625201 sudo[462316]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:37 np0005625201 sudo[462331]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:41:37 np0005625201 sudo[462331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:37 np0005625201 sudo[462331]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:37 np0005625201 sudo[462346]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:37 np0005625201 sudo[462346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:37 np0005625201 sudo[462346]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:37 np0005625201 sudo[462361]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:37 np0005625201 sudo[462361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:37 np0005625201 sudo[462361]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462376]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462376]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462376]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462404]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462404]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462419]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462419]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:41:38 np0005625201 sudo[462434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462434]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462450]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:38 np0005625201 sudo[462450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462450]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462465]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:38 np0005625201 sudo[462465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462465]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462480]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462480]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462496]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:38 np0005625201 sudo[462496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462496]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462511]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462511]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sshd[462449]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:41:38 np0005625201 sudo[462539]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462539]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462554]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:38 np0005625201 sudo[462554]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462554]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:38 np0005625201 sudo[462569]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:41:38 np0005625201 sudo[462569]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:38 np0005625201 sudo[462569]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:40 np0005625201 sudo[462584]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:40 np0005625201 sudo[462584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:40 np0005625201 sudo[462584]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:43 np0005625201 sshd[462138]: Connection closed by authenticating user root 213.209.159.158 port 16090 [preauth] Feb 20 09:41:46 np0005625201 sshd[26213]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26097]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26233]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26175]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26309]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26116]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26155]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26252]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26194]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26290]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26271]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[26136]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:41:46 np0005625201 sshd[462743]: Accepted publickey for ceph-admin from 192.168.122.105 port 43374 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 09:41:46 np0005625201 sshd[462743]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 09:41:46 np0005625201 sudo[462747]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:46 np0005625201 sudo[462747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:46 np0005625201 sudo[462747]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:46 np0005625201 sudo[462762]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:41:46 np0005625201 sudo[462762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:48 np0005625201 sudo[462762]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:48 np0005625201 sudo[462942]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:48 np0005625201 sudo[462942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:48 np0005625201 sudo[462942]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:48 np0005625201 sudo[462967]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:41:48 np0005625201 sudo[462967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:49 np0005625201 sudo[462967]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:49 np0005625201 sudo[463014]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:49 np0005625201 sudo[463014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:49 np0005625201 sudo[463014]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:49 np0005625201 sudo[463029]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:41:49 np0005625201 sudo[463029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:49 np0005625201 sudo[463029]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463063]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:41:50 np0005625201 sudo[463063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463063]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463078]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:41:50 np0005625201 sudo[463078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463078]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463093]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:50 np0005625201 sudo[463093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463093]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463108]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:50 np0005625201 sudo[463108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463108]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463123]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:50 np0005625201 sudo[463123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463123]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463151]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:50 np0005625201 sudo[463151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463151]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463166]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:41:50 np0005625201 sudo[463166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463166]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463181]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:41:50 np0005625201 sudo[463181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463181]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463196]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:50 np0005625201 sudo[463196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463196]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463211]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:50 np0005625201 sudo[463211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463211]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463226]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:50 np0005625201 sudo[463226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463226]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:50 np0005625201 sudo[463241]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:50 np0005625201 sudo[463241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:50 np0005625201 sudo[463241]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:51 np0005625201 sudo[463256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463256]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463284]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:51 np0005625201 sudo[463284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463284]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463299]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:41:51 np0005625201 sudo[463299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463299]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463314]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:41:51 np0005625201 sudo[463314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463314]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463329]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:41:51 np0005625201 sudo[463329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463329]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463344]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:41:51 np0005625201 sudo[463344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463344]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463359]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:41:51 np0005625201 sudo[463359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463359]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463374]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:51 np0005625201 sudo[463374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463374]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463389]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:41:51 np0005625201 sudo[463389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463389]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463417]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:41:51 np0005625201 sudo[463417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463417]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:51 np0005625201 sudo[463432]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:41:51 np0005625201 sudo[463432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:51 np0005625201 sudo[463432]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463447]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring Feb 20 09:41:52 np0005625201 sudo[463447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463447]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463462]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:52 np0005625201 sudo[463462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463462]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463477]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:41:52 np0005625201 sudo[463477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463477]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463492]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:41:52 np0005625201 sudo[463492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463492]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463507]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:52 np0005625201 sudo[463507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463507]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463522]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:41:52 np0005625201 sudo[463522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463522]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463550]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:41:52 np0005625201 sudo[463550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463550]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463565]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:41:52 np0005625201 sudo[463565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463565]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:52 np0005625201 sudo[463580]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 09:41:52 np0005625201 