Nov 28 01:43:18 localhost polkitd[1037]: Loading rules from directory /etc/polkit-1/rules.d Nov 28 01:43:18 localhost polkitd[1037]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 28 01:43:18 localhost polkitd[1037]: Finished loading, compiling and executing 4 rules Nov 28 01:43:18 localhost polkitd[1037]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 28 01:43:19 localhost useradd[1116]: new group: name=cloud-user, GID=1001 Nov 28 01:43:19 localhost useradd[1116]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Nov 28 01:43:19 localhost useradd[1116]: add 'cloud-user' to group 'adm' Nov 28 01:43:19 localhost useradd[1116]: add 'cloud-user' to group 'systemd-journal' Nov 28 01:43:19 localhost useradd[1116]: add 'cloud-user' to shadow group 'adm' Nov 28 01:43:19 localhost useradd[1116]: add 'cloud-user' to shadow group 'systemd-journal' Nov 28 01:43:20 localhost sshd[1130]: Server listening on 0.0.0.0 port 22. Nov 28 01:43:20 localhost sshd[1130]: Server listening on :: port 22. Nov 28 01:43:21 localhost sshd[1373]: Unable to negotiate with 38.102.83.114 port 44276: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Nov 28 01:43:21 localhost sshd[1397]: Unable to negotiate with 38.102.83.114 port 44292: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Nov 28 01:43:21 localhost sshd[1346]: Connection closed by 38.102.83.114 port 44270 [preauth] Nov 28 01:43:21 localhost sshd[1412]: Unable to negotiate with 38.102.83.114 port 44296: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Nov 28 01:43:21 localhost sshd[1384]: Connection closed by 38.102.83.114 port 44290 [preauth] Nov 28 01:43:21 localhost sshd[1450]: fatal: mm_answer_sign: sign: error in libcrypto Nov 28 01:43:21 localhost sshd[1457]: Unable to negotiate with 38.102.83.114 port 44336: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Nov 28 01:43:21 localhost sshd[1424]: Connection closed by 38.102.83.114 port 44308 [preauth] Nov 28 01:43:21 localhost sshd[1432]: Connection closed by 38.102.83.114 port 44316 [preauth] Nov 28 01:43:47 localhost sshd[4170]: Accepted publickey for zuul from 38.102.83.114 port 56152 ssh2: RSA SHA256:zhs3MiW0JhxzckYcMHQES8SMYHj1iGcomnyzmbiwor8 Nov 28 01:43:47 localhost systemd[4174]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 01:43:47 localhost sshd[4170]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 01:44:29 localhost sudo[4775]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hizvujfqtrmmzvupqavsmtuyzmxaokke ; /usr/bin/python3 Nov 28 01:44:29 localhost sudo[4775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:29 localhost sudo[4775]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:30 localhost sudo[4823]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-inleztzovqtyoklumryhqjwnhpjhvldi ; /usr/bin/python3 Nov 28 01:44:30 localhost sudo[4823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:30 localhost sudo[4823]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:30 localhost sudo[4866]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nreuixtabzokptkawbiilkziinvjbljt ; /usr/bin/python3 Nov 28 01:44:30 localhost sudo[4866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:31 localhost sudo[4866]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:47 localhost sudo[5261]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ewwpprblthfbxwjnffpuexwgytittook ; /usr/bin/python3 Nov 28 01:44:47 localhost sudo[5261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:47 localhost sudo[5261]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:49 localhost sudo[5282]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dvvicgipgwplqluwusfeupowoqeolrun ; /usr/bin/python3 Nov 28 01:44:49 localhost sudo[5282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:49 localhost sudo[5282]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:53 localhost sudo[5532]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kxkfrvcjjffnxybabnjkckammfkemhlu ; /usr/bin/python3 Nov 28 01:44:53 localhost sudo[5532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:53 localhost sudo[5532]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:53 localhost sudo[5575]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-skmknzuxjbgwqwwuitxbxqyjfbbfmczk ; /usr/bin/python3 Nov 28 01:44:53 localhost sudo[5575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:53 localhost sudo[5575]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:56 localhost sudo[5669]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ceynpbbbksmyzxtrxhvcfvshvqdnprey ; /usr/bin/python3 Nov 28 01:44:56 localhost sudo[5669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:56 localhost sudo[5669]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:56 localhost sudo[5712]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znulmpusquwzpunuuurstaljuexriknw ; /usr/bin/python3 Nov 28 01:44:56 localhost sudo[5712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:56 localhost sudo[5712]: pam_unix(sudo:session): session closed for user root Nov 28 01:44:58 localhost sudo[5743]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jkokhcbeuqsxyiohvdwrmdtqqwizzsbr ; /usr/bin/python3 Nov 28 01:44:58 localhost sudo[5743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:44:58 localhost sudo[5743]: pam_unix(sudo:session): session closed for user root Nov 28 01:45:39 localhost sudo[5798]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-epzizoptglgpwuxexynvgchlhxyoqves ; /usr/bin/python3 Nov 28 01:45:39 localhost sudo[5798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:45:39 localhost sudo[5798]: pam_unix(sudo:session): session closed for user root Nov 28 01:46:39 localhost sshd[4183]: Received disconnect from 38.102.83.114 port 56152:11: disconnected by user Nov 28 01:46:39 localhost sshd[4183]: Disconnected from user zuul 38.102.83.114 port 56152 Nov 28 01:46:39 localhost sshd[4170]: pam_unix(sshd:session): session closed for user zuul Nov 28 01:48:09 localhost sshd[5809]: Accepted publickey for zuul from 38.102.83.114 port 37384 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 01:48:09 localhost sshd[5809]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 01:48:23 localhost sudo[5874]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lihyatzdsmbtxfrgrqwlxgljzkwdfglx ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 28 01:48:23 localhost sudo[5874]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:48:23 localhost sudo[5874]: pam_unix(sudo:session): session closed for user root Nov 28 01:48:23 localhost sudo[5917]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nlnrrgynuxgxonovemhyvgqrnaepcmpe ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 28 01:48:23 localhost sudo[5917]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:48:23 localhost sudo[5917]: pam_unix(sudo:session): session closed for user root Nov 28 01:48:23 localhost sudo[5947]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rubmgclkoxorvgauaeohzdhbsypkjmmn ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 28 01:48:24 localhost sudo[5947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:48:24 localhost sudo[5947]: pam_unix(sudo:session): session closed for user root Nov 28 01:49:25 localhost sshd[5812]: Received disconnect from 38.102.83.114 port 37384:11: disconnected by user Nov 28 01:49:25 localhost sshd[5812]: Disconnected from user zuul 38.102.83.114 port 37384 Nov 28 01:49:25 localhost sshd[5809]: pam_unix(sshd:session): session closed for user zuul Nov 28 01:51:30 localhost sshd[6052]: Accepted publickey for zuul from 38.102.83.114 port 49534 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 01:51:30 localhost sshd[6052]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 01:51:30 localhost sudo[6101]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eqtviwkdykzwdtjqpcnpvcantmeaapoc ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 28 01:51:30 localhost sudo[6101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:51:30 localhost sudo[6101]: pam_unix(sudo:session): session closed for user root Nov 28 01:51:30 localhost sudo[6144]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rwzxjgeatgroxzxlppepcebkzyucmlvn ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 28 01:51:30 localhost sudo[6144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:51:30 localhost sudo[6144]: pam_unix(sudo:session): session closed for user root Nov 28 01:51:37 localhost sshd[6052]: pam_unix(sshd:session): session closed for user zuul Nov 28 01:56:23 localhost sshd[6163]: error: kex_exchange_identification: read: Connection reset by peer Nov 28 01:56:23 localhost sshd[6163]: Connection reset by 45.140.17.97 port 29340 Nov 28 01:58:54 localhost sshd[6166]: Accepted publickey for zuul from 38.102.83.114 port 52356 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 01:58:54 localhost sshd[6166]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 01:58:54 localhost sudo[6186]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aexkebkthywvvialfpwwlnxfmqtzhzwr ; /usr/bin/python3 Nov 28 01:58:54 localhost sudo[6186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:54 localhost sudo[6186]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:56 localhost sudo[6205]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dsbxnhraeoojukyqtbwtndtiputckhoz ; /usr/bin/python3 Nov 28 01:58:56 localhost sudo[6205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:56 localhost sudo[6205]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:56 localhost sudo[6221]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zmjqntwhjkoiaaapcxcxdmaepznmtekt ; /usr/bin/python3 Nov 28 01:58:56 localhost sudo[6221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:56 localhost sudo[6221]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:56 localhost sudo[6237]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nvwfzwnmlmbxuqryifxbwxhpctiqzjlo ; /usr/bin/python3 Nov 28 01:58:56 localhost sudo[6237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:56 localhost sudo[6237]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:56 localhost sudo[6253]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lnabqvfvrqotnfxhgsttrvknaniikikz ; /usr/bin/python3 Nov 28 01:58:56 localhost sudo[6253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:56 localhost sudo[6253]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:58 localhost sudo[6269]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ycxhwhxgktyyymwohrcwlsxqdryrmmbi ; /usr/bin/python3 Nov 28 01:58:58 localhost sudo[6269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:58 localhost sudo[6269]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:59 localhost sudo[6317]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pemfcpxaavprfasxdrfffjdmvslhbywe ; /usr/bin/python3 Nov 28 01:58:59 localhost sudo[6317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:59 localhost sudo[6317]: pam_unix(sudo:session): session closed for user root Nov 28 01:58:59 localhost sudo[6360]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tlscrccrixqeklriqcowujsmxlpuspii ; /usr/bin/python3 Nov 28 01:58:59 localhost sudo[6360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:58:59 localhost sudo[6360]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:01 localhost sudo[6390]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fmwztavciospzqerdybrfrsuzwutdkuu ; /usr/bin/python3 Nov 28 01:59:01 localhost sudo[6390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:01 localhost sudo[6390]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:02 localhost sudo[6437]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wkaiazxuzziactrpbqhpzuvbugrgkfvm ; /usr/bin/python3 Nov 28 01:59:02 localhost sudo[6437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:03 localhost sudo[6437]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:03 localhost sudo[6453]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vkuhsvlntmuorighetplmlhtkkgmlkxe ; /usr/bin/python3 Nov 28 01:59:03 localhost sudo[6453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:03 localhost sudo[6453]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:03 localhost sudo[6471]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hzhocnfkupwyjempszddhvaqxgfvwrnt ; /usr/bin/python3 Nov 28 01:59:03 localhost sudo[6471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:04 localhost sudo[6471]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:04 localhost sudo[6489]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvhsrxtjkozxwmndlrnjradjnplymyel ; /usr/bin/python3 Nov 28 01:59:04 localhost sudo[6489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:04 localhost sudo[6489]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:04 localhost sudo[6507]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nknfyxuaetswbnzfbwudtdtpdfwcspuu ; /usr/bin/python3 Nov 28 01:59:04 localhost sudo[6507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 01:59:04 localhost sudo[6507]: pam_unix(sudo:session): session closed for user root Nov 28 01:59:10 localhost sshd[6166]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:00:21 localhost sshd[6553]: Accepted publickey for zuul from 38.102.83.114 port 59118 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:00:21 localhost sshd[6553]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:00:21 localhost sudo[6570]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qkxchomcqvjnszkrleznhwkxxygzlmzx ; /usr/bin/python3 Nov 28 02:00:21 localhost sudo[6570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:00:46 localhost sudo[6570]: pam_unix(sudo:session): session closed for user root Nov 28 02:00:58 localhost sudo[6685]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eucuwcvpsclumnewvnlyzvokbbaqpmid ; /usr/bin/python3 Nov 28 02:00:58 localhost sudo[6685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:01:51 localhost sudo[6685]: pam_unix(sudo:session): session closed for user root Nov 28 02:02:43 localhost sudo[18368]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iyamrtxjebgumkhmzcavhdqsdwngofid ; /usr/bin/python3 Nov 28 02:02:43 localhost sudo[18368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:02:44 localhost sudo[18368]: pam_unix(sudo:session): session closed for user root Nov 28 02:02:47 localhost sshd[6553]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:03:02 