Dec  2 08:38:00 localhost polkitd[1039]: Loading rules from directory /etc/polkit-1/rules.d
Dec  2 08:38:00 localhost polkitd[1039]: Loading rules from directory /usr/share/polkit-1/rules.d
Dec  2 08:38:00 localhost polkitd[1039]: Finished loading, compiling and executing 4 rules
Dec  2 08:38:00 localhost polkitd[1039]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Dec  2 08:38:01 localhost useradd[1115]: new group: name=cloud-user, GID=1001
Dec  2 08:38:01 localhost useradd[1115]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none
Dec  2 08:38:01 localhost useradd[1115]: add 'cloud-user' to group 'adm'
Dec  2 08:38:01 localhost useradd[1115]: add 'cloud-user' to group 'systemd-journal'
Dec  2 08:38:01 localhost useradd[1115]: add 'cloud-user' to shadow group 'adm'
Dec  2 08:38:01 localhost useradd[1115]: add 'cloud-user' to shadow group 'systemd-journal'
Dec  2 08:38:02 localhost sshd[1129]: Server listening on 0.0.0.0 port 22.
Dec  2 08:38:02 localhost sshd[1129]: Server listening on :: port 22.
Dec  2 08:38:02 localhost sshd[1172]: Unable to negotiate with 38.102.83.114 port 34642: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth]
Dec  2 08:38:02 localhost sshd[1192]: Unable to negotiate with 38.102.83.114 port 34654: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth]
Dec  2 08:38:02 localhost sshd[1203]: Unable to negotiate with 38.102.83.114 port 34662: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth]
Dec  2 08:38:02 localhost sshd[1158]: Connection closed by 38.102.83.114 port 34634 [preauth]
Dec  2 08:38:02 localhost sshd[1185]: Connection closed by 38.102.83.114 port 34646 [preauth]
Dec  2 08:38:02 localhost sshd[1256]: fatal: mm_answer_sign: sign: error in libcrypto
Dec  2 08:38:03 localhost sshd[1270]: Unable to negotiate with 38.102.83.114 port 34678: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth]
Dec  2 08:38:03 localhost sshd[1218]: Connection closed by 38.102.83.114 port 34664 [preauth]
Dec  2 08:38:03 localhost sshd[1235]: Connection closed by 38.102.83.114 port 34672 [preauth]
Dec  2 08:38:28 localhost sshd[4170]: Accepted publickey for zuul from 38.102.83.114 port 55484 ssh2: RSA SHA256:zhs3MiW0JhxzckYcMHQES8SMYHj1iGcomnyzmbiwor8
Dec  2 08:38:29 localhost systemd[4174]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:38:29 localhost sshd[4170]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:38:53 localhost sudo[4775]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eltuvxmydmmdijyknlfletohbanlenaz ; /usr/bin/python3
Dec  2 08:38:53 localhost sudo[4775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:38:54 localhost sudo[4775]: pam_unix(sudo:session): session closed for user root
Dec  2 08:38:54 localhost sudo[4823]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hprtkldvydytsqpwardlwsernhmcejzr ; /usr/bin/python3
Dec  2 08:38:54 localhost sudo[4823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:38:54 localhost sudo[4823]: pam_unix(sudo:session): session closed for user root
Dec  2 08:38:55 localhost sudo[4866]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdelrcpbrmmicetkarccdciiyolxxcjv ; /usr/bin/python3
Dec  2 08:38:55 localhost sudo[4866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:38:55 localhost sudo[4866]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:05 localhost sudo[5260]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wrynucpfsngekpkvtvlfybhwadthbnoh ; /usr/bin/python3
Dec  2 08:39:05 localhost sudo[5260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:05 localhost sudo[5260]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:07 localhost sudo[5281]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dikuruhlnffktafhcbsycdbiauuspfwy ; /usr/bin/python3
Dec  2 08:39:07 localhost sudo[5281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:07 localhost sudo[5281]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:09 localhost sudo[5531]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rukxftrlduatkhuplrzmvakrevkqbpot ; /usr/bin/python3
Dec  2 08:39:09 localhost sudo[5531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:10 localhost sudo[5531]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:10 localhost sudo[5574]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-omdwcmbcnvseqwvbybaitbehecisdmzi ; /usr/bin/python3
Dec  2 08:39:10 localhost sudo[5574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:10 localhost sudo[5574]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:11 localhost sudo[5668]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zjgjgpfjzqoviozwqxfzlfbnylcpkeng ; /usr/bin/python3
Dec  2 08:39:11 localhost sudo[5668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:11 localhost sudo[5668]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:11 localhost sudo[5711]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pvjkocbwgnmorqmczamuanbebekskohd ; /usr/bin/python3
Dec  2 08:39:11 localhost sudo[5711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:12 localhost sudo[5711]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:12 localhost sudo[5742]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-chafguatibfrntiuecymfqkeacixkysm ; /usr/bin/python3
Dec  2 08:39:12 localhost sudo[5742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:12 localhost sudo[5742]: pam_unix(sudo:session): session closed for user root
Dec  2 08:39:32 localhost sudo[5795]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vajlzvfkhjsqesrydumyjfymuvcuxkey ; /usr/bin/python3
Dec  2 08:39:32 localhost sudo[5795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:39:32 localhost sudo[5795]: pam_unix(sudo:session): session closed for user root
Dec  2 08:40:32 localhost sshd[4183]: Received disconnect from 38.102.83.114 port 55484:11: disconnected by user
Dec  2 08:40:32 localhost sshd[4183]: Disconnected from user zuul 38.102.83.114 port 55484
Dec  2 08:40:32 localhost sshd[4170]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:41:06 localhost sshd[5806]: Accepted publickey for zuul from 38.102.83.114 port 48946 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:41:06 localhost sshd[5806]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:41:16 localhost sudo[5871]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vegtknvulswfpqniutleevvkuhkygdxw ; OS_CLOUD=vexxhost /usr/bin/python3
Dec  2 08:41:16 localhost sudo[5871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:41:16 localhost sudo[5871]: pam_unix(sudo:session): session closed for user root
Dec  2 08:41:16 localhost sudo[5914]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sjjcrsrfarbigvcirganvhjnnsaflwil ; OS_CLOUD=vexxhost /usr/bin/python3
Dec  2 08:41:16 localhost sudo[5914]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:41:16 localhost sudo[5914]: pam_unix(sudo:session): session closed for user root
Dec  2 08:41:17 localhost sudo[5944]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pugjdqxhhxgezbyggzqzeuebjafvpowd ; OS_CLOUD=vexxhost /usr/bin/python3
Dec  2 08:41:17 localhost sudo[5944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:41:18 localhost sudo[5944]: pam_unix(sudo:session): session closed for user root
Dec  2 08:41:35 localhost sudo[6076]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-znokldidztgxwumynlnbrvnsdifnddap ; OS_CLOUD=vexxhost /usr/bin/python3
Dec  2 08:41:35 localhost sudo[6076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:41:35 localhost sudo[6076]: pam_unix(sudo:session): session closed for user root
Dec  2 08:41:35 localhost sudo[6119]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkjbwsbcymtfcosprupigtarnqcusmfv ; OS_CLOUD=vexxhost /usr/bin/python3
Dec  2 08:41:35 localhost sudo[6119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:41:35 localhost sudo[6119]: pam_unix(sudo:session): session closed for user root
Dec  2 08:41:37 localhost sshd[5806]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:43:46 localhost sshd[6156]: Invalid user config from 116.110.155.70 port 54734
Dec  2 08:43:48 localhost sshd[6156]: Connection closed by invalid user config 116.110.155.70 port 54734 [preauth]
Dec  2 08:44:03 localhost sshd[6160]: Invalid user support from 116.110.155.70 port 57288
Dec  2 08:44:24 localhost sshd[6158]: Invalid user ubnt from 116.110.151.96 port 50116
Dec  2 08:44:26 localhost sshd[6158]: Connection closed by invalid user ubnt 116.110.151.96 port 50116 [preauth]
Dec  2 08:44:26 localhost sshd[6162]: Invalid user user from 116.110.151.96 port 40464
Dec  2 08:44:30 localhost sshd[6162]: Connection closed by invalid user user 116.110.151.96 port 40464 [preauth]
Dec  2 08:44:39 localhost sshd[6165]: Connection closed by authenticating user root 116.110.155.70 port 59868 [preauth]
Dec  2 08:44:43 localhost sshd[6167]: Connection closed by authenticating user root 116.110.155.70 port 37302 [preauth]
Dec  2 08:44:57 localhost sshd[6171]: Invalid user squid from 116.110.151.96 port 39644
Dec  2 08:44:58 localhost sshd[6171]: Connection closed by invalid user squid 116.110.151.96 port 39644 [preauth]
Dec  2 08:45:09 localhost sshd[6169]: Connection closed by 116.110.151.96 port 44462 [preauth]
Dec  2 08:45:22 localhost sshd[6173]: Connection closed by authenticating user root 116.110.155.70 port 34084 [preauth]
Dec  2 08:45:35 localhost sshd[6175]: Invalid user admin from 116.110.151.96 port 51944
Dec  2 08:45:35 localhost sshd[6175]: Connection closed by invalid user admin 116.110.151.96 port 51944 [preauth]
Dec  2 08:45:38 localhost sshd[6160]: Connection closed by invalid user support 116.110.155.70 port 57288 [preauth]
Dec  2 08:46:16 localhost sshd[6177]: Invalid user system from 116.110.151.96 port 60910
Dec  2 08:46:16 localhost sshd[6177]: Connection closed by invalid user system 116.110.151.96 port 60910 [preauth]
Dec  2 08:47:00 localhost sshd[6179]: Connection closed by authenticating user root 116.110.151.96 port 60564 [preauth]
Dec  2 08:47:07 localhost sshd[6181]: Invalid user guest from 116.110.151.96 port 60572
Dec  2 08:47:10 localhost sshd[6181]: Connection closed by invalid user guest 116.110.151.96 port 60572 [preauth]
Dec  2 08:47:32 localhost sshd[6183]: Invalid user test from 116.110.151.96 port 53300
Dec  2 08:47:34 localhost sshd[6183]: Connection closed by invalid user test 116.110.151.96 port 53300 [preauth]
Dec  2 08:47:43 localhost sshd[6185]: Invalid user admin from 116.110.155.70 port 55328
Dec  2 08:47:45 localhost sshd[6185]: Connection closed by invalid user admin 116.110.155.70 port 55328 [preauth]
Dec  2 08:47:47 localhost sshd[6187]: Invalid user admin from 116.110.151.96 port 55670
Dec  2 08:47:49 localhost sshd[6187]: Connection closed by invalid user admin 116.110.151.96 port 55670 [preauth]