sudo[463580]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:52 np0005625201 sudo[463580]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:53 np0005625201 sudo[463595]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:41:53 np0005625201 sudo[463595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:53 np0005625201 sudo[463595]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:55 np0005625201 sudo[463610]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:55 np0005625201 sudo[463610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:55 np0005625201 sudo[463610]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:55 np0005625201 sudo[463625]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:55 np0005625201 sudo[463625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:55 np0005625201 sshd[462599]: Connection closed by authenticating user root 213.209.159.158 port 61230 [preauth] Feb 20 09:41:56 np0005625201 sudo[463625]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:56 np0005625201 sudo[463696]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:56 np0005625201 sudo[463696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:56 np0005625201 sudo[463696]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:56 np0005625201 sudo[463711]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:56 np0005625201 sudo[463711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:57 np0005625201 sudo[463711]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:57 np0005625201 sudo[463782]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:41:57 np0005625201 sudo[463782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:57 np0005625201 sudo[463782]: pam_unix(sudo:session): session closed for user root Feb 20 09:41:57 np0005625201 sudo[463797]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:41:57 np0005625201 sudo[463797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:41:58 np0005625201 sudo[463797]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:05 np0005625201 sshd[464061]: error: kex_exchange_identification: Connection closed by remote host Feb 20 09:42:05 np0005625201 sshd[464061]: Connection closed by 167.172.180.30 port 39498 Feb 20 09:42:06 np0005625201 sshd[464062]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:42:08 np0005625201 sshd[463672]: Connection closed by authenticating user root 213.209.159.158 port 64572 [preauth] Feb 20 09:42:18 np0005625201 sudo[464127]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:42:18 np0005625201 sudo[464127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464127]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464142]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:42:18 np0005625201 sudo[464142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464142]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464157]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464157]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464172]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:18 np0005625201 sudo[464172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464172]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464187]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464187]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464215]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464215]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464230]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464230]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464245]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:42:18 np0005625201 sudo[464245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464245]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464260]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:42:18 np0005625201 sudo[464260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464260]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464275]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:42:18 np0005625201 sudo[464275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464275]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464290]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464290]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464305]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:18 np0005625201 sudo[464305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464305]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:18 np0005625201 sudo[464320]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:42:18 np0005625201 sudo[464320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:18 np0005625201 sudo[464320]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:19 np0005625201 sudo[464348]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:42:19 np0005625201 sudo[464348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:19 np0005625201 sudo[464348]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:19 np0005625201 sudo[464363]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:42:19 np0005625201 sudo[464363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:19 np0005625201 sudo[464363]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:19 np0005625201 sudo[464378]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:42:19 np0005625201 sudo[464378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:19 np0005625201 sudo[464378]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:20 np0005625201 sshd[464125]: Connection closed by authenticating user root 213.209.159.158 port 37358 [preauth] Feb 20 09:42:22 np0005625201 sudo[464394]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:42:22 np0005625201 sudo[464394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:22 np0005625201 sudo[464394]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:23 np0005625201 sudo[464410]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:42:23 np0005625201 sudo[464410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:23 np0005625201 sudo[464410]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:26 np0005625201 sudo[464425]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:42:26 np0005625201 sudo[464425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:26 np0005625201 sudo[464425]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:26 np0005625201 sudo[464440]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:26 np0005625201 sudo[464440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:27 np0005625201 sudo[464440]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:27 np0005625201 sudo[464511]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:42:27 np0005625201 sudo[464511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:27 np0005625201 sudo[464511]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:28 np0005625201 sudo[464526]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:28 np0005625201 sudo[464526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:28 np0005625201 sudo[464526]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:28 np0005625201 sudo[464596]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:42:28 np0005625201 sudo[464596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:28 np0005625201 sudo[464596]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:28 np0005625201 sudo[464611]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:29 np0005625201 sudo[464611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:29 np0005625201 sudo[464611]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:33 np0005625201 sshd[464393]: Connection closed by authenticating user root 213.209.159.158 port 9030 [preauth] Feb 20 09:42:33 np0005625201 sudo[464879]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:42:33 np0005625201 sudo[464879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:33 np0005625201 sudo[464879]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:40 np0005625201 sudo[464920]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:42:40 np0005625201 sudo[464920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:40 np0005625201 sudo[464920]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:40 np0005625201 sudo[464935]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:40 np0005625201 sudo[464935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:41 np0005625201 sudo[464935]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:41 np0005625201 sudo[465004]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:42:41 np0005625201 sudo[465004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:41 np0005625201 sudo[465004]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:41 np0005625201 sudo[465019]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:42:41 np0005625201 sudo[465019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:42:42 np0005625201 sudo[465019]: pam_unix(sudo:session): session closed for user root Feb 20 09:42:43 np0005625201 sshd[464832]: Invalid user postgres from 213.209.159.158 port 10552 Feb 20 09:42:45 np0005625201 sshd[464832]: Connection closed by invalid user postgres 213.209.159.158 port 10552 [preauth] Feb 20 09:42:45 np0005625201 sshd[465090]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:42:57 np0005625201 sshd[465089]: Connection closed by authenticating user root 213.209.159.158 port 41406 [preauth] Feb 20 09:43:01 np0005625201 sudo[465095]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:01 np0005625201 sudo[465095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:01 np0005625201 sudo[465095]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:01 np0005625201 sudo[465110]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:43:01 np0005625201 sudo[465110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:02 np0005625201 sudo[465110]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465156]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:43:04 np0005625201 sudo[465156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465156]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465230]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:43:04 np0005625201 sudo[465230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465230]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465273]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465273]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465314]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:04 np0005625201 sudo[465314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465314]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465363]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465363]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465417]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465417]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465438]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465438]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465456]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:43:04 np0005625201 sudo[465456]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465456]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465473]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:04 np0005625201 sudo[465473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465473]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465488]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:04 np0005625201 sudo[465488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465488]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465503]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465503]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465518]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:04 np0005625201 sudo[465518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465518]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:04 np0005625201 sudo[465533]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:04 np0005625201 sudo[465533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:04 np0005625201 sudo[465533]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:05 np0005625201 