localhost sshd[18432]: Connection closed by 38.102.83.18 port 52690 [preauth] Nov 28 02:03:02 localhost sshd[18433]: Connection closed by 38.102.83.18 port 52706 [preauth] Nov 28 02:03:02 localhost sshd[18434]: Unable to negotiate with 38.102.83.18 port 52722: no matching host key type found. Their offer: ssh-ed25519 [preauth] Nov 28 02:03:02 localhost sshd[18436]: Unable to negotiate with 38.102.83.18 port 52726: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Nov 28 02:03:02 localhost sshd[18435]: Unable to negotiate with 38.102.83.18 port 52742: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Nov 28 02:03:08 localhost sshd[18442]: Accepted publickey for zuul from 38.102.83.114 port 38234 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:03:08 localhost sshd[18442]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:03:09 localhost sudo[18473]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mliaxdchznwqehwtfeszfazxouyszhgx ; /usr/bin/python3 Nov 28 02:03:09 localhost sudo[18473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:03:09 localhost sudo[18473]: pam_unix(sudo:session): session closed for user root Nov 28 02:03:11 localhost sshd[18442]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:04:39 localhost sshd[18477]: Accepted publickey for zuul from 38.102.83.114 port 57240 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:04:39 localhost sshd[18477]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:04:39 localhost sudo[18494]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dtyalxorehtfzbtpkqumwcskylioeain ; /usr/bin/python3 Nov 28 02:04:39 localhost sudo[18494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:39 localhost sudo[18494]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:40 localhost sudo[18510]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jqmgburchpecmiuyeaxygvelvmrbabfx ; /usr/bin/python3 Nov 28 02:04:40 localhost sudo[18510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:41 localhost sudo[18510]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:42 localhost sudo[18560]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vedzexmwcqtlexdmkzotzqubtlfmnwyn ; /usr/bin/python3 Nov 28 02:04:42 localhost sudo[18560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:42 localhost sudo[18560]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:42 localhost sudo[18603]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xhsujajxhaszifwugntpdjlbxclpdypq ; /usr/bin/python3 Nov 28 02:04:42 localhost sudo[18603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:43 localhost sudo[18603]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:44 localhost sshd[18633]: error: kex_exchange_identification: Connection closed by remote host Nov 28 02:04:44 localhost sshd[18633]: Connection closed by 195.177.94.144 port 48764 Nov 28 02:04:44 localhost sudo[18666]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tekqgyqzpmsaudjubbfnpizfrxqywugy ; /usr/bin/python3 Nov 28 02:04:44 localhost sudo[18666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:44 localhost sudo[18666]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:44 localhost sudo[18711]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ddgiwgwckcdgnflocynxzdjuuudogfdq ; /usr/bin/python3 Nov 28 02:04:44 localhost sudo[18711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:44 localhost sudo[18711]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:44 localhost sshd[18669]: Connection closed by authenticating user root 195.177.94.144 port 48766 [preauth] Nov 28 02:04:47 localhost sudo[18741]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uqncrqhrbyxqkisupnfoyneiylhkdion ; /usr/bin/python3 Nov 28 02:04:47 localhost sudo[18741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:04:47 localhost sudo[18741]: pam_unix(sudo:session): session closed for user root Nov 28 02:04:48 localhost sshd[18820]: Invalid user from 134.199.195.148 port 39154 Nov 28 02:04:52 localhost sshd[18477]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:04:56 localhost sshd[18820]: Connection closed by invalid user 134.199.195.148 port 39154 [preauth] Nov 28 02:07:07 localhost sshd[18976]: Accepted publickey for zuul from 38.102.83.18 port 56088 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:07:07 localhost sshd[18976]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:10:16 localhost sshd[19025]: error: kex_exchange_identification: Connection closed by remote host Nov 28 02:10:16 localhost sshd[19025]: Connection closed by 45.148.10.240 port 60296 Nov 28 02:10:38 localhost sshd[19027]: error: kex_exchange_identification: Connection closed by remote host Nov 28 02:10:38 localhost sshd[19027]: Connection closed by 80.94.92.186 port 52910 Nov 28 02:12:07 