Dec  2 08:48:02 localhost sshd[6191]: Invalid user admin from 116.110.155.70 port 52430
Dec  2 08:48:04 localhost sshd[6191]: Connection closed by invalid user admin 116.110.155.70 port 52430 [preauth]
Dec  2 08:48:05 localhost sshd[6189]: Invalid user admin from 116.110.151.96 port 39954
Dec  2 08:48:12 localhost sshd[6189]: Connection closed by invalid user admin 116.110.151.96 port 39954 [preauth]
Dec  2 08:48:20 localhost sshd[6195]: Accepted publickey for zuul from 38.102.83.114 port 50412 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:48:20 localhost sshd[6195]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:48:20 localhost sudo[6212]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yunitkcbhuxwvrsmpqpmkrhwafzhtyov ; /usr/bin/python3
Dec  2 08:48:20 localhost sudo[6212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:20 localhost sudo[6212]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:20 localhost sudo[6231]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxeipblkbumqdgkudkjcccsyzmkaumqf ; /usr/bin/python3
Dec  2 08:48:20 localhost sudo[6231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:20 localhost sudo[6231]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:20 localhost sudo[6247]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-enfknqevsiqvrulxkivutskhuqojepdi ; /usr/bin/python3
Dec  2 08:48:20 localhost sudo[6247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:20 localhost sudo[6247]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:21 localhost sudo[6263]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kanjwqwtdynfyslndrgqwmoxkyjcmeoa ; /usr/bin/python3
Dec  2 08:48:21 localhost sudo[6263]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:21 localhost sudo[6263]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:21 localhost sudo[6279]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bjftxrqlqygdyifdiwfhhvjnmviuxbea ; /usr/bin/python3
Dec  2 08:48:21 localhost sudo[6279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:21 localhost sudo[6279]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:21 localhost sudo[6295]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lfrsdsgqyejkostzaykwvefwbahjomls ; /usr/bin/python3
Dec  2 08:48:21 localhost sudo[6295]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:22 localhost sudo[6295]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:22 localhost sudo[6343]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nzduesxrlzdjcwczpiiaflawcckpwgsp ; /usr/bin/python3
Dec  2 08:48:22 localhost sudo[6343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:22 localhost sudo[6343]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:22 localhost sudo[6386]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ygmkkecsjwhpelefetptxowvixxojcdy ; /usr/bin/python3
Dec  2 08:48:22 localhost sudo[6386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:23 localhost sudo[6386]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:23 localhost sudo[6416]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rvjwvasraqxpetigufsyqythmlttsshx ; /usr/bin/python3
Dec  2 08:48:23 localhost sudo[6416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:24 localhost sudo[6416]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:25 localhost sudo[6463]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lpnwsccdxsfldzphfdwzlanjdsugirwt ; /usr/bin/python3
Dec  2 08:48:25 localhost sudo[6463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:25 localhost sudo[6463]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:25 localhost sudo[6479]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ctqvlntqtyssfoplgfdeymcevoezmufv ; /usr/bin/python3
Dec  2 08:48:25 localhost sudo[6479]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:25 localhost sudo[6479]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:25 localhost sudo[6497]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhqwsxloaqkaesaorcgulvpriuzsahpi ; /usr/bin/python3
Dec  2 08:48:25 localhost sudo[6497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:26 localhost sudo[6497]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:26 localhost sudo[6515]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nweedofsqxkjtqgcdugnvzqrnfgretld ; /usr/bin/python3
Dec  2 08:48:26 localhost sudo[6515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:26 localhost sudo[6515]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:26 localhost sudo[6533]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-maxrnvntwvwohbmjtzknqswribjndttf ; /usr/bin/python3
Dec  2 08:48:26 localhost sudo[6533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:48:26 localhost sudo[6533]: pam_unix(sudo:session): session closed for user root
Dec  2 08:48:29 localhost sshd[6195]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:48:59 localhost sshd[6577]: Invalid user admin from 116.110.155.70 port 48360
Dec  2 08:48:59 localhost sshd[6577]: Connection closed by invalid user admin 116.110.155.70 port 48360 [preauth]
Dec  2 08:49:14 localhost sshd[6579]: Invalid user support from 116.110.151.96 port 47672
Dec  2 08:49:14 localhost sshd[6579]: Connection closed by invalid user support 116.110.151.96 port 47672 [preauth]
Dec  2 08:49:31 localhost sshd[6581]: Connection closed by authenticating user root 116.110.155.70 port 37012 [preauth]
Dec  2 08:49:39 localhost sshd[6583]: Connection closed by authenticating user operator 116.110.151.96 port 42812 [preauth]
Dec  2 08:49:48 localhost sshd[6588]: Accepted publickey for zuul from 38.102.83.114 port 59076 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:49:48 localhost sshd[6588]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:49:48 localhost sudo[6605]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxlraraqljfhtonizdrxvekoyykmogfv ; /usr/bin/python3
Dec  2 08:49:48 localhost sudo[6605]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:49:56 localhost sudo[6605]: pam_unix(sudo:session): session closed for user root
Dec  2 08:49:57 localhost sudo[6720]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pbgdxzroegzrdlcitahwkrmagvtydcac ; /usr/bin/python3
Dec  2 08:49:57 localhost sudo[6720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:50:04 localhost sshd[6731]: Invalid user user from 116.110.155.70 port 51944
Dec  2 08:50:04 localhost sshd[6731]: Connection closed by invalid user user 116.110.155.70 port 51944 [preauth]
Dec  2 08:50:19 localhost sshd[6725]: Invalid user admin from 116.110.151.96 port 59674
Dec  2 08:50:20 localhost sshd[6725]: Connection closed by invalid user admin 116.110.151.96 port 59674 [preauth]
Dec  2 08:50:25 localhost sshd[6739]: Connection closed by authenticating user ftp 116.110.151.96 port 40472 [preauth]
Dec  2 08:50:35 localhost sshd[6733]: Invalid user admin from 116.110.151.96 port 42672
Dec  2 08:50:36 localhost sshd[6733]: Connection closed by invalid user admin 116.110.151.96 port 42672 [preauth]
Dec  2 08:50:53 localhost sudo[6720]: pam_unix(sudo:session): session closed for user root
Dec  2 08:50:53 localhost sudo[10146]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-idnbycgzlmxmzgaglvbygmtprkokdghy ; /usr/bin/python3
Dec  2 08:50:53 localhost sudo[10146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:50:54 localhost sudo[10146]: pam_unix(sudo:session): session closed for user root
Dec  2 08:50:55 localhost sshd[6588]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:51:15 localhost sshd[18459]: Unable to negotiate with 38.102.83.156 port 49794: no matching host key type found. Their offer: ssh-ed25519 [preauth]
Dec  2 08:51:15 localhost sshd[18458]: Unable to negotiate with 38.102.83.156 port 49796: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth]
Dec  2 08:51:15 localhost sshd[18461]: Connection closed by 38.102.83.156 port 49790 [preauth]
Dec  2 08:51:15 localhost sshd[18460]: Unable to negotiate with 38.102.83.156 port 49812: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth]
Dec  2 08:51:15 localhost sshd[18462]: Connection closed by 38.102.83.156 port 49788 [preauth]
Dec  2 08:51:19 localhost sshd[18468]: Connection closed by authenticating user root 116.110.151.96 port 55678 [preauth]
Dec  2 08:51:20 localhost sshd[18470]: Accepted publickey for zuul from 38.102.83.114 port 47874 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:51:20 localhost sshd[18470]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:51:20 localhost sudo[18501]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dlvljapyagtvjddoknhznmhonpyeeboa ; /usr/bin/python3
Dec  2 08:51:20 localhost sudo[18501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:51:20 localhost sudo[18501]: pam_unix(sudo:session): session closed for user root
Dec  2 08:51:22 localhost sshd[18470]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:52:06 localhost sshd[18505]: Connection closed by authenticating user sync 116.110.155.70 port 39640 [preauth]
Dec  2 08:52:07 localhost sshd[18507]: Invalid user 1234 from 116.110.151.96 port 51258
Dec  2 08:52:07 localhost sshd[18507]: Connection closed by invalid user 1234 116.110.151.96 port 51258 [preauth]
Dec  2 08:52:20 localhost sshd[18509]: Invalid user ftpuser from 116.110.151.96 port 51614
Dec  2 08:52:20 localhost sshd[18509]: Connection closed by invalid user ftpuser 116.110.151.96 port 51614 [preauth]
Dec  2 08:52:23 localhost sshd[18511]: Connection closed by authenticating user root 116.110.151.96 port 51640 [preauth]
Dec  2 08:52:31 localhost sshd[18513]: Invalid user username from 116.110.155.70 port 33858
Dec  2 08:52:31 localhost sshd[18513]: Connection closed by invalid user username 116.110.155.70 port 33858 [preauth]
Dec  2 08:52:50 localhost sshd[18516]: Accepted publickey for zuul from 38.102.83.114 port 37638 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:52:50 localhost sshd[18516]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:52:50 localhost sudo[18533]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jqlxruotpscqjkwckjiounjsqehjicge ; /usr/bin/python3
Dec  2 08:52:50 localhost sudo[18533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:51 localhost sudo[18533]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:51 localhost sudo[18549]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uftafhxuojjfibfzvywwlyoilynqhizv ; /usr/bin/python3
Dec  2 08:52:51 localhost sudo[18549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:51 localhost sudo[18549]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:52 localhost sudo[18599]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-takdmtxxscasjtjzalsvdiagokrvmapn ; /usr/bin/python3