sudo[465561]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:05 np0005625201 sudo[465561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:05 np0005625201 sudo[465561]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:05 np0005625201 sudo[465576]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:05 np0005625201 sudo[465576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:05 np0005625201 sudo[465576]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:05 np0005625201 sudo[465591]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:43:05 np0005625201 sudo[465591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:05 np0005625201 sudo[465591]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:05 np0005625201 sudo[465606]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:43:05 np0005625201 sudo[465606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:05 np0005625201 sudo[465606]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:07 np0005625201 sshd[462743]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:43:10 np0005625201 sshd[465093]: Connection closed by authenticating user root 213.209.159.158 port 55180 [preauth] Feb 20 09:43:14 np0005625201 sshd[465710]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:43:22 np0005625201 sshd[465708]: Connection closed by authenticating user root 213.209.159.158 port 8340 [preauth] Feb 20 09:43:32 np0005625201 sshd[465714]: Invalid user rayhan from 213.209.159.158 port 17860 Feb 20 09:43:34 np0005625201 sshd[465714]: Connection closed by invalid user rayhan 213.209.159.158 port 17860 [preauth] Feb 20 09:43:40 np0005625201 sshd[465915]: Accepted publickey for ceph-admin from 192.168.122.104 port 47988 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 09:43:40 np0005625201 systemd[465934]: pam_unix(systemd-user:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 09:43:40 np0005625201 sshd[465915]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 09:43:40 np0005625201 sudo[465959]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:40 np0005625201 sudo[465959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:40 np0005625201 sudo[465959]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:41 np0005625201 sudo[465974]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 check-host Feb 20 09:43:41 np0005625201 sudo[465974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:41 np0005625201 sudo[465974]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:41 np0005625201 sudo[466010]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:41 np0005625201 sudo[466010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:41 np0005625201 sudo[466010]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:41 np0005625201 sudo[466025]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:43:41 np0005625201 sudo[466025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:43 np0005625201 sudo[466025]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:43 np0005625201 sudo[466179]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:43 np0005625201 sudo[466179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:43 np0005625201 sudo[466179]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:43 np0005625201 sudo[466194]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:43:43 np0005625201 sudo[466194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:44 np0005625201 sudo[466194]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:44 np0005625201 sudo[466240]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:44 np0005625201 sudo[466240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:44 np0005625201 sudo[466240]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:44 np0005625201 sudo[466255]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:43:44 np0005625201 sudo[466255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:44 np0005625201 sudo[466255]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466290]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:43:45 np0005625201 sudo[466290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466290]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466305]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:43:45 np0005625201 sudo[466305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466305]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466320]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:45 np0005625201 sudo[466320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466320]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466335]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:45 np0005625201 sudo[466335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466335]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466350]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:45 np0005625201 sudo[466350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466350]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466378]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:45 np0005625201 sudo[466378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466378]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466393]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:45 np0005625201 sudo[466393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466393]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466408]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:43:45 np0005625201 sudo[466408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466408]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466423]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:45 np0005625201 sudo[466423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466423]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:45 np0005625201 sudo[466438]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:45 np0005625201 sudo[466438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:45 np0005625201 sudo[466438]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466453]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:46 np0005625201 sudo[466453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466453]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466468]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:46 np0005625201 sudo[466468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466468]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466483]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:46 np0005625201 sudo[466483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466483]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466511]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:46 np0005625201 sudo[466511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466511]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466526]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:46 np0005625201 sudo[466526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466526]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466541]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:43:46 np0005625201 sudo[466541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466541]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466556]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:43:46 np0005625201 sudo[466556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466556]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466571]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:43:46 np0005625201 sudo[466571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466571]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466586]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:46 np0005625201 sudo[466586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466586]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466601]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:46 np0005625201 sudo[466601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466601]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:46 np0005625201 sudo[466616]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:46 np0005625201 sudo[466616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:46 np0005625201 sudo[466616]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466644]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466644]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466644]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466659]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466659]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466674]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring Feb 20 09:43:47 np0005625201 sudo[466674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466674]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466689]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:47 np0005625201 sudo[466689]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466689]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sshd[465779]: Connection closed by authenticating user root 213.209.159.158 port 64342 [preauth] Feb 20 09:43:47 np0005625201 sudo[466704]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:47 np0005625201 sudo[466704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466704]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466719]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466719]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466735]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:47 np0005625201 sudo[466735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466735]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466750]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466750]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466778]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466778]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466793]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:43:47 np0005625201 sudo[466793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466793]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:47 np0005625201 sudo[466808]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 09:43:47 np0005625201 sudo[466808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:47 np0005625201 sudo[466808]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:48 np0005625201 sudo[466823]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:43:48 np0005625201 sudo[466823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:48 np0005625201 sudo[466823]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:48 np0005625201 sshd[466838]: Invalid user oracle from 190.60.48.194 port 34444 Feb 20 09:43:48 np0005625201 sshd[466838]: Received disconnect from 190.60.48.194 port 34444:11: Bye Bye [preauth] Feb 20 09:43:48 np0005625201 sshd[466838]: Disconnected from invalid user oracle 190.60.48.194 port 34444 [preauth] Feb 20 09:43:50 np0005625201 sudo[466841]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:50 np0005625201 sudo[466841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:50 np0005625201 sudo[466841]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:50 np0005625201 sudo[466856]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:50 np0005625201 sudo[466856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:51 np0005625201 sudo[466856]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:51 np0005625201 sudo[466925]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:51 np0005625201 sudo[466925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:51 np0005625201 sudo[466925]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:51 np0005625201 sudo[466940]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:51 np0005625201 sudo[466940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:52 np0005625201 sudo[466940]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:52 np0005625201 sshd[467004]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:43:52 np0005625201 sudo[467012]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:52 np0005625201 sudo[467012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:52 