localhost sshd[18979]: Received disconnect from 38.102.83.18 port 56088:11: disconnected by user Nov 28 02:12:07 localhost sshd[18979]: Disconnected from user zuul 38.102.83.18 port 56088 Nov 28 02:12:07 localhost sshd[18976]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:12:13 localhost sshd[19028]: Invalid user sol from 45.148.10.240 port 46674 Nov 28 02:12:13 localhost sshd[19028]: Connection closed by invalid user sol 45.148.10.240 port 46674 [preauth] Nov 28 02:14:09 localhost sshd[19030]: Invalid user solana from 45.148.10.240 port 35690 Nov 28 02:14:09 localhost sshd[19030]: Connection closed by invalid user solana 45.148.10.240 port 35690 [preauth] Nov 28 02:16:12 localhost sshd[19033]: Invalid user sol from 45.148.10.240 port 55304 Nov 28 02:16:12 localhost sshd[19033]: Connection closed by invalid user sol 45.148.10.240 port 55304 [preauth] Nov 28 02:17:50 localhost sshd[19035]: Invalid user sol from 80.94.92.186 port 56812 Nov 28 02:17:50 localhost sshd[19035]: Connection closed by invalid user sol 80.94.92.186 port 56812 [preauth] Nov 28 02:18:08 localhost sshd[19037]: Invalid user ubuntu from 45.148.10.240 port 35220 Nov 28 02:18:08 localhost sshd[19037]: Connection closed by invalid user ubuntu 45.148.10.240 port 35220 [preauth] Nov 28 02:19:21 localhost sshd[19040]: Accepted publickey for zuul from 38.102.83.114 port 59674 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:19:21 localhost sshd[19040]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:19:22 localhost sudo[19075]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnymzyjuixmdaiotkbvqpjijnlnoicqg ; /usr/bin/python3 Nov 28 02:19:22 localhost sudo[19075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:19:25 localhost sudo[19075]: pam_unix(sudo:session): session closed for user root Nov 28 02:19:27 localhost sudo[19094]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tmvuqjdscxtsdmfkofougrwyocoflqzb ; /usr/bin/python3 Nov 28 02:19:27 localhost sudo[19094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:19:55 localhost sudo[19094]: pam_unix(sudo:session): session closed for user root Nov 28 02:20:00 localhost sshd[19239]: Invalid user ubuntu from 45.148.10.240 port 50606 Nov 28 02:20:00 localhost sshd[19239]: Connection closed by invalid user ubuntu 45.148.10.240 port 50606 [preauth] Nov 28 02:20:29 localhost sudo[19255]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-smfzgakbqmnacwdvjwovljcitwyisnep ; /usr/bin/python3 Nov 28 02:20:29 localhost sudo[19255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:20:34 localhost sudo[19255]: pam_unix(sudo:session): session closed for user root Nov 28 02:20:41 localhost sudo[19455]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ojktmmkxraoqmbqhsoiwsnkqsplfhlqw ; /usr/bin/python3 Nov 28 02:20:41 localhost sudo[19455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:20:56 localhost sudo[19455]: pam_unix(sudo:session): session closed for user root Nov 28 02:21:12 localhost sudo[19790]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xlozkohkmxdvstpqilcmiuxmajugwhch ; /usr/bin/python3 Nov 28 02:21:12 localhost sudo[19790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:21:27 localhost sudo[19790]: pam_unix(sudo:session): session closed for user root Nov 28 02:21:43 localhost sudo[20187]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yxhwmakdhtbdesejzprstpdzsebsdgkz ; /usr/bin/python3 Nov 28 02:21:43 localhost sudo[20187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:21:58 localhost sshd[20512]: Invalid user sol from 45.148.10.240 port 46214 Nov 28 02:21:58 localhost sshd[20512]: Connection closed by invalid user sol 45.148.10.240 port 46214 [preauth] Nov 28 02:21:58 localhost sshd[20510]: Invalid user solana from 80.94.92.186 port 59982 Nov 28 02:21:59 localhost sshd[20510]: Connection closed by invalid user solana 80.94.92.186 port 59982 [preauth] Nov 28 02:22:00 localhost sudo[20187]: pam_unix(sudo:session): session closed for user root Nov 28 02:22:19 localhost sudo[20530]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oployxpoyxyedfimlhbbdjewtilvwjxb ; /usr/bin/python3 Nov 28 02:22:19 localhost sudo[20530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:22:21 localhost sudo[20530]: pam_unix(sudo:session): session closed for user root Nov 28 02:22:24 localhost sudo[20549]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmbhdasxbxoslytpxlirkzkfalzzgkuz ; /usr/bin/python3 Nov 28 02:22:24 localhost sudo[20549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:22:35 localhost groupadd[20637]: group added to /etc/group: name=unbound, GID=987 Nov 28 02:22:35 localhost groupadd[20637]: group added to /etc/gshadow: name=unbound Nov 28 02:22:35 localhost groupadd[20637]: new group: name=unbound, GID=987 Nov 28 02:22:35 localhost