Dec  2 08:52:52 localhost sudo[18599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:52 localhost sudo[18599]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:52 localhost sudo[18642]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bedlzjjtyukbqymielgffdrwumjwojhe ; /usr/bin/python3
Dec  2 08:52:52 localhost sudo[18642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:53 localhost sudo[18642]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:53 localhost sudo[18704]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pqzfmqzfffmqivzbshijdgbzjbsiesdq ; /usr/bin/python3
Dec  2 08:52:53 localhost sudo[18704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:53 localhost sudo[18704]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:53 localhost sudo[18747]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iuhbhgclsiabxqxhpznwfhhirhaeontc ; /usr/bin/python3
Dec  2 08:52:53 localhost sudo[18747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:54 localhost sudo[18747]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:55 localhost sudo[18779]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkrqzwshrojugljtdvxheezgjhkjsite ; /usr/bin/python3
Dec  2 08:52:55 localhost sudo[18779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 08:52:55 localhost sudo[18779]: pam_unix(sudo:session): session closed for user root
Dec  2 08:52:58 localhost sshd[18516]: pam_unix(sshd:session): session closed for user zuul
Dec  2 08:53:20 localhost sshd[19010]: Connection closed by authenticating user sshd 116.110.155.70 port 39630 [preauth]
Dec  2 08:53:36 localhost sshd[19012]: Invalid user admin from 116.110.155.70 port 36520
Dec  2 08:53:36 localhost sshd[19012]: Connection closed by invalid user admin 116.110.155.70 port 36520 [preauth]
Dec  2 08:53:51 localhost sshd[19014]: Invalid user nikita from 116.110.151.96 port 33986
Dec  2 08:53:52 localhost sshd[19014]: Connection closed by invalid user nikita 116.110.151.96 port 33986 [preauth]
Dec  2 08:54:10 localhost sshd[19016]: Connection closed by authenticating user root 116.110.155.70 port 42892 [preauth]
Dec  2 08:54:45 localhost sshd[19019]: Invalid user oracle from 116.110.151.96 port 43506
Dec  2 08:54:46 localhost sshd[19019]: Connection closed by invalid user oracle 116.110.151.96 port 43506 [preauth]
Dec  2 08:55:04 localhost sshd[19021]: Connection closed by authenticating user root 116.110.155.70 port 56614 [preauth]
Dec  2 08:55:09 localhost sshd[19023]: Invalid user rebecca from 116.110.155.70 port 40756
Dec  2 08:55:10 localhost sshd[19023]: Connection closed by invalid user rebecca 116.110.155.70 port 40756 [preauth]
Dec  2 08:55:13 localhost sshd[19025]: Accepted publickey for zuul from 38.102.83.156 port 47974 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 08:55:13 localhost sshd[19025]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 08:55:21 localhost sshd[19073]: Invalid user test from 116.110.151.96 port 56804
Dec  2 08:55:23 localhost sshd[19073]: Connection closed by invalid user test 116.110.151.96 port 56804 [preauth]
Dec  2 08:55:53 localhost sshd[19075]: Invalid user admin from 116.110.151.96 port 44814
Dec  2 08:55:53 localhost sshd[19075]: Connection closed by invalid user admin 116.110.151.96 port 44814 [preauth]
Dec  2 08:56:01 localhost sshd[19077]: Invalid user btf from 116.110.155.70 port 44734
Dec  2 08:56:01 localhost sshd[19077]: Connection closed by invalid user btf 116.110.155.70 port 44734 [preauth]
Dec  2 08:56:14 localhost sshd[19079]: Connection closed by authenticating user root 116.110.151.96 port 59968 [preauth]
Dec  2 08:57:06 localhost sshd[19081]: Connection closed by authenticating user root 116.110.155.70 port 45414 [preauth]
Dec  2 08:57:24 localhost sshd[19083]: Invalid user guest1 from 116.110.155.70 port 43178
Dec  2 08:57:24 localhost sshd[19083]: Connection closed by invalid user guest1 116.110.155.70 port 43178 [preauth]
Dec  2 08:57:33 localhost sshd[19086]: Invalid user plex from 116.110.151.96 port 50230
Dec  2 08:57:33 localhost sshd[19086]: Connection closed by invalid user plex 116.110.151.96 port 50230 [preauth]
Dec  2 08:57:51 localhost sshd[19088]: Invalid user admin from 116.110.155.70 port 48702
Dec  2 08:57:52 localhost sshd[19088]: Connection closed by invalid user admin 116.110.155.70 port 48702 [preauth]
Dec  2 08:57:54 localhost sshd[19090]: Connection closed by authenticating user root 116.110.155.70 port 48714 [preauth]
Dec  2 08:58:09 localhost sshd[19092]: Invalid user admin from 116.110.151.96 port 48264
Dec  2 08:58:10 localhost sshd[19092]: Connection closed by invalid user admin 116.110.151.96 port 48264 [preauth]
Dec  2 08:58:33 localhost sshd[19094]: Connection closed by authenticating user root 116.110.155.70 port 60352 [preauth]
Dec  2 08:59:02 localhost sshd[19096]: Connection closed by authenticating user root 116.110.151.96 port 36258 [preauth]
Dec  2 08:59:04 localhost sshd[19098]: Invalid user admin from 116.110.151.96 port 57226
Dec  2 08:59:04 localhost sshd[19098]: Connection closed by invalid user admin 116.110.151.96 port 57226 [preauth]
Dec  2 08:59:31 localhost sshd[19101]: Invalid user kim from 116.110.155.70 port 43066
Dec  2 08:59:31 localhost sshd[19101]: Connection closed by invalid user kim 116.110.155.70 port 43066 [preauth]
Dec  2 08:59:33 localhost sshd[19102]: Invalid user admin from 116.110.151.96 port 38780
Dec  2 08:59:35 localhost sshd[19102]: Connection closed by invalid user admin 116.110.151.96 port 38780 [preauth]
Dec  2 09:00:02 localhost sshd[19106]: Invalid user admin from 116.110.151.96 port 59494
Dec  2 09:00:03 localhost sshd[19106]: Connection closed by invalid user admin 116.110.151.96 port 59494 [preauth]
Dec  2 09:00:13 localhost sshd[19028]: Received disconnect from 38.102.83.156 port 47974:11: disconnected by user
Dec  2 09:00:13 localhost sshd[19028]: Disconnected from user zuul 38.102.83.156 port 47974
Dec  2 09:00:13 localhost sshd[19025]: pam_unix(sshd:session): session closed for user zuul
Dec  2 09:00:20 localhost sshd[19109]: Connection closed by authenticating user bin 116.110.155.70 port 58058 [preauth]
Dec  2 09:00:43 localhost sshd[19113]: Invalid user thomas from 116.110.155.70 port 36200
Dec  2 09:00:44 localhost sshd[19113]: Connection closed by invalid user thomas 116.110.155.70 port 36200 [preauth]
Dec  2 09:00:44 localhost sshd[19111]: Connection closed by authenticating user root 116.110.155.70 port 36186 [preauth]
Dec  2 09:02:09 localhost sshd[19132]: Invalid user matrix from 116.110.151.96 port 39498
Dec  2 09:02:10 localhost sshd[19132]: Connection closed by invalid user matrix 116.110.151.96 port 39498 [preauth]
Dec  2 09:02:11 localhost sshd[19134]: Invalid user helpdesk from 116.110.155.70 port 41096
Dec  2 09:02:12 localhost sshd[19134]: Connection closed by invalid user helpdesk 116.110.155.70 port 41096 [preauth]
Dec  2 09:02:13 localhost sshd[19130]: Invalid user psybnc from 116.110.155.70 port 41084
Dec  2 09:02:13 localhost sshd[19130]: Connection closed by invalid user psybnc 116.110.155.70 port 41084 [preauth]
Dec  2 09:02:13 localhost sshd[19136]: Invalid user belkinstyle from 116.110.155.70 port 41100
Dec  2 09:02:14 localhost sshd[19136]: Connection closed by invalid user belkinstyle 116.110.155.70 port 41100 [preauth]
Dec  2 09:02:40 localhost sshd[19138]: Invalid user test from 116.110.155.70 port 37966
Dec  2 09:02:42 localhost sshd[19138]: Connection closed by invalid user test 116.110.155.70 port 37966 [preauth]
Dec  2 09:03:00 localhost sshd[19140]: Connection closed by authenticating user root 116.110.151.96 port 57770 [preauth]
Dec  2 09:03:16 localhost sshd[19142]: Connection closed by authenticating user root 139.19.117.130 port 47580 [preauth]
Dec  2 09:03:30 localhost sshd[19144]: Invalid user www from 116.110.155.70 port 51704
Dec  2 09:03:30 localhost sshd[19144]: Connection closed by invalid user www 116.110.155.70 port 51704 [preauth]
Dec  2 09:03:36 localhost sshd[19146]: Invalid user admin from 116.110.151.96 port 34612
Dec  2 09:03:37 localhost sshd[19146]: Connection closed by invalid user admin 116.110.151.96 port 34612 [preauth]
Dec  2 09:03:49 localhost sshd[19148]: Invalid user xbmc from 116.110.151.96 port 46290
Dec  2 09:03:49 localhost sshd[19148]: Connection closed by invalid user xbmc 116.110.151.96 port 46290 [preauth]
Dec  2 09:04:28 localhost sshd[19150]: Invalid user software from 116.110.155.70 port 45636
Dec  2 09:04:29 localhost sshd[19150]: Connection closed by invalid user software 116.110.155.70 port 45636 [preauth]
Dec  2 09:04:30 localhost sshd[19152]: Invalid user anton from 116.110.151.96 port 44614
Dec  2 09:04:31 localhost sshd[19152]: Connection closed by invalid user anton 116.110.151.96 port 44614 [preauth]
Dec  2 09:04:31 localhost sshd[19154]: Invalid user joro from 116.110.151.96 port 44630
Dec  2 09:04:32 localhost sshd[19154]: Connection closed by invalid user joro 116.110.151.96 port 44630 [preauth]
Dec  2 09:05:07 localhost sshd[19156]: Invalid user george from 116.110.151.96 port 45728
Dec  2 09:05:07 localhost sshd[19156]: Connection closed by invalid user george 116.110.151.96 port 45728 [preauth]
Dec  2 09:05:14 localhost sshd[19158]: Invalid user office from 116.110.151.96 port 45736
Dec  2 09:05:14 localhost sshd[19158]: Connection closed by invalid user office 116.110.151.96 port 45736 [preauth]
Dec  2 09:05:31 localhost sshd[19161]: error: kex_exchange_identification: Connection closed by remote host
Dec  2 09:05:31 localhost sshd[19161]: Connection closed by 87.236.176.178 port 52657
Dec  2 09:05:32 localhost sshd[19162]: Connection closed by 87.236.176.178 port 46187 [preauth]
Dec  2 09:05:54 localhost sshd[19164]: Invalid user admian from 116.110.151.96 port 33410
Dec  2 09:05:54 localhost sshd[19164]: Connection closed by invalid user admian 116.110.151.96 port 33410 [preauth]
Dec  2 09:06:23 localhost sshd[19166]: Invalid user auto from 116.110.151.96 port 47032
Dec  2 09:06:23 localhost sshd[19166]: Connection closed by invalid user auto 116.110.151.96 port 47032 [preauth]
Dec  2 09:06:26 localhost sshd[19168]: Invalid user admin from 116.110.151.96 port 58840
Dec  2 09:06:30 localhost sshd[19168]: Connection closed by invalid user admin 116.110.151.96 port 58840 [preauth]
Dec  2 09:07:21 localhost sshd[19173]: Accepted publickey for zuul from 38.102.83.114 port 44024 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:07:21 localhost sshd[19173]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 09:07:22 localhost sudo[19208]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-irvvmprhrotahccriytwipmycrjklzcg ; /usr/bin/python3