np0005625201 sudo[467012]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:52 np0005625201 sudo[467027]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:52 np0005625201 sudo[467027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:53 np0005625201 sudo[467027]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:54 np0005625201 sshd[465915]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:43:54 np0005625201 sshd[467096]: Accepted publickey for ceph-admin from 192.168.122.106 port 41622 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 09:43:54 np0005625201 sshd[467096]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 09:43:54 np0005625201 sudo[467100]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:54 np0005625201 sudo[467100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:54 np0005625201 sudo[467100]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:54 np0005625201 sudo[467115]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:43:54 np0005625201 sudo[467115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:56 np0005625201 sudo[467115]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:56 np0005625201 sudo[467273]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:56 np0005625201 sudo[467273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:56 np0005625201 sudo[467273]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:56 np0005625201 sudo[467288]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:43:56 np0005625201 sudo[467288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:57 np0005625201 sudo[467288]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:57 np0005625201 sudo[467335]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:43:57 np0005625201 sudo[467335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:57 np0005625201 sudo[467335]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:57 np0005625201 sudo[467350]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:43:57 np0005625201 sudo[467350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:57 np0005625201 sudo[467350]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467384]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:43:58 np0005625201 sudo[467384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467384]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467399]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:43:58 np0005625201 sudo[467399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467399]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467414]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:58 np0005625201 sudo[467414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467414]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467429]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:58 np0005625201 sudo[467429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467429]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467444]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:58 np0005625201 sudo[467444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467444]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467472]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:58 np0005625201 sudo[467472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467472]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467487]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:43:58 np0005625201 sudo[467487]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467487]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467502]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:43:58 np0005625201 sudo[467502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467502]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467517]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:58 np0005625201 sudo[467517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467517]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467532]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:43:58 np0005625201 sudo[467532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467532]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467547]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:58 np0005625201 sudo[467547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467547]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:58 np0005625201 sudo[467562]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:58 np0005625201 sudo[467562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:58 np0005625201 sudo[467562]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467577]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:59 np0005625201 sudo[467577]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467577]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467605]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:59 np0005625201 sudo[467605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467605]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467620]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:43:59 np0005625201 sudo[467620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467620]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467635]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:43:59 np0005625201 sudo[467635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467635]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467650]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:43:59 np0005625201 sudo[467650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467650]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467665]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:43:59 np0005625201 sudo[467665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467665]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467680]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:59 np0005625201 sudo[467680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467680]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467695]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:43:59 np0005625201 sudo[467695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467695]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467710]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:59 np0005625201 sudo[467710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467710]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467738]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:59 np0005625201 sudo[467738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467738]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sudo[467753]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:43:59 np0005625201 sudo[467753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467753]: pam_unix(sudo:session): session closed for user root Feb 20 09:43:59 np0005625201 sshd[466732]: Connection closed by authenticating user root 213.209.159.158 port 9254 [preauth] Feb 20 09:43:59 np0005625201 sudo[467768]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring Feb 20 09:43:59 np0005625201 sudo[467768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:43:59 np0005625201 sudo[467768]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467783]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:00 np0005625201 sudo[467783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467783]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467799]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:00 np0005625201 sudo[467799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467799]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467814]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:44:00 np0005625201 sudo[467814]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467814]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467829]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:00 np0005625201 sudo[467829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467829]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467844]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:44:00 np0005625201 sudo[467844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467844]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467872]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:44:00 np0005625201 sudo[467872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467872]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467887]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:44:00 np0005625201 sudo[467887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467887]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:00 np0005625201 sudo[467902]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 09:44:00 np0005625201 sudo[467902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:00 np0005625201 sudo[467902]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:01 np0005625201 sudo[467917]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:44:01 np0005625201 sudo[467917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:01 np0005625201 sudo[467917]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:12 np0005625201 sshd[468186]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:44:12 np0005625201 sshd[467798]: Connection closed by authenticating user root 213.209.159.158 port 24722 [preauth] Feb 20 09:44:22 np0005625201 sshd[468188]: Invalid user redis from 213.209.159.158 port 1582 Feb 20 09:44:22 np0005625201 sudo[468190]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:44:22 np0005625201 sudo[468190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:22 np0005625201 sudo[468190]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:22 np0005625201 sudo[468205]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:44:22 np0005625201 sudo[468205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:22 np0005625201 sudo[468205]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:22 np0005625201 sudo[468220]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:22 np0005625201 sudo[468220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:22 np0005625201 sudo[468220]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:22 np0005625201 sudo[468237]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:22 np0005625201 sudo[468237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:22 np0005625201 sudo[468237]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:22 np0005625201 sudo[468252]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:22 np0005625201 sudo[468252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:22 np0005625201 sudo[468252]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468280]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468280]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468295]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468295]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468310]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:44:23 np0005625201 sudo[468310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468310]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468325]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:23 np0005625201 sudo[468325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468325]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468340]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:23 np0005625201 sudo[468340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468340]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468355]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468355]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468370]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:23 np0005625201 sudo[468370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468370]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468385]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468385]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468413]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468413]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468428]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:23 np0005625201 sudo[468428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468428]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:23 np0005625201 sudo[468443]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:44:23 np0005625201 sudo[468443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:23 np0005625201 sudo[468443]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:24 np0005625201 sshd[468234]: Received disconnect from 61.220.235.10 port 37102:11: Bye Bye [preauth] Feb 20 09:44:24 np0005625201 sshd[468234]: Disconnected from authenticating user root 61.220.235.10 port 37102 [preauth] Feb 20 09:44:24 np0005625201 sshd[468188]: Connection closed by invalid user redis 213.209.159.158 port 1582 [preauth] Feb 20 09:44:27 np0005625201 sudo[468459]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:44:27 np0005625201 sudo[468459]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:27 np0005625201 sudo[468459]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:29 np0005625201 sudo[468475]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:44:29 np0005625201 sudo[468475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:29 np0005625201 sudo[468475]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:30 np0005625201 sudo[468490]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:44:30 np0005625201 sudo[468490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:30 np0005625201 sudo[468490]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:30 np0005625201 sudo[468505]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:30 np0005625201 sudo[468505]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:31 np0005625201 sudo[468505]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:31 np0005625201 sudo[468573]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:44:31 np0005625201 sudo[468573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:31 np0005625201 sudo[468573]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:31 np0005625201 sudo[468588]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:31 np0005625201 sudo[468588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:32 np0005625201 sudo[468588]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:32 np0005625201 sudo[468656]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:44:32 np0005625201 sudo[468656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:32 np0005625201 sudo[468656]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:32 np0005625201 sudo[468671]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:32 np0005625201 sudo[468671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:33 np0005625201 sudo[468671]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:35 np0005625201 sshd[468458]: Invalid user rollyvpn from 213.209.159.158 port 36564 Feb 20 09:44:37 np0005625201 sshd[468458]: Connection closed by invalid user rollyvpn 213.209.159.158 port 36564 [preauth] Feb 20 09:44:41 np0005625201 sudo[468936]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:44:41 np0005625201 sudo[468936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:41 np0005625201 sudo[468936]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:47 np0005625201 sshd[468931]: Invalid user null from 213.209.159.158 port 9656 Feb 20 09:44:48 np0005625201 sudo[468976]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:44:48 np0005625201 sudo[468976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[468976]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:48 np0005625201 sudo[468991]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:44:48 np0005625201 sudo[468991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[468991]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:48 np0005625201 sudo[469006]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:48 np0005625201 sudo[469006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[469006]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:48 np0005625201 sudo[469021]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:48 np0005625201 sudo[469021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[469021]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:48 np0005625201 sudo[469036]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:48 np0005625201 sudo[469036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[469036]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:48 np0005625201 sudo[469064]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:48 np0005625201 sudo[469064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:48 np0005625201 sudo[469064]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469079]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:44:49 np0005625201 sudo[469079]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469079]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469094]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:44:49 np0005625201 sudo[469094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469094]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469109]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:49 np0005625201 sudo[469109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469109]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469124]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:44:49 np0005625201 sudo[469124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469124]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469139]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:49 np0005625201 sudo[469139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469139]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469154]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:49 np0005625201 sudo[469154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469154]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469169]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:49 np0005625201 sudo[469169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469169]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469197]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:49 np0005625201 sudo[469197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469197]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469212]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:44:49 np0005625201 sudo[469212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469212]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469227]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:44:49 np0005625201 sudo[469227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469227]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:49 np0005625201 sudo[469242]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:44:49 np0005625201 sudo[469242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:49 np0005625201 sudo[469242]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:50 np0005625201 sshd[468931]: Connection closed by invalid user null 213.209.159.158 port 9656 [preauth] Feb 20 09:44:50 np0005625201 sudo[469258]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:44:50 np0005625201 sudo[469258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:50 np0005625201 sudo[469258]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:50 np0005625201 sudo[469273]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:50 np0005625201 sudo[469273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:51 np0005625201 sudo[469273]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:51 np0005625201 sudo[469341]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:44:51 np0005625201 sudo[469341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:51 np0005625201 sudo[469341]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:51 np0005625201 sudo[469356]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:44:51 np0005625201 sudo[469356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:44:52 np0005625201 sudo[469356]: pam_unix(sudo:session): session closed for user root Feb 20 09:44:58 np0005625201 sshd[469426]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:44:58 np0005625201 sshd[469428]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:45:02 np0005625201 sshd[469257]: Connection closed by authenticating user root 213.209.159.158 port 7126 [preauth] Feb 20 09:45:08 np0005625201 sudo[469496]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:08 np0005625201 sudo[469496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:08 np0005625201 sudo[469496]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:08 np0005625201 sudo[469553]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:45:08 np0005625201 sudo[469553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:08 np0005625201 sudo[469553]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:10 np0005625201 sudo[469710]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:45:10 np0005625201 sudo[469710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:10 np0005625201 sudo[469710]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:14 np0005625201 sshd[469430]: Connection closed by authenticating user root 213.209.159.158 port 7002 [preauth] Feb 20 09:45:16 np0005625201 sudo[469751]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:45:16 np0005625201 sudo[469751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:16 np0005625201 sudo[469751]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:16 np0005625201 sshd[467096]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:45:17 np0005625201 sshd[469766]: Accepted publickey for ceph-admin from 192.168.122.107 port 35194 ssh2: RSA SHA256:ReOVVWzTOjcz49zJan4sHrxgFDyL1hzGQqhA1t8e47Y Feb 20 09:45:17 np0005625201 sshd[469766]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0) Feb 20 09:45:17 np0005625201 sudo[469770]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:17 np0005625201 sudo[469770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:17 np0005625201 sudo[469770]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:17 np0005625201 sudo[469785]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:45:17 np0005625201 sudo[469785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:18 np0005625201 sudo[469785]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:18 np0005625201 sudo[469940]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:18 np0005625201 sudo[469940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:18 np0005625201 sudo[469940]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:18 np0005625201 sudo[469955]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --timeout 895 gather-facts Feb 20 09:45:18 np0005625201 sudo[469955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:19 np0005625201 sudo[469955]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:19 np0005625201 sudo[470001]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:19 np0005625201 sudo[470001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:19 np0005625201 sudo[470001]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:19 np0005625201 sudo[470016]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks Feb 20 09:45:19 np0005625201 sudo[470016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:20 np0005625201 sudo[470016]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:20 np0005625201 sudo[470051]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:45:20 np0005625201 sudo[470051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:20 np0005625201 sudo[470051]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:20 np0005625201 sudo[470066]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:45:20 np0005625201 sudo[470066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:20 np0005625201 sudo[470066]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:20 np0005625201 sudo[470081]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:20 np0005625201 sudo[470081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:20 np0005625201 sudo[470081]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470096]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:21 np0005625201 sudo[470096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470096]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470111]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470111]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470139]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470139]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470154]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470154]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470169]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:45:21 np0005625201 sudo[470169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470169]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470184]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:21 np0005625201 sudo[470184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470184]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470199]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:21 np0005625201 sudo[470199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470199]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470214]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470214]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470229]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:21 np0005625201 sudo[470229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470229]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470244]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470244]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:21 np0005625201 sudo[470272]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:21 np0005625201 sudo[470272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:21 np0005625201 sudo[470272]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470287]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:22 np0005625201 sudo[470287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470287]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470302]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:45:22 np0005625201 sudo[470302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470302]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470317]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:45:22 np0005625201 sudo[470317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470317]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470332]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:45:22 np0005625201 sudo[470332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470332]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470347]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:45:22 np0005625201 sudo[470347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470347]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470362]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:22 np0005625201 sudo[470362]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470362]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470377]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:45:22 np0005625201 sudo[470377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470377]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470405]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:45:22 np0005625201 sudo[470405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470405]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470420]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new Feb 20 09:45:22 np0005625201 sudo[470420]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470420]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470435]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring Feb 20 09:45:22 np0005625201 sudo[470435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470435]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470450]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:22 np0005625201 sudo[470450]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470450]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:22 np0005625201 sudo[470465]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:22 np0005625201 sudo[470465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:22 np0005625201 sudo[470465]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470480]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:45:23 np0005625201 sudo[470480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470480]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470495]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:23 np0005625201 sudo[470495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470495]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470510]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:45:23 np0005625201 sudo[470510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470510]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470538]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:45:23 np0005625201 sudo[470538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470538]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470553]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new Feb 20 09:45:23 np0005625201 sudo[470553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470553]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:23 np0005625201 sudo[470568]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 09:45:23 np0005625201 sudo[470568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:23 np0005625201 sudo[470568]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:24 np0005625201 sudo[470583]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:45:24 np0005625201 sudo[470583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:24 np0005625201 sudo[470583]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:27 np0005625201 sshd[469750]: Connection closed by authenticating user root 213.209.159.158 port 52232 [preauth] Feb 20 09:45:32 np0005625201 sudo[470606]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:45:32 np0005625201 sudo[470606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:32 np0005625201 sudo[470606]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:33 np0005625201 sudo[470621]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:33 np0005625201 sudo[470621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:33 np0005625201 sudo[470621]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:33 np0005625201 sudo[470636]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:33 np0005625201 sudo[470636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:33 np0005625201 sudo[470636]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:34 np0005625201 sshd[470706]: Accepted publickey for tripleo-admin from 192.168.122.11 port 49942 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 09:45:34 np0005625201 systemd[470710]: pam_unix(systemd-user:session): session opened for user tripleo-admin(uid=1003) by (uid=0) Feb 20 09:45:35 np0005625201 sshd[470706]: pam_unix(sshd:session): session opened for user tripleo-admin(uid=1003) by (uid=0) Feb 20 09:45:37 np0005625201 sudo[471068]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbfkilxjcwaxllelqxztigfswikoiysv ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580736.6934729-64304-169287299891065/AnsiballZ_copy.py Feb 20 09:45:37 np0005625201 sudo[471068]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:45:37 np0005625201 sudo[471068]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:37 np0005625201 sudo[471189]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jttawoghsvyknqqiozapdntttgafonzq ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580737.4518514-64304-15678613615087/AnsiballZ_copy.py Feb 20 09:45:37 np0005625201 sudo[471189]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:45:38 np0005625201 sudo[471189]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:40 np0005625201 sshd[470598]: Connection closed by authenticating user root 213.209.159.158 port 12048 [preauth] Feb 20 09:45:44 np0005625201 sshd[471427]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:45:45 np0005625201 sudo[471532]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vvopoltprpjrchiwbwjzlgefviegdmxo ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580745.0644686-64355-56570842303351/AnsiballZ_command.py Feb 20 09:45:45 np0005625201 sudo[471532]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:45:46 np0005625201 sudo[471573]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:46 np0005625201 sudo[471573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:46 np0005625201 sudo[471573]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:46 np0005625201 sudo[471594]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 rm-daemon --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 --name mon.np0005625201 --force Feb 20 09:45:46 np0005625201 sudo[471594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:48 np0005625201 sudo[471594]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:48 np0005625201 sudo[471532]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:50 np0005625201 sshd[471397]: Invalid user packer from 213.209.159.158 port 54242 Feb 20 09:45:51 np0005625201 sudo[471782]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph Feb 20 09:45:51 np0005625201 sudo[471782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:51 np0005625201 sudo[471782]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:51 np0005625201 sudo[471797]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph Feb 20 09:45:51 np0005625201 sudo[471797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:51 np0005625201 sudo[471797]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:51 np0005625201 sudo[471812]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:51 np0005625201 sudo[471812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:51 np0005625201 sudo[471812]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:51 np0005625201 sudo[471827]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:51 np0005625201 sudo[471827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:51 np0005625201 sudo[471827]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:51 np0005625201 sudo[471842]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:51 np0005625201 sudo[471842]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:51 np0005625201 sudo[471842]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:51 np0005625201 sudo[471870]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:51 np0005625201 sudo[471870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471870]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471885]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new Feb 20 09:45:52 np0005625201 sudo[471885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471885]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471900]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf Feb 20 09:45:52 np0005625201 sudo[471900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471900]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471915]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:52 np0005625201 sudo[471915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471915]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471930]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config Feb 20 09:45:52 np0005625201 sudo[471930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471930]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471945]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:52 np0005625201 sudo[471945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471945]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471960]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:52 np0005625201 sudo[471960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471960]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[471975]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:52 np0005625201 sudo[471975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[471975]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[472003]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:52 np0005625201 sudo[472003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[472003]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[472018]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new Feb 20 09:45:52 np0005625201 sudo[472018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[472018]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:52 np0005625201 sudo[472033]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-a8557ee9-b55d-5519-942c-cf8f6172f1d8/var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf.new /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:45:52 np0005625201 sudo[472033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:52 np0005625201 sudo[472033]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:53 np0005625201 sshd[471397]: Connection closed by invalid user packer 213.209.159.158 port 54242 [preauth] Feb 20 09:45:54 np0005625201 sudo[472049]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:54 np0005625201 sudo[472049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:54 np0005625201 sudo[472049]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:54 np0005625201 sudo[472064]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 Feb 20 09:45:54 np0005625201 sudo[472064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:57 np0005625201 sudo[472064]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:57 np0005625201 sudo[472403]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:45:57 np0005625201 sudo[472403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:57 np0005625201 sudo[472403]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:57 np0005625201 sudo[472418]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:45:57 np0005625201 sudo[472418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:57 np0005625201 sudo[472418]: pam_unix(sudo:session): session closed for user root Feb 20 09:45:57 np0005625201 sudo[472433]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:45:57 np0005625201 sudo[472433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:45:59 np0005625201 sudo[472433]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:00 np0005625201 sshd[472448]: Invalid user satellite from 103.179.57.150 port 33776 Feb 20 09:46:00 np0005625201 sshd[472448]: Received disconnect from 103.179.57.150 port 33776:11: Bye Bye [preauth] Feb 20 09:46:00 np0005625201 sshd[472448]: Disconnected from invalid user satellite 103.179.57.150 port 33776 [preauth] Feb 20 09:46:02 np0005625201 sudo[472592]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/rm -f /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.conf Feb 20 09:46:02 np0005625201 sudo[472592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:02 np0005625201 sudo[472592]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:02 np0005625201 sudo[472607]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/rm -f /etc/ceph/ceph.client.admin.keyring Feb 20 09:46:02 np0005625201 sudo[472607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:02 np0005625201 sudo[472607]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:02 np0005625201 sudo[472623]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/rm -f /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/config/ceph.client.admin.keyring Feb 20 09:46:02 np0005625201 sudo[472623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:02 np0005625201 sudo[472623]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:03 np0005625201 sshd[472620]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:46:04 np0005625201 sshd[472640]: error: kex_exchange_identification: read: Connection reset by peer Feb 20 09:46:04 np0005625201 sshd[472640]: Connection reset by 176.120.22.52 port 9916 Feb 20 09:46:05 np0005625201 sshd[472048]: Connection closed by authenticating user root 213.209.159.158 port 23630 [preauth] Feb 20 09:46:05 np0005625201 sudo[472642]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:46:05 np0005625201 sudo[472642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:05 np0005625201 sudo[472642]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:05 np0005625201 sudo[472657]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 rm-daemon --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 --name mgr.np0005625201.mtnyvu --force --tcp-ports 8765 Feb 20 09:46:05 np0005625201 sudo[472657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:07 np0005625201 sudo[472907]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ectzjinrrvljsuvldrvnyhyiskjiuewz ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580767.4045932-64403-258258736005186/AnsiballZ_command.py Feb 20 09:46:08 np0005625201 sudo[472907]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:46:08 np0005625201 sudo[472657]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:08 np0005625201 sudo[472947]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:46:08 np0005625201 sudo[472947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:08 np0005625201 sudo[472947]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:08 np0005625201 sudo[472983]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 rm-daemon --fsid a8557ee9-b55d-5519-942c-cf8f6172f1d8 --name mon.np0005625201 --force Feb 20 09:46:08 np0005625201 sudo[472983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:09 np0005625201 sudo[472907]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:09 np0005625201 sudo[472983]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:10 np0005625201 sudo[473406]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d Feb 20 09:46:10 np0005625201 sudo[473406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:10 np0005625201 sudo[473406]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:10 np0005625201 sudo[473433]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3 Feb 20 09:46:10 np0005625201 sudo[473433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:10 np0005625201 sudo[473433]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:10 np0005625201 sudo[473449]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/a8557ee9-b55d-5519-942c-cf8f6172f1d8/cephadm.d4329ff0b58389a1c874427e6fa8cdadc2545079117c7744dd9edf4a3e4fc83f --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls Feb 20 09:46:10 np0005625201 sudo[473449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002) Feb 20 09:46:11 np0005625201 sudo[473449]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:12 np0005625201 sshd[469769]: Received disconnect from 192.168.122.107 port 35194:11: Disconnected by application Feb 20 09:46:12 np0005625201 sshd[469769]: Disconnected from user ceph-admin 192.168.122.107 port 35194 Feb 20 09:46:12 np0005625201 sshd[469766]: pam_unix(sshd:session): session closed for user ceph-admin Feb 20 09:46:12 np0005625201 sudo[473673]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dqhnepglalgquhqyrbihmbmdfwhpzmsr ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580772.54484-64442-123443627818141/AnsiballZ_lineinfile.py Feb 20 09:46:12 np0005625201 sudo[473673]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:46:13 np0005625201 sudo[473673]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:14 np0005625201 sudo[473819]: tripleo-admin : TTY=pts/0 ; PWD=/home/tripleo-admin ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mydfiexahjonuubmtoocfmnadcreufqb ; /usr/bin/python3 /home/tripleo-admin/.ansible/tmp/ansible-tmp-1771580774.0424721-64455-164962691047034/AnsiballZ_command.py Feb 20 09:46:14 np0005625201 sudo[473819]: pam_unix(sudo:session): session opened for user root(uid=0) by tripleo-admin(uid=1003) Feb 20 09:46:14 np0005625201 sudo[473819]: pam_unix(sudo:session): session closed for user root Feb 20 09:46:18 np0005625201 sshd[472641]: Connection closed by authenticating user root 213.209.159.158 port 12010 [preauth] Feb 20 09:46:27 np0005625201 sshd[473861]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:46:30 np0005625201 sshd[473837]: Connection closed by authenticating user root 213.209.159.158 port 7904 [preauth] Feb 20 09:46:43 np0005625201 sshd[473863]: Connection closed by authenticating user root 213.209.159.158 port 54906 [preauth] Feb 20 09:46:56 np0005625201 sshd[474054]: Connection closed by authenticating user root 213.209.159.158 port 48540 [preauth] Feb 20 09:47:08 np0005625201 sshd[474081]: Connection closed by authenticating user root 213.209.159.158 port 40548 [preauth] Feb 20 09:47:10 np0005625201 sshd[474116]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:47:14 np0005625201 sshd[470725]: Received disconnect from 192.168.122.11 port 49942:11: disconnected by user Feb 20 09:47:14 np0005625201 sshd[470725]: Disconnected from user tripleo-admin 192.168.122.11 port 49942 Feb 20 09:47:14 np0005625201 sshd[470706]: pam_unix(sshd:session): session closed for user tripleo-admin Feb 20 09:47:21 np0005625201 sshd[474098]: Connection closed by authenticating user root 213.209.159.158 port 18980 [preauth] Feb 20 09:47:22 np0005625201 sshd[474336]: Invalid user satellite from 190.60.48.194 port 49222 Feb 20 09:47:22 np0005625201 sshd[474336]: Received disconnect from 190.60.48.194 port 49222:11: Bye Bye [preauth] Feb 20 09:47:22 np0005625201 sshd[474336]: Disconnected from invalid user satellite 190.60.48.194 port 49222 [preauth] Feb 20 09:47:30 np0005625201 sshd[474340]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:47:34 np0005625201 sshd[474335]: Connection closed by authenticating user root 213.209.159.158 port 46322 [preauth] Feb 20 09:47:46 np0005625201 sshd[474342]: Connection closed by authenticating user root 213.209.159.158 port 3636 [preauth] Feb 20 09:47:50 np0005625201 sshd[474568]: Received disconnect from 61.220.235.10 port 42972:11: Bye Bye [preauth] Feb 20 09:47:50 np0005625201 sshd[474568]: Disconnected from authenticating user root 61.220.235.10 port 42972 [preauth] Feb 20 09:47:54 np0005625201 sshd[474570]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:47:59 np0005625201 sshd[474555]: Connection closed by authenticating user root 213.209.159.158 port 24372 [preauth] Feb 20 09:48:09 np0005625201 sshd[474572]: Invalid user nvidia from 213.209.159.158 port 46438 Feb 20 09:48:11 np0005625201 sshd[474572]: Connection closed by invalid user nvidia 213.209.159.158 port 46438 [preauth] Feb 20 09:48:24 np0005625201 sshd[474607]: Connection closed by authenticating user root 213.209.159.158 port 23254 [preauth] Feb 20 09:48:37 np0005625201 sshd[474816]: Connection closed by authenticating user root 213.209.159.158 port 20450 [preauth] Feb 20 09:48:37 np0005625201 sshd[474818]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:48:49 np0005625201 sshd[474820]: Connection closed by authenticating user root 213.209.159.158 port 33028 [preauth] Feb 20 09:48:57 np0005625201 sshd[475040]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:49:02 np0005625201 sshd[475038]: Connection closed by authenticating user root 213.209.159.158 port 7140 [preauth] Feb 20 09:49:14 np0005625201 sshd[475042]: Connection closed by authenticating user root 213.209.159.158 port 17502 [preauth] Feb 20 09:49:22 np0005625201 sshd[475290]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:49:27 np0005625201 sshd[475155]: Connection closed by authenticating user root 213.209.159.158 port 39016 [preauth] Feb 20 09:49:39 np0005625201 sshd[475292]: Connection closed by authenticating user root 213.209.159.158 port 4586 [preauth] Feb 20 09:49:50 np0005625201 sshd[475294]: Invalid user ppp from 213.209.159.158 port 21558 Feb 20 09:49:52 np0005625201 sshd[475515]: error: kex_exchange_identification: Connection closed by remote host Feb 20 09:49:52 np0005625201 sshd[475515]: Connection closed by 103.53.231.159 port 39132 Feb 20 09:49:52 np0005625201 sshd[475294]: Connection closed by invalid user ppp 213.209.159.158 port 21558 [preauth] Feb 20 09:50:05 np0005625201 sshd[475516]: Connection closed by authenticating user root 213.209.159.158 port 23214 [preauth] Feb 20 09:50:07 np0005625201 sshd[475518]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:50:20 np0005625201 sshd[475520]: Connection closed by authenticating user root 213.209.159.158 port 30130 [preauth] Feb 20 09:50:25 np0005625201 sshd[475768]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:50:32 np0005625201 sshd[475741]: Connection closed by authenticating user root 213.209.159.158 port 4128 [preauth] Feb 20 09:50:44 np0005625201 sshd[475770]: Connection closed by authenticating user root 213.209.159.158 port 19032 [preauth] Feb 20 09:50:53 np0005625201 sshd[475992]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:50:57 np0005625201 sshd[475995]: Invalid user roberto from 190.60.48.194 port 41610 Feb 20 09:50:57 np0005625201 sshd[475995]: Received disconnect from 190.60.48.194 port 41610:11: Bye Bye [preauth] Feb 20 09:50:57 np0005625201 sshd[475995]: Disconnected from invalid user roberto 190.60.48.194 port 41610 [preauth] Feb 20 09:50:57 np0005625201 sshd[475772]: Connection closed by authenticating user root 213.209.159.158 port 55606 [preauth] Feb 20 09:51:10 np0005625201 sshd[475997]: Connection closed by authenticating user root 213.209.159.158 port 59598 [preauth] Feb 20 09:51:18 np0005625201 sshd[476036]: Invalid user campor from 61.220.235.10 port 48834 Feb 20 09:51:18 np0005625201 sshd[476036]: Received disconnect from 61.220.235.10 port 48834:11: Bye Bye [preauth] Feb 20 09:51:18 np0005625201 sshd[476036]: Disconnected from invalid user campor 61.220.235.10 port 48834 [preauth] Feb 20 09:51:19 np0005625201 sshd[476201]: Invalid user claude from 151.57.106.49 port 17968 Feb 20 09:51:19 np0005625201 sshd[476201]: Received disconnect from 151.57.106.49 port 17968:11: Bye Bye [preauth] Feb 20 09:51:19 np0005625201 sshd[476201]: Disconnected from invalid user claude 151.57.106.49 port 17968 [preauth] Feb 20 09:51:23 np0005625201 sshd[476034]: Connection closed by authenticating user root 213.209.159.158 port 10010 [preauth] Feb 20 09:51:26 np0005625201 sshd[476280]: Received disconnect from 103.179.57.150 port 46210:11: Bye Bye [preauth] Feb 20 09:51:26 np0005625201 sshd[476280]: Disconnected from authenticating user root 103.179.57.150 port 46210 [preauth] Feb 20 09:51:35 np0005625201 sshd[476279]: Connection closed by authenticating user root 213.209.159.158 port 7624 [preauth] Feb 20 09:51:37 np0005625201 sshd[476284]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:51:45 np0005625201 sshd[476283]: Invalid user photography from 213.209.159.158 port 56038 Feb 20 09:51:48 np0005625201 sshd[476283]: Connection closed by invalid user photography 213.209.159.158 port 56038 [preauth] Feb 20 09:51:50 np0005625201 sshd[476481]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:52:00 np0005625201 sshd[476290]: Connection closed by authenticating user root 213.209.159.158 port 56978 [preauth] Feb 20 09:52:10 np0005625201 sshd[476512]: Connection closed by authenticating user root 213.209.159.158 port 41242 [preauth] Feb 20 09:52:21 np0005625201 sshd[476549]: Invalid user odroid from 213.209.159.158 port 18522 Feb 20 09:52:22 np0005625201 sshd[476741]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:52:23 np0005625201 sshd[476549]: Connection closed by invalid user odroid 213.209.159.158 port 18522 [preauth] Feb 20 09:52:34 np0005625201 sshd[476743]: Invalid user postmaster from 213.209.159.158 port 40780 Feb 20 09:52:36 np0005625201 sshd[476743]: Connection closed by invalid user postmaster 213.209.159.158 port 40780 [preauth] Feb 20 09:52:47 np0005625201 sshd[476769]: Invalid user ossuser from 213.209.159.158 port 55786 Feb 20 09:52:49 np0005625201 sshd[476769]: Connection closed by invalid user ossuser 213.209.159.158 port 55786 [preauth] Feb 20 09:53:02 np0005625201 sshd[476771]: Connection closed by authenticating user root 213.209.159.158 port 63590 [preauth] Feb 20 09:53:05 np0005625201 sshd[476997]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:53:13 np0005625201 sshd[477035]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:53:15 np0005625201 sshd[476996]: Connection closed by authenticating user root 213.209.159.158 port 19002 [preauth] Feb 20 09:53:27 np0005625201 sshd[477037]: Connection closed by authenticating user root 213.209.159.158 port 11206 [preauth] Feb 20 09:53:40 np0005625201 sshd[477256]: Connection closed by authenticating user root 213.209.159.158 port 37572 [preauth] Feb 20 09:53:47 np0005625201 sshd[477260]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:53:53 np0005625201 sshd[477258]: Connection closed by authenticating user root 213.209.159.158 port 21150 [preauth] Feb 20 09:54:03 np0005625201 sshd[477379]: Invalid user opreker from 213.209.159.158 port 56234 Feb 20 09:54:05 np0005625201 sshd[477379]: Connection closed by invalid user opreker 213.209.159.158 port 56234 [preauth] Feb 20 09:54:18 np0005625201 sshd[477484]: Connection closed by authenticating user root 213.209.159.158 port 59228 [preauth] Feb 20 09:54:30 np0005625201 sshd[477736]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:54:31 np0005625201 sshd[477520]: Connection closed by authenticating user root 213.209.159.158 port 41702 [preauth] Feb 20 09:54:32 np0005625201 sshd[477739]: Invalid user claude from 190.60.48.194 port 53176 Feb 20 09:54:32 np0005625201 sshd[477739]: Received disconnect from 190.60.48.194 port 53176:11: Bye Bye [preauth] Feb 20 09:54:32 np0005625201 sshd[477739]: Disconnected from invalid user claude 190.60.48.194 port 53176 [preauth] Feb 20 09:54:34 np0005625201 sshd[477741]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:54:43 np0005625201 sshd[477738]: Connection closed by authenticating user root 213.209.159.158 port 33826 [preauth] Feb 20 09:54:44 np0005625201 sshd[477744]: Received disconnect from 61.220.235.10 port 54694:11: Bye Bye [preauth] Feb 20 09:54:44 np0005625201 sshd[477744]: Disconnected from authenticating user root 61.220.235.10 port 54694 [preauth] Feb 20 09:55:13 np0005625201 sshd[477997]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:55:52 np0005625201 sshd[478226]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:55:57 np0005625201 sshd[478232]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:56:40 np0005625201 sshd[478727]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:56:54 np0005625201 sshd[478729]: Received disconnect from 103.179.57.150 port 57422:11: Bye Bye [preauth] Feb 20 09:56:54 np0005625201 sshd[478729]: Disconnected from authenticating user root 103.179.57.150 port 57422 [preauth] Feb 20 09:57:10 np0005625201 sshd[478946]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:57:22 np0005625201 sshd[478981]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:58:04 np0005625201 sshd[479401]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:58:23 np0005625201 sshd[479463]: Invalid user n8n from 61.220.235.10 port 60566 Feb 20 09:58:23 np0005625201 sshd[479463]: Received disconnect from 61.220.235.10 port 60566:11: Bye Bye [preauth] Feb 20 09:58:23 np0005625201 sshd[479463]: Disconnected from invalid user n8n 61.220.235.10 port 60566 [preauth] Feb 20 09:58:24 np0005625201 sshd[479465]: Received disconnect from 190.60.48.194 port 44276:11: Bye Bye [preauth] Feb 20 09:58:24 np0005625201 sshd[479465]: Disconnected from authenticating user root 190.60.48.194 port 44276 [preauth] Feb 20 09:58:25 np0005625201 sshd[479467]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:58:46 np0005625201 sshd[479685]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:59:30 np0005625201 sshd[479944]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 09:59:32 np0005625201 sshd[479946]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:00:13 np0005625201 sshd[480421]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:01:01 np0005625201 sshd[480636]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:01:21 np0005625201 sshd[480901]: Invalid user deploytest from 185.153.231.45 port 34948 Feb 20 10:01:21 np0005625201 sshd[480901]: Received disconnect from 185.153.231.45 port 34948:11: Bye Bye [preauth] Feb 20 10:01:21 np0005625201 sshd[480901]: Disconnected from invalid user deploytest 185.153.231.45 port 34948 [preauth] Feb 20 10:01:28 np0005625201 sshd[480924]: Invalid user oracle from 151.57.106.49 port 17815 Feb 20 10:01:28 np0005625201 sshd[480924]: Received disconnect from 151.57.106.49 port 17815:11: Bye Bye [preauth] Feb 20 10:01:28 np0005625201 sshd[480924]: Disconnected from invalid user oracle 151.57.106.49 port 17815 [preauth] Feb 20 10:01:40 np0005625201 sshd[481123]: Invalid user work from 61.220.235.10 port 38212 Feb 20 10:01:41 np0005625201 sshd[481123]: Received disconnect from 61.220.235.10 port 38212:11: Bye Bye [preauth] Feb 20 10:01:41 np0005625201 sshd[481123]: Disconnected from invalid user work 61.220.235.10 port 38212 [preauth] Feb 20 10:01:50 np0005625201 sshd[481151]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:02:17 np0005625201 sshd[481397]: Invalid user roberto from 103.179.57.150 port 49462 Feb 20 10:02:18 np0005625201 sshd[481397]: Received disconnect from 103.179.57.150 port 49462:11: Bye Bye [preauth] Feb 20 10:02:18 np0005625201 sshd[481397]: Disconnected from invalid user roberto 103.179.57.150 port 49462 [preauth] Feb 20 10:02:33 np0005625201 sshd[481399]: error: kex_exchange_identification: read: Connection timed out Feb 20 10:02:33 np0005625201 sshd[481399]: banner exchange: Connection from 14.103.235.143 port 20378: Connection timed out Feb 20 10:02:36 np0005625201 sshd[481401]: Received disconnect from 190.60.48.194 port 50602:11: Bye Bye [preauth] Feb 20 10:02:36 np0005625201 sshd[481401]: Disconnected from authenticating user root 190.60.48.194 port 50602 [preauth] Feb 20 10:02:39 np0005625201 sshd[481403]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:03:26 np0005625201 sshd[481887]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:04:11 np0005625201 sshd[482129]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:04:48 np0005625201 sshd[482549]: Received disconnect from 151.57.106.49 port 17924:11: Bye Bye [preauth] Feb 20 10:04:48 np0005625201 sshd[482549]: Disconnected from authenticating user root 151.57.106.49 port 17924 [preauth] Feb 20 10:04:57 np0005625201 sshd[482578]: Invalid user claude from 61.220.235.10 port 44104 Feb 20 10:04:57 np0005625201 sshd[482578]: Received disconnect from 61.220.235.10 port 44104:11: Bye Bye [preauth] Feb 20 10:04:57 np0005625201 sshd[482578]: Disconnected from invalid user claude 61.220.235.10 port 44104 [preauth] Feb 20 10:04:57 np0005625201 sshd[482580]: fatal: mm_answer_sign: sign: error in libcrypto Feb 20 10:05:13 np0005625201 sshd[482616]: Accepted publickey for zuul from 38.102.83.114 port 38826 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 10:05:13 np0005625201 systemd[482619]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 10:05:13 np0005625201 sshd[482616]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 10:05:13 np0005625201 sudo[482652]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bktenvwdrvbspdklwxynhrgpfkrggbtv ; /usr/bin/python3 Feb 20 10:05:13 np0005625201 sudo[482652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Feb 20 10:05:14 np0005625201 sudo[482652]: pam_unix(sudo:session): session closed for user root Feb 20 10:05:18 np0005625201 sshd[482616]: pam_unix(sshd:session): session closed for user zuul Feb 20 10:05:21 np0005625201 sshd[482852]: Invalid user claude from 103.189.234.69 port 36864 Feb 20 10:05:21 np0005625201 sshd[482852]: Received disconnect from 103.189.234.69 port 36864:11: Bye Bye [preauth] Feb 20 10:05:21 np0005625201 sshd[482852]: Disconnected from invalid user claude 103.189.234.69 port 36864 [preauth] Feb 20 10:05:31 np0005625201 sshd[482885]: Accepted publickey for zuul from 38.102.83.114 port 48738 ssh2: RSA SHA256:uaxCfdsB9dLyL4znjsLCPDTT6O+6xZzjHRjczJFOA6k Feb 20 10:05:31 np0005625201 systemd[482888]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 10:05:31 np0005625201 sshd[482885]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Feb 20 10:05:31 np0005625201 sudo[482905]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxC . /var/log Feb 20 10:05:31 np0005625201 sudo[482905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)