useradd[20644]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none Nov 28 02:22:44 localhost groupadd[20671]: group added to /etc/group: name=openvswitch, GID=986 Nov 28 02:22:44 localhost groupadd[20671]: group added to /etc/gshadow: name=openvswitch Nov 28 02:22:44 localhost groupadd[20671]: new group: name=openvswitch, GID=986 Nov 28 02:22:44 localhost useradd[20678]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none Nov 28 02:22:44 localhost groupadd[20686]: group added to /etc/group: name=hugetlbfs, GID=985 Nov 28 02:22:44 localhost groupadd[20686]: group added to /etc/gshadow: name=hugetlbfs Nov 28 02:22:44 localhost groupadd[20686]: new group: name=hugetlbfs, GID=985 Nov 28 02:22:44 localhost usermod[20694]: add 'openvswitch' to group 'hugetlbfs' Nov 28 02:22:44 localhost usermod[20694]: add 'openvswitch' to shadow group 'hugetlbfs' Nov 28 02:22:49 localhost sudo[20549]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:15 localhost sudo[21758]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tccruaikilghuavcbsgsjdswcrakgmed ; /usr/bin/python3 Nov 28 02:23:15 localhost sudo[21758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:30 localhost sudo[21758]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:43 localhost sudo[21778]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-owzkgewzfcskjjzmhzvbhifkdixiwxmy ; /usr/bin/python3 Nov 28 02:23:43 localhost sudo[21778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:43 localhost sudo[21778]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:44 localhost sudo[21826]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-otpfmvglrbvyfwgrevxhigigvgshxcby ; /usr/bin/python3 Nov 28 02:23:44 localhost sudo[21826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:44 localhost sudo[21826]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:44 localhost sudo[21869]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ajipshhhxvoscdcblyaxzujrbctolpax ; /usr/bin/python3 Nov 28 02:23:44 localhost sudo[21869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:44 localhost sudo[21869]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:45 localhost sudo[21899]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zzbyltwwbpslwsxnldmugckogliqewkz ; /usr/bin/python3 Nov 28 02:23:45 localhost sudo[21899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:46 localhost sudo[21899]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:46 localhost sudo[21920]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pnmxvonalvrodoioksqibseepqrquxuh ; /usr/bin/python3 Nov 28 02:23:46 localhost sudo[21920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:46 localhost sudo[21920]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:46 localhost sudo[21940]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gephbmygqelfpamwhnzurxkdwwbjmyds ; /usr/bin/python3 Nov 28 02:23:46 localhost sudo[21940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:46 localhost sudo[21940]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:46 localhost sudo[21960]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cmaqluofpyqwbbswyamwinmulrmvtdgm ; /usr/bin/python3 Nov 28 02:23:46 localhost sudo[21960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:47 localhost sudo[21960]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:47 localhost sudo[21980]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zakacfbsgbqirjppxjeqqlwgbmmwffes ; /usr/bin/python3 Nov 28 02:23:47 localhost sudo[21980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:47 localhost sudo[21980]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:49 localhost sudo[22000]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-njjrevyugjqodxhmqlfeyyrcqdquljac ; /usr/bin/python3 Nov 28 02:23:49 localhost sudo[22000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:50 localhost sudo[22000]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:50 localhost sudo[22173]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vimssssfcqidkyvqghxehnkdnaydmidp ; /usr/bin/python3 Nov 28 02:23:50 localhost sudo[22173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:23:51 localhost sudo[22173]: pam_unix(sudo:session): session closed for user root Nov 28 02:23:53 localhost sshd[22324]: Invalid user solana from 45.148.10.240 port 60126 Nov 28 02:23:53 localhost sshd[22324]: Connection closed by invalid user solana 45.148.10.240 port 60126 [preauth] Nov 28 02:23:54 localhost sudo[22340]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ezhtrebflobnmqqtlnjugghezvdebpdy ; /usr/bin/python3 Nov 28 02:23:54 localhost sudo[22340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:24:24 localhost sudo[22340]: pam_unix(sudo:session): session closed for user root Nov 28 02:25:23 localhost sudo[23627]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-svqctabbxikvgopdgsuoztdzzgeisdfq ; /usr/bin/python3 Nov 28 02:25:23 localhost sudo[23627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:25:23 localhost sudo[23627]: pam_unix(sudo:session): session closed for user root Nov 28 02:25:25 localhost sudo[23657]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-suvksuvugwiticlwamticgziavenxecr ; /usr/bin/python3 Nov 28 02:25:25 localhost sudo[23657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:25:25 localhost sudo[23657]: pam_unix(sudo:session): session closed for user root Nov 28 02:25:27 localhost sudo[23706]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovwrbytffksutsgtrrnjhfdbnfaiukio ; /usr/bin/python3 Nov 28 02:25:27 localhost sudo[23706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:25:27 localhost sudo[23706]: pam_unix(sudo:session): session closed for user root Nov 28 02:25:29 localhost sshd[19040]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:25:31 localhost sshd[23723]: Accepted publickey for zuul from 38.102.83.114 port 37970 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:25:31 localhost sshd[23723]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:25:34 localhost sshd[23723]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:25:44 localhost sshd[23741]: Invalid user solana from 45.148.10.240 port 55690 Nov 28 02:25:45 localhost sshd[23741]: Connection closed by invalid user solana 45.148.10.240 port 55690 [preauth] Nov 28 02:25:48 localhost sshd[23743]: Invalid user node from 80.94.92.186 port 34902 Nov 28 02:25:48 localhost sshd[23743]: Connection closed by invalid user node 80.94.92.186 port 34902 [preauth] Nov 28 02:26:00 localhost sshd[23748]: Accepted publickey for zuul from 38.102.83.114 port 49676 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:26:00 localhost sshd[23748]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:26:01 localhost sudo[23765]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ovbegdtlqfndpuiqeuutygujevzyfycj ; /usr/bin/python3 Nov 28 02:26:01 localhost sudo[23765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:26:08 localhost groupadd[23830]: group added to /etc/group: name=printadmin, GID=984 Nov 28 02:26:08 localhost groupadd[23830]: group added to /etc/gshadow: name=printadmin Nov 28 02:26:08 localhost groupadd[23830]: new group: name=printadmin, GID=984 Nov 28 02:26:19 localhost sshd[1130]: Received signal 15; terminating. Nov 28 02:26:19 localhost sshd[23903]: Server listening on 0.0.0.0 port 22. Nov 28 02:26:19 localhost sshd[23903]: Server listening on :: port 22. Nov 28 02:26:21 localhost sudo[23765]: pam_unix(sudo:session): session closed for user root Nov 28 02:27:22 localhost sshd[23751]: Received disconnect from 38.102.83.114 port 49676:11: disconnected by user Nov 28 02:27:22 localhost sshd[23751]: Disconnected from user zuul 38.102.83.114 port 49676 Nov 28 02:27:22 localhost sshd[23748]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:27:48 localhost sshd[25877]: Invalid user sol from 45.148.10.240 port 51288 Nov 28 02:27:48 localhost sshd[25877]: Connection closed by invalid user sol 45.148.10.240 port 51288 [preauth] Nov 28 02:28:09 localhost sshd[25879]: Accepted publickey for zuul from 38.102.83.114 port 40732 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:28:09 localhost sshd[25879]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:28:09 localhost sudo[25928]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xaaadlxiagiegsnzlljdkadqpkdxosjz ; /usr/bin/python3 Nov 28 02:28:09 localhost sudo[25928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:28:09 localhost sudo[25928]: pam_unix(sudo:session): session closed for user root Nov 28 02:28:09 localhost sudo[25973]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qkqvvshrdfyswquybosbqhctwcvppggm ; /usr/bin/python3 Nov 28 02:28:09 localhost sudo[25973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:28:09 localhost sudo[25973]: pam_unix(sudo:session): session closed for user root Nov 28 02:28:14 localhost sudo[26003]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gxigjhascuklhqzybndvpizzuinnvscl ; /usr/bin/python3 Nov 28 02:28:14 localhost sudo[26003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:28:14 localhost sudo[26003]: pam_unix(sudo:session): session closed for user root Nov 28 02:28:15 localhost sudo[26021]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-crgydbbxnlmmwoavngitrsliywythjlk ; /usr/bin/python3 Nov 28 02:28:15 localhost sudo[26021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:28:16 localhost sudo[26021]: pam_unix(sudo:session): session closed for user root Nov 28 02:29:16 localhost sshd[25882]: Received disconnect from 38.102.83.114 port 40732:11: disconnected by user Nov 28 02:29:16 localhost sshd[25882]: Disconnected from user zuul 38.102.83.114 port 40732 Nov 28 02:29:16 localhost sshd[25879]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:29:47 localhost sshd[26025]: Invalid user ubuntu from 80.94.92.186 port 38040 Nov 28 02:29:48 localhost sshd[26025]: Connection closed by invalid user ubuntu 80.94.92.186 port 38040 [preauth] Nov 28 02:29:54 localhost sshd[26027]: Invalid user sol from 45.148.10.240 port 46870 Nov 28 02:29:54 localhost sshd[26027]: Connection closed by invalid user sol 45.148.10.240 port 46870 [preauth] Nov 28 02:31:54 localhost sshd[26029]: Invalid user solana from 45.148.10.240 port 60188 Nov 28 02:31:55 localhost sshd[26029]: Connection closed by invalid user solana 45.148.10.240 port 60188 [preauth] Nov 28 02:33:35 localhost sshd[26032]: Invalid user minima from 80.94.92.186 port 41200 Nov 28 02:33:35 localhost sshd[26032]: Connection closed by invalid user minima 80.94.92.186 port 41200 [preauth] Nov 28 02:34:01 localhost sshd[26034]: Invalid user solana from 45.148.10.240 port 49044 Nov 28 02:34:01 localhost sshd[26034]: Connection closed by invalid user solana 45.148.10.240 port 49044 [preauth] Nov 28 02:36:03 localhost sshd[26037]: Invalid user solana from 45.148.10.240 port 54896 Nov 28 02:36:03 localhost sshd[26037]: Connection closed by invalid user solana 45.148.10.240 port 54896 [preauth] Nov 28 02:37:26 localhost sshd[26040]: Invalid user validator from 80.94.92.186 port 44356 Nov 28 02:37:27 localhost sshd[26040]: Connection closed by invalid user validator 80.94.92.186 port 44356 [preauth] Nov 28 02:37:59 localhost sshd[26043]: Invalid user sol from 45.148.10.240 port 42514 Nov 28 02:38:00 localhost sshd[26043]: Connection closed by invalid user sol 45.148.10.240 port 42514 [preauth] Nov 28 02:38:22 localhost sshd[26045]: error: kex_exchange_identification: banner line contains invalid characters Nov 28 02:38:22 localhost sshd[26045]: banner exchange: Connection from 152.32.131.245 port 59960: invalid format Nov 28 02:38:41 localhost sshd[26046]: error: kex_exchange_identification: Connection closed by remote host Nov 28 02:38:41 localhost sshd[26046]: Connection closed by 152.32.131.245 port 59968 Nov 28 02:38:41 localhost sshd[26047]: fatal: mm_answer_sign: sign: error in libcrypto Nov 28 02:38:42 localhost sshd[26049]: error: Protocol major versions differ: 2 vs. 1 Nov 28 02:38:42 localhost sshd[26049]: banner exchange: Connection from 152.32.131.245 port 46512: could not read protocol version Nov 28 02:40:03 localhost sshd[26050]: Invalid user sol from 45.148.10.240 port 36042 Nov 28 02:40:03 localhost sshd[26050]: Connection closed by invalid user sol 45.148.10.240 port 36042 [preauth] Nov 28 02:41:24 localhost sshd[26052]: Invalid user eth from 80.94.92.186 port 47540 Nov 28 02:41:24 localhost sshd[26052]: Connection closed by invalid user eth 80.94.92.186 port 47540 [preauth] Nov 28 02:42:12 localhost sshd[26056]: Invalid user sol from 45.148.10.240 port 50548 Nov 28 02:42:12 localhost sshd[26056]: Connection closed by invalid user sol 45.148.10.240 port 50548 [preauth] Nov 28 02:44:14 localhost sshd[26059]: Invalid user sol from 45.148.10.240 port 53554 Nov 28 02:44:14 localhost sshd[26059]: Connection closed by invalid user sol 45.148.10.240 port 53554 [preauth] Nov 28 02:45:14 localhost sshd[26061]: Invalid user ethereum from 80.94.92.186 port 50672 Nov 28 02:45:15 localhost sshd[26061]: Connection closed by invalid user ethereum 80.94.92.186 port 50672 [preauth] Nov 28 02:45:23 localhost sshd[26064]: Accepted publickey for zuul from 38.102.83.114 port 47424 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:45:23 localhost sshd[26064]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:45:23 localhost sudo[26081]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kuopeztkmeqnakgysiekzquvagkfzlze ; /usr/bin/python3 Nov 28 02:45:23 localhost sudo[26081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 28 02:45:43 localhost sudo[26081]: pam_unix(sudo:session): session closed for user root Nov 28 02:45:54 localhost sshd[26088]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Nov 28 02:45:54 localhost sshd[26088]: banner exchange: Connection from 65.49.20.66 port 10032: invalid format Nov 28 02:46:05 localhost sshd[26064]: pam_unix(sshd:session): session closed for user zuul Nov 28 02:46:15 localhost sshd[26090]: Accepted publickey for zuul from 38.102.83.114 port 58804 ssh2: RSA SHA256:Ap3ErWHv/NrKgrJ7rLXdO7lHW3lqhGj+TKnQeEoFU3M Nov 28 02:46:15 localhost sshd[26090]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 28 02:46:15 localhost sudo[26094]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxC . /var/log Nov 28 02:46:15 localhost sudo[26094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)