Dec  2 09:07:22 localhost sudo[19208]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:07:24 localhost sudo[19208]: pam_unix(sudo:session): session closed for user root
Dec  2 09:07:24 localhost sudo[19227]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrxfjqdnpbfqhywkrhpfuqwenzkuswnm ; /usr/bin/python3
Dec  2 09:07:24 localhost sudo[19227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:07:27 localhost sshd[19170]: Invalid user library from 116.110.155.70 port 46648
Dec  2 09:07:29 localhost sshd[19170]: Connection closed by invalid user library 116.110.155.70 port 46648 [preauth]
Dec  2 09:07:40 localhost sshd[19359]: Invalid user newadmin from 116.110.151.96 port 38262
Dec  2 09:07:41 localhost sshd[19359]: Connection closed by invalid user newadmin 116.110.151.96 port 38262 [preauth]
Dec  2 09:07:59 localhost sshd[19497]: Invalid user joggler from 116.110.155.70 port 36000
Dec  2 09:08:00 localhost sshd[19497]: Connection closed by invalid user joggler 116.110.155.70 port 36000 [preauth]
Dec  2 09:08:02 localhost sshd[19377]: Connection closed by authenticating user root 116.110.155.70 port 35996 [preauth]
Dec  2 09:08:05 localhost sudo[19227]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:05 localhost sudo[19586]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qddgytvrznpsafldxoyjcltwwlbmsbep ; /usr/bin/python3
Dec  2 09:08:05 localhost sudo[19586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:10 localhost sshd[19654]: Received disconnect from 103.42.181.150 port 40344:11:  [preauth]
Dec  2 09:08:10 localhost sshd[19654]: Disconnected from authenticating user root 103.42.181.150 port 40344 [preauth]
Dec  2 09:08:21 localhost sudo[19586]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:21 localhost sudo[19866]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mrjplginqtrqmrmqpmkxkeaolnqeogim ; /usr/bin/python3
Dec  2 09:08:21 localhost sudo[19866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:23 localhost sudo[19866]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:24 localhost sudo[19885]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-avlzbtjkuzpfymrfelgrdhfhrlbrumey ; /usr/bin/python3
Dec  2 09:08:24 localhost sudo[19885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:26 localhost sshd[19375]: Connection closed by authenticating user root 116.110.155.70 port 36016 [preauth]
Dec  2 09:08:48 localhost groupadd[19990]: group added to /etc/group: name=unbound, GID=987
Dec  2 09:08:48 localhost groupadd[19990]: group added to /etc/gshadow: name=unbound
Dec  2 09:08:48 localhost groupadd[19990]: new group: name=unbound, GID=987
Dec  2 09:08:48 localhost useradd[19997]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none
Dec  2 09:08:48 localhost groupadd[20010]: group added to /etc/group: name=openvswitch, GID=986
Dec  2 09:08:48 localhost groupadd[20010]: group added to /etc/gshadow: name=openvswitch
Dec  2 09:08:48 localhost groupadd[20010]: new group: name=openvswitch, GID=986
Dec  2 09:08:48 localhost useradd[20017]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none
Dec  2 09:08:48 localhost groupadd[20025]: group added to /etc/group: name=hugetlbfs, GID=985
Dec  2 09:08:48 localhost groupadd[20025]: group added to /etc/gshadow: name=hugetlbfs
Dec  2 09:08:48 localhost groupadd[20025]: new group: name=hugetlbfs, GID=985
Dec  2 09:08:48 localhost usermod[20033]: add 'openvswitch' to group 'hugetlbfs'
Dec  2 09:08:48 localhost usermod[20033]: add 'openvswitch' to shadow group 'hugetlbfs'
Dec  2 09:08:52 localhost sudo[19885]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:52 localhost sudo[21085]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-altlthvhbhwlfxzufvuloiubcifboxyk ; /usr/bin/python3
Dec  2 09:08:52 localhost sudo[21085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:53 localhost sudo[21085]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:53 localhost sudo[21133]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vwfsuizcoxsqadmpsyqlzwakatagzoju ; /usr/bin/python3
Dec  2 09:08:53 localhost sudo[21133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:53 localhost sudo[21133]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:54 localhost sudo[21176]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cuczhtvfdixvtesznenpvtjwhrhrxruy ; /usr/bin/python3
Dec  2 09:08:54 localhost sudo[21176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:54 localhost sudo[21176]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:54 localhost sudo[21206]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kcuasdtqxkwczdcagekcnivrvomgjppa ; /usr/bin/python3
Dec  2 09:08:54 localhost sudo[21206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:54 localhost sudo[21206]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:54 localhost sudo[21227]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iufzztubgkeygqsmvyejgaotgjemkfjp ; /usr/bin/python3
Dec  2 09:08:54 localhost sudo[21227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:55 localhost sudo[21227]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:55 localhost sudo[21249]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qznqimdbkxnwiiyphgxtllbbiscddoph ; /usr/bin/python3
Dec  2 09:08:55 localhost sudo[21249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:55 localhost sudo[21249]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:55 localhost sudo[21269]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-npjxvwmpxwhcvdiukiqlhtljnjkmoioc ; /usr/bin/python3
Dec  2 09:08:55 localhost sudo[21269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:55 localhost sudo[21269]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:56 localhost sshd[21230]: Invalid user kelly from 116.110.151.96 port 41360
Dec  2 09:08:56 localhost sudo[21289]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qyomidvkzvdexcimduxwjhpbpwtwrjkm ; /usr/bin/python3
Dec  2 09:08:56 localhost sudo[21289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:56 localhost sshd[21230]: Connection closed by invalid user kelly 116.110.151.96 port 41360 [preauth]
Dec  2 09:08:56 localhost sudo[21289]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:56 localhost sudo[21463]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-onrxgfslvppxywendkeexfrttlowyiun ; /usr/bin/python3
Dec  2 09:08:56 localhost sudo[21463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:08:57 localhost sudo[21463]: pam_unix(sudo:session): session closed for user root
Dec  2 09:08:57 localhost sudo[21628]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nitrkrcverlgwezdhbbqldeoorrnawgr ; /usr/bin/python3
Dec  2 09:08:57 localhost sudo[21628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 09:09:11 localhost sshd[21992]: Invalid user testftp from 116.110.151.96 port 56178
Dec  2 09:09:12 localhost sshd[21992]: Connection closed by invalid user testftp 116.110.151.96 port 56178 [preauth]
Dec  2 09:09:14 localhost sshd[22084]: Invalid user cf1c22 from 116.110.155.70 port 35998
Dec  2 09:09:14 localhost sshd[22084]: Connection closed by invalid user cf1c22 116.110.155.70 port 35998 [preauth]
Dec  2 09:09:32 localhost sshd[22404]: Connection closed by authenticating user root 116.110.151.96 port 60848 [preauth]
Dec  2 09:09:40 localhost sshd[22409]: Connection closed by authenticating user root 116.110.155.70 port 35626 [preauth]
Dec  2 09:09:49 localhost sudo[21628]: pam_unix(sudo:session): session closed for user root
Dec  2 09:09:52 localhost sshd[19173]: pam_unix(sshd:session): session closed for user zuul
Dec  2 09:09:57 localhost sshd[23049]: Accepted publickey for root from 192.168.122.11 port 38064 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:58 localhost systemd[23053]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:58 localhost sshd[23049]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:58 localhost sshd[23068]: Received disconnect from 192.168.122.11 port 38064:11: disconnected by user
Dec  2 09:09:58 localhost sshd[23068]: Disconnected from user root 192.168.122.11 port 38064
Dec  2 09:09:58 localhost sshd[23049]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:58 localhost sshd[23082]: Accepted publickey for root from 192.168.122.11 port 38072 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:58 localhost sshd[23082]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:59 localhost sshd[23085]: Received disconnect from 192.168.122.11 port 38072:11: disconnected by user
Dec  2 09:09:59 localhost sshd[23085]: Disconnected from user root 192.168.122.11 port 38072
Dec  2 09:09:59 localhost sshd[23082]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:59 localhost sshd[23099]: Accepted publickey for root from 192.168.122.11 port 38086 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:59 localhost sshd[23099]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:59 localhost sshd[23102]: Received disconnect from 192.168.122.11 port 38086:11: disconnected by user
Dec  2 09:09:59 localhost sshd[23102]: Disconnected from user root 192.168.122.11 port 38086
Dec  2 09:09:59 localhost sshd[23099]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:59 localhost sshd[23116]: Accepted publickey for root from 192.168.122.11 port 38090 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:59 localhost sshd[23116]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:59 localhost sshd[23120]: Received disconnect from 192.168.122.11 port 38090:11: disconnected by user
Dec  2 09:09:59 localhost sshd[23120]: Disconnected from user root 192.168.122.11 port 38090
Dec  2 09:09:59 localhost sshd[23116]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:59 localhost sshd[23134]: Accepted publickey for root from 192.168.122.11 port 38100 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:59 localhost sshd[23134]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:59 localhost sshd[23138]: Received disconnect from 192.168.122.11 port 38100:11: disconnected by user
Dec  2 09:09:59 localhost sshd[23138]: Disconnected from user root 192.168.122.11 port 38100
Dec  2 09:09:59 localhost sshd[23134]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:59 localhost sshd[23152]: Accepted publickey for root from 192.168.122.11 port 38112 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:09:59 localhost sshd[23152]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:09:59 localhost sshd[23155]: Received disconnect from 192.168.122.11 port 38112:11: disconnected by user
Dec  2 09:09:59 localhost sshd[23155]: Disconnected from user root 192.168.122.11 port 38112
Dec  2 09:09:59 localhost sshd[23152]: pam_unix(sshd:session): session closed for user root
Dec  2 09:09:59 localhost sshd[23169]: Accepted publickey for root from 192.168.122.11 port 38118 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:00 localhost sshd[23169]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:00 localhost sshd[23172]: Received disconnect from 192.168.122.11 port 38118:11: disconnected by user
Dec  2 09:10:00 localhost sshd[23172]: Disconnected from user root 192.168.122.11 port 38118
Dec  2 09:10:00 localhost sshd[23169]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:00 localhost sshd[23186]: Accepted publickey for root from 192.168.122.11 port 38128 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:00 localhost sshd[23186]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:00 localhost sshd[23189]: Received disconnect from 192.168.122.11 port 38128:11: disconnected by user
Dec  2 09:10:00 localhost sshd[23189]: Disconnected from user root 192.168.122.11 port 38128
Dec  2 09:10:00 localhost sshd[23186]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:00 localhost sshd[23203]: Accepted publickey for root from 192.168.122.11 port 38138 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:00 localhost sshd[23203]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:00 localhost sshd[23206]: Received disconnect from 192.168.122.11 port 38138:11: disconnected by user
Dec  2 09:10:00 localhost sshd[23206]: Disconnected from user root 192.168.122.11 port 38138
Dec  2 09:10:00 localhost sshd[23203]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:00 localhost sshd[23220]: Accepted publickey for root from 192.168.122.11 port 38154 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:00 localhost sshd[23220]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:00 localhost sshd[23223]: Received disconnect from 192.168.122.11 port 38154:11: disconnected by user
Dec  2 09:10:00 localhost sshd[23223]: Disconnected from user root 192.168.122.11 port 38154
Dec  2 09:10:00 localhost sshd[23220]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:00 localhost sshd[23237]: Accepted publickey for root from 192.168.122.11 port 38166 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:00 localhost sshd[23237]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:00 localhost sshd[23240]: Received disconnect from 192.168.122.11 port 38166:11: disconnected by user
Dec  2 09:10:00 localhost sshd[23240]: Disconnected from user root 192.168.122.11 port 38166
Dec  2 09:10:00 localhost sshd[23237]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:01 localhost sshd[23254]: Accepted publickey for root from 192.168.122.11 port 38176 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:01 localhost sshd[23254]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:01 localhost sshd[23257]: Received disconnect from 192.168.122.11 port 38176:11: disconnected by user
Dec  2 09:10:01 localhost sshd[23257]: Disconnected from user root 192.168.122.11 port 38176
Dec  2 09:10:01 localhost sshd[23254]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:01 localhost sshd[23271]: Accepted publickey for root from 192.168.122.11 port 38186 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:01 localhost sshd[23271]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:10 localhost sshd[23421]: Connection closed by authenticating user root 116.110.151.96 port 35458 [preauth]
Dec  2 09:10:13 localhost sshd[23274]: Received disconnect from 192.168.122.11 port 38186:11: disconnected by user
Dec  2 09:10:13 localhost sshd[23274]: Disconnected from user root 192.168.122.11 port 38186
Dec  2 09:10:13 localhost sshd[23271]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:13 localhost sshd[23495]: Accepted publickey for root from 192.168.122.11 port 45752 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:13 localhost sshd[23495]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:13 localhost sshd[23498]: Received disconnect from 192.168.122.11 port 45752:11: disconnected by user
Dec  2 09:10:13 localhost sshd[23498]: Disconnected from user root 192.168.122.11 port 45752
Dec  2 09:10:13 localhost sshd[23495]: pam_unix(sshd:session): session closed for user root
Dec  2 09:10:13 localhost sshd[23512]: Accepted publickey for root from 192.168.122.11 port 45754 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 09:10:13 localhost sshd[23512]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:13 localhost sudo[23529]:    root : PWD=/root ; USER=root ; COMMAND=/bin/dnf install -y podman python3-tripleoclient util-linux lvm2 cephadm
Dec  2 09:10:13 localhost sudo[23529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:10:28 localhost sshd[23540]: Invalid user vyos from 116.110.155.70 port 50010
Dec  2 09:10:29 localhost sshd[23540]: Connection closed by invalid user vyos 116.110.155.70 port 50010 [preauth]
Dec  2 09:10:29 localhost sshd[23532]: Invalid user strycek from 116.110.155.70 port 47444
Dec  2 09:10:30 localhost sshd[23532]: Connection closed by invalid user strycek 116.110.155.70 port 47444 [preauth]
Dec  2 09:10:56 localhost sshd[24071]: Invalid user user100 from 116.110.155.70 port 55670
Dec  2 09:10:57 localhost sshd[24071]: Connection closed by invalid user user100 116.110.155.70 port 55670 [preauth]
Dec  2 09:11:07 localhost sshd[24383]: Invalid user open from 116.110.155.70 port 36526
Dec  2 09:11:08 localhost sshd[24383]: Connection closed by invalid user open 116.110.155.70 port 36526 [preauth]
Dec  2 09:11:31 localhost sshd[24476]: Invalid user cisco from 116.110.151.96 port 54274
Dec  2 09:11:31 localhost sshd[24476]: Connection closed by invalid user cisco 116.110.151.96 port 54274 [preauth]
Dec  2 09:11:37 localhost sshd[24509]: Invalid user admin from 116.110.155.70 port 35958
Dec  2 09:11:37 localhost sshd[24509]: Connection closed by invalid user admin 116.110.155.70 port 35958 [preauth]
Dec  2 09:11:54 localhost sshd[24590]: Invalid user 123456 from 116.110.151.96 port 51448
Dec  2 09:11:54 localhost sshd[24590]: Connection closed by invalid user 123456 116.110.151.96 port 51448 [preauth]
Dec  2 09:11:55 localhost sshd[24588]: Invalid user test from 116.110.151.96 port 51460
Dec  2 09:11:55 localhost sshd[24588]: Connection closed by invalid user test 116.110.151.96 port 51460 [preauth]
Dec  2 09:12:05 localhost groupadd[24619]: group added to /etc/group: name=heat, GID=187
Dec  2 09:12:05 localhost groupadd[24619]: group added to /etc/gshadow: name=heat
Dec  2 09:12:05 localhost groupadd[24619]: new group: name=heat, GID=187
Dec  2 09:12:05 localhost useradd[24626]: new user: name=heat, UID=187, GID=187, home=/var/lib/heat, shell=/sbin/nologin, from=none
Dec  2 09:12:08 localhost groupadd[24646]: group added to /etc/group: name=puppet, GID=52
Dec  2 09:12:08 localhost groupadd[24646]: group added to /etc/gshadow: name=puppet
Dec  2 09:12:08 localhost groupadd[24646]: new group: name=puppet, GID=52
Dec  2 09:12:08 localhost useradd[24653]: new user: name=puppet, UID=52, GID=52, home=/var/lib/puppet, shell=/sbin/nologin, from=none
Dec  2 09:12:10 localhost sshd[24633]: Invalid user secret from 116.110.151.96 port 52856
Dec  2 09:12:11 localhost sshd[24633]: Connection closed by invalid user secret 116.110.151.96 port 52856 [preauth]
Dec  2 09:12:13 localhost groupadd[24665]: group added to /etc/group: name=cephadm, GID=984
Dec  2 09:12:13 localhost groupadd[24665]: group added to /etc/gshadow: name=cephadm
Dec  2 09:12:13 localhost groupadd[24665]: new group: name=cephadm, GID=984
Dec  2 09:12:14 localhost useradd[24672]: new user: name=cephadm, UID=985, GID=984, home=/var/lib/cephadm, shell=/bin/bash, from=none
Dec  2 09:12:18 localhost sudo[23529]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:18 localhost sudo[27808]:    root : PWD=/root ; USER=root ; COMMAND=/bin/hostnamectl set-hostname standalone.localdomain
Dec  2 09:12:18 localhost sudo[27808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:18 localhost sudo[27808]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:18 localhost sudo[27812]:    root : PWD=/root ; USER=root ; COMMAND=/bin/hostnamectl set-hostname standalone.localdomain --transient
Dec  2 09:12:18 localhost sudo[27812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:18 localhost sudo[27812]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:20 localhost sudo[27843]:    root : PWD=/root ; USER=root ; COMMAND=/bin/mkdir -p /etc/os-net-config
Dec  2 09:12:20 localhost sudo[27843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:20 localhost sudo[27843]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:20 localhost sudo[27847]:    root : PWD=/root ; USER=root ; COMMAND=/bin/tee /etc/cloud/cloud.cfg.d/99-edpm-disable-network-config.cfg
Dec  2 09:12:20 localhost sudo[27847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:20 localhost sudo[27847]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:20 localhost sudo[27850]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl enable network
Dec  2 09:12:21 localhost sudo[27850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:21 localhost sudo[27850]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:21 localhost sudo[27889]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /tmp/net_config.yaml /etc/os-net-config/config.yaml
Dec  2 09:12:21 localhost sudo[27889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:21 localhost sudo[27889]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:21 localhost sudo[27892]:    root : PWD=/root ; USER=root ; COMMAND=/bin/os-net-config -c /etc/os-net-config/config.yaml
Dec  2 09:12:21 localhost sudo[27892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27892]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27899]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /tmp/net_config.yaml /root/standalone_net_config.j2
Dec  2 09:12:22 localhost sudo[27899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27899]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27902]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /tmp/network_data.yaml /root/network_data.yaml
Dec  2 09:12:22 localhost sudo[27902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27902]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27905]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /tmp/deployed_network.yaml /root/deployed_network.yaml
Dec  2 09:12:22 localhost sudo[27905]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27905]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27908]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /tmp/Standalone.yaml /root/Standalone.yaml
Dec  2 09:12:22 localhost sudo[27908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27908]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27912]:    root : PWD=/root ; USER=root ; COMMAND=/bin/dd if=/dev/zero of=/var/lib/ceph-osd.img bs=1 count=0 seek=7G
Dec  2 09:12:22 localhost sudo[27912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27912]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27915]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/losetup /dev/loop3 /var/lib/ceph-osd.img
Dec  2 09:12:22 localhost sudo[27915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27915]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27924]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pvcreate /dev/loop3
Dec  2 09:12:22 localhost sudo[27924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27924]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27928]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/vgcreate vg2 /dev/loop3
Dec  2 09:12:22 localhost sudo[27928]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27928]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27932]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/lvcreate -n data-lv2 -l +100%FREE vg2
Dec  2 09:12:22 localhost sudo[27932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:22 localhost sudo[27932]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:22 localhost sudo[27945]:    root : PWD=/root ; USER=root ; COMMAND=/bin/openstack overcloud ceph spec --standalone --mon-ip 172.18.0.100 --osd-spec /root/osd_spec.yaml --output /root/ceph_spec.yaml
Dec  2 09:12:22 localhost sudo[27945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:25 localhost sudo[27945]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:25 localhost sudo[27976]:    root : PWD=/root ; USER=root ; COMMAND=/bin/openstack overcloud ceph user enable --standalone /root/ceph_spec.yaml
Dec  2 09:12:25 localhost sudo[27976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:30 localhost useradd[28029]: new group: name=ceph-admin, GID=1002
Dec  2 09:12:30 localhost useradd[28029]: new user: name=ceph-admin, UID=1002, GID=1002, home=/home/ceph-admin, shell=/bin/bash, from=none
Dec  2 09:12:34 localhost sudo[27976]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:34 localhost sudo[28116]:    root : PWD=/root ; USER=root ; COMMAND=/bin/sed -i /--yes-i-know/d /usr/share/ansible/roles/tripleo_cephadm/tasks/bootstrap.yaml
Dec  2 09:12:34 localhost sudo[28116]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:34 localhost sudo[28116]: pam_unix(sudo:session): session closed for user root
Dec  2 09:12:34 localhost sudo[28119]:    root : PWD=/root ; USER=root ; COMMAND=/bin/openstack overcloud ceph deploy --mon-ip 172.18.0.100 --ceph-spec /root/ceph_spec.yaml --config /root/initial_ceph.conf --container-image-prepare /root/containers-prepare-parameters.yaml --standalone --single-host-defaults --skip-hosts-config --skip-container-registry-config --skip-user-create --network-data /tmp/network_data.yaml --ntp-server pool.ntp.org --output /root/deployed_ceph.yaml
Dec  2 09:12:34 localhost sudo[28119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:12:36 localhost sshd[28086]: Invalid user tushar from 116.110.151.96 port 40036
Dec  2 09:12:36 localhost sshd[28086]: Connection closed by invalid user tushar 116.110.151.96 port 40036 [preauth]
Dec  2 09:13:10 localhost sshd[28754]: Accepted publickey for ceph-admin from fe80::f816:3eff:fee9:5655%eth0 port 56754 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:13:10 localhost systemd[28758]: pam_unix(systemd-user:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:13:10 localhost sshd[28754]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:13:10 localhost sudo[28774]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/echo
Dec  2 09:13:10 localhost sudo[28774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:13:10 localhost sudo[28774]: pam_unix(sudo:session): session closed for user root
Dec  2 09:13:10 localhost sshd[28773]: Received disconnect from fe80::f816:3eff:fee9:5655%eth0 port 56754:11: disconnected by user
Dec  2 09:13:10 localhost sshd[28773]: Disconnected from user ceph-admin fe80::f816:3eff:fee9:5655%eth0 port 56754
Dec  2 09:13:10 localhost sshd[28754]: pam_unix(sshd:session): session closed for user ceph-admin
Dec  2 09:13:53 localhost sshd[30585]: Invalid user master from 171.231.177.4 port 45456
Dec  2 09:13:54 localhost sshd[30587]: Invalid user user from 171.231.177.4 port 45462
Dec  2 09:13:54 localhost sshd[30587]: Connection closed by invalid user user 171.231.177.4 port 45462 [preauth]
Dec  2 09:13:55 localhost sshd[30585]: Connection closed by invalid user master 171.231.177.4 port 45456 [preauth]
Dec  2 09:14:03 localhost sshd[31091]: Accepted publickey for ceph-admin from 172.18.0.100 port 57588 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:03 localhost systemd[31095]: pam_unix(systemd-user:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:03 localhost sshd[31108]: Accepted publickey for ceph-admin from 172.18.0.100 port 57604 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:03 localhost sshd[31091]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:03 localhost sshd[31108]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:03 localhost sudo[31115]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:03 localhost sudo[31115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:03 localhost sudo[31115]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:03 localhost sshd[31130]: Accepted publickey for ceph-admin from 172.18.0.100 port 57610 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:03 localhost sshd[31130]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:03 localhost sudo[31134]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host --expect-hostname standalone.localdomain
Dec  2 09:14:03 localhost sudo[31134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:03 localhost sudo[31134]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:04 localhost sshd[31149]: Accepted publickey for ceph-admin from 172.18.0.100 port 57620 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:04 localhost sshd[31149]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:04 localhost sudo[31153]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3
Dec  2 09:14:04 localhost sudo[31153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:04 localhost sudo[31153]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:04 localhost sshd[31168]: Accepted publickey for ceph-admin from 172.18.0.100 port 57636 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:04 localhost sshd[31168]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:04 localhost sudo[31172]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:04 localhost sudo[31172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:04 localhost sudo[31172]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:04 localhost sshd[31187]: Accepted publickey for ceph-admin from 172.18.0.100 port 57652 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:05 localhost sshd[31187]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:05 localhost sudo[31191]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:05 localhost sudo[31191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:05 localhost sudo[31191]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:05 localhost sshd[31206]: Accepted publickey for ceph-admin from 172.18.0.100 port 57658 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:05 localhost sshd[31206]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:05 localhost sudo[31212]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3.new
Dec  2 09:14:05 localhost sudo[31212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:05 localhost sudo[31212]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:05 localhost sshd[31227]: Accepted publickey for ceph-admin from 172.18.0.100 port 57660 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:05 localhost sshd[31227]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:05 localhost sudo[31231]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:05 localhost sudo[31231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:05 localhost sudo[31231]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:06 localhost sshd[31246]: Accepted publickey for ceph-admin from 172.18.0.100 port 57666 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:06 localhost sshd[31246]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:06 localhost sudo[31250]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3.new
Dec  2 09:14:06 localhost sudo[31250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:06 localhost sudo[31250]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:06 localhost sshd[31209]: Invalid user db2inst2 from 171.231.183.134 port 35632
Dec  2 09:14:06 localhost sshd[31265]: Accepted publickey for ceph-admin from 172.18.0.100 port 57676 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:06 localhost sshd[31265]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:06 localhost sshd[31209]: Connection closed by invalid user db2inst2 171.231.183.134 port 35632 [preauth]
Dec  2 09:14:07 localhost sshd[31282]: Accepted publickey for ceph-admin from 172.18.0.100 port 45134 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:07 localhost sshd[31282]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:07 localhost sudo[31286]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3.new /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3
Dec  2 09:14:07 localhost sudo[31286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:07 localhost sudo[31286]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:07 localhost sshd[31301]: Accepted publickey for ceph-admin from 172.18.0.100 port 45148 ssh2: RSA SHA256:2siBjg7lCWMq28LkObKXSTxYzDDRC0aErfNob3c/I6s
Dec  2 09:14:07 localhost sshd[31301]: pam_unix(sshd:session): session opened for user ceph-admin(uid=1002) by (uid=0)
Dec  2 09:14:07 localhost sudo[31305]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host --expect-hostname standalone.localdomain
Dec  2 09:14:07 localhost sudo[31305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:08 localhost sudo[31305]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:08 localhost sudo[31341]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:08 localhost sudo[31341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:08 localhost sudo[31341]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:08 localhost sudo[31368]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 inspect-image
Dec  2 09:14:08 localhost sudo[31368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:08 localhost sshd[30921]: Invalid user user1 from 171.231.177.4 port 40458
Dec  2 09:14:08 localhost sshd[30921]: Connection closed by invalid user user1 171.231.177.4 port 40458 [preauth]
Dec  2 09:14:09 localhost sudo[31368]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:09 localhost sudo[31513]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:09 localhost sudo[31513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:09 localhost sudo[31513]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:09 localhost sudo[31532]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 09:14:09 localhost sudo[31532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:09 localhost sudo[31532]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:09 localhost sudo[31598]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:09 localhost sudo[31598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:09 localhost sudo[31598]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:09 localhost sudo[31626]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:04038939b8141c15690c90ad77253fe2c4e8c5f75ae28b709b459441bbe41de4 --timeout 895 ls
Dec  2 09:14:09 localhost sudo[31626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:10 localhost sudo[31626]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:10 localhost sudo[31839]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:10 localhost sudo[31839]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:10 localhost sudo[31839]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:10 localhost sudo[31854]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:14:10 localhost sudo[31854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:11 localhost sudo[31854]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:11 localhost sudo[31956]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:11 localhost sudo[31956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:11 localhost sudo[31956]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:11 localhost sudo[31971]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:04038939b8141c15690c90ad77253fe2c4e8c5f75ae28b709b459441bbe41de4 --timeout 895 list-networks
Dec  2 09:14:11 localhost sudo[31971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:12 localhost sudo[31971]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:12 localhost sudo[32046]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:12 localhost sudo[32046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:12 localhost sudo[32046]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:12 localhost sudo[32078]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:04038939b8141c15690c90ad77253fe2c4e8c5f75ae28b709b459441bbe41de4 --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 09:14:12 localhost sudo[32078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:15 localhost sudo[32078]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:15 localhost sudo[33445]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:15 localhost sudo[33445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:15 localhost sudo[33445]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:15 localhost sudo[33461]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 _orch set-coredump-overrides --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c --coredump-max-size=32G
Dec  2 09:14:15 localhost sudo[33461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33461]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:16 localhost sudo[33599]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph
Dec  2 09:14:16 localhost sudo[33599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33599]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:16 localhost sudo[33614]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph
Dec  2 09:14:16 localhost sudo[33614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33614]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:16 localhost sudo[33630]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.conf.new
Dec  2 09:14:16 localhost sudo[33630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33630]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:16 localhost sudo[33657]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:16 localhost sudo[33657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33657]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:16 localhost sudo[33673]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.conf.new
Dec  2 09:14:16 localhost sudo[33673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:16 localhost sudo[33673]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33701]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33701]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33718]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33718]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33736]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.conf.new /etc/ceph/ceph.conf
Dec  2 09:14:17 localhost sudo[33736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33736]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33754]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config
Dec  2 09:14:17 localhost sudo[33754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33754]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33770]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config
Dec  2 09:14:17 localhost sudo[33770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33770]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33786]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33786]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33801]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:17 localhost sudo[33801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33801]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33817]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33817]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33845]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33845]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33860]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf.new
Dec  2 09:14:17 localhost sudo[33860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33860]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33875]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf.new /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.conf
Dec  2 09:14:17 localhost sudo[33875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33875]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33890]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /etc/ceph
Dec  2 09:14:17 localhost sudo[33890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33890]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33906]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph
Dec  2 09:14:17 localhost sudo[33906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33906]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:17 localhost sudo[33921]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.client.admin.keyring.new
Dec  2 09:14:17 localhost sudo[33921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:17 localhost sudo[33921]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[33936]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:18 localhost sudo[33936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[33936]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[33953]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[33953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[33953]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[33981]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[33981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[33981]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sshd[32276]: Invalid user sergey from 171.231.177.4 port 46274
Dec  2 09:14:18 localhost sudo[33997]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[33997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[33997]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34022]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/etc/ceph/ceph.client.admin.keyring.new /etc/ceph/ceph.client.admin.keyring
Dec  2 09:14:18 localhost sudo[34022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34022]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34043]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config
Dec  2 09:14:18 localhost sudo[34043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34043]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34059]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mkdir -p /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config
Dec  2 09:14:18 localhost sudo[34059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34059]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34074]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/touch /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[34074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34074]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34108]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R ceph-admin /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:18 localhost sudo[34108]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34108]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sshd[32276]: Connection closed by invalid user sergey 171.231.177.4 port 46274 [preauth]
Dec  2 09:14:18 localhost sudo[34123]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 644 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[34123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34123]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34151]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chown -R 0:0 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[34151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34151]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34168]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/chmod 600 /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring.new
Dec  2 09:14:18 localhost sudo[34168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34168]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34195]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/mv /tmp/cephadm-d6a9b20e-737e-5747-8a71-5fd7c568411c/var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring.new /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/config/ceph.client.admin.keyring
Dec  2 09:14:18 localhost sudo[34195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34195]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:18 localhost sudo[34214]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:18 localhost sudo[34214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:18 localhost sudo[34214]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:19 localhost sudo[34229]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:19 localhost sudo[34229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:21 localhost sudo[34229]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:21 localhost sudo[34592]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:21 localhost sudo[34592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:21 localhost sudo[34592]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:21 localhost sudo[34621]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:21 localhost sudo[34621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:23 localhost sudo[34621]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:23 localhost sudo[34976]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:14:23 localhost sudo[34976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:23 localhost sudo[34976]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:23 localhost sudo[35005]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:23 localhost sudo[35005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:23 localhost sudo[35005]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:23 localhost sudo[35023]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 09:14:23 localhost sudo[35023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:24 localhost sudo[35023]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:24 localhost sudo[35255]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:14:24 localhost sudo[35255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:24 localhost sudo[35255]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:24 localhost sudo[35274]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:24 localhost sudo[35274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:24 localhost sudo[35274]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:24 localhost sudo[35289]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:24 localhost sudo[35289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:25 localhost sudo[35289]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:26 localhost sudo[35404]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:26 localhost sudo[35404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:26 localhost sudo[35404]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:26 localhost sudo[35410]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:26 localhost sudo[35410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:26 localhost sudo[35410]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:26 localhost sudo[35434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host --expect-hostname standalone.localdomain
Dec  2 09:14:26 localhost sudo[35434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:26 localhost sudo[35439]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:26 localhost sudo[35439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:26 localhost sudo[35434]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:26 localhost sudo[35439]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:26 localhost sudo[35553]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:26 localhost sudo[35553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:26 localhost sudo[35553]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:27 localhost sudo[35570]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 09:14:27 localhost sudo[35570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:28 localhost sudo[35570]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:28 localhost sudo[35788]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:28 localhost sudo[35788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:28 localhost sudo[35788]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:28 localhost sudo[35803]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 rm-daemon --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c --name mgr.standalone.lkfrgi --force --tcp-ports 8765
Dec  2 09:14:28 localhost sudo[35803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:30 localhost sudo[35803]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:30 localhost sudo[35978]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:30 localhost sudo[35978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:30 localhost sudo[35978]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:30 localhost sudo[35993]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --env CEPH_VOLUME_OSDSPEC_AFFINITY=default_drive_group --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c --config-json - -- lvm batch --no-auto /dev/vg2/data-lv2 --yes --no-systemd
Dec  2 09:14:30 localhost sudo[35993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:33 localhost sshd[36015]: Invalid user mms from 171.231.183.134 port 41488
Dec  2 09:14:34 localhost sshd[36015]: Connection closed by invalid user mms 171.231.183.134 port 41488 [preauth]
Dec  2 09:14:35 localhost sudo[35993]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:35 localhost sudo[37071]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:35 localhost sudo[37071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:35 localhost sudo[37071]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:36 localhost sudo[37086]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- lvm list --format json
Dec  2 09:14:36 localhost sudo[37086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:37 localhost sudo[37086]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:37 localhost sudo[37218]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:37 localhost sudo[37218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:37 localhost sudo[37218]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:37 localhost sudo[37233]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 09:14:37 localhost sudo[37233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:42 localhost sudo[37233]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:42 localhost sudo[37736]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:42 localhost sudo[37736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:42 localhost sudo[37736]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:42 localhost sudo[37751]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- raw list --format json
Dec  2 09:14:42 localhost sudo[37751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:44 localhost sudo[37751]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:44 localhost sudo[38323]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:14:44 localhost sudo[38323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:44 localhost sudo[38323]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:44 localhost sudo[38338]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:44 localhost sudo[38338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:44 localhost sudo[38338]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:44 localhost sudo[38353]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 09:14:44 localhost sudo[38353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:45 localhost sudo[38353]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:46 localhost sudo[38519]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:46 localhost sudo[38519]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:46 localhost sudo[38519]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:46 localhost sudo[38534]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 09:14:46 localhost sudo[38534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:48 localhost sudo[38534]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:48 localhost sudo[39795]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:14:48 localhost sudo[39795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:48 localhost sudo[39795]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:48 localhost sudo[39810]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:14:48 localhost sudo[39810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:48 localhost sudo[39810]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:48 localhost sudo[39825]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 09:14:48 localhost sudo[39825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:50 localhost sudo[39825]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:50 localhost sudo[39991]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:14:50 localhost sudo[39991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:14:50 localhost sudo[39991]: pam_unix(sudo:session): session closed for user root
Dec  2 09:14:53 localhost sudo[40020]:    ceph : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -x --json=o /dev/vda
Dec  2 09:14:53 localhost sudo[40020]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 09:14:53 localhost sudo[40020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=167)
Dec  2 09:14:53 localhost sudo[40020]: pam_unix(sudo:session): session closed for user root
Dec  2 09:15:04 localhost sudo[28119]: pam_unix(sudo:session): session closed for user root
Dec  2 09:15:04 localhost sshd[28593]: fatal: Timeout before authentication for 116.110.155.70 port 57190
Dec  2 09:15:04 localhost sudo[40320]:    root : PWD=/root ; USER=root ; COMMAND=/bin/openstack tripleo deploy --templates /usr/share/openstack-tripleo-heat-templates --local-ip=192.168.122.100/24 --control-virtual-ip=192.168.122.99 --output-dir /root --standalone-role Standalone -r /root/Standalone.yaml -n /root/network_data.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/standalone/standalone-tripleo.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/low-memory-usage.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/deployed-network-environment.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/cinder-backup.yaml -e /root/enable_heat.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/barbican.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/barbican-backend-simple-crypto.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/manila-cephfsnative-config.yaml -e
Dec  2 09:15:04 localhost sudo[40320]:    root : (command continued) /usr/share/openstack-tripleo-heat-templates/environments/services/octavia.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/enable-legacy-telemetry.yaml -e /root/standalone_parameters.yaml -e /root/deployed_ceph.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/cephadm/cephadm-rbd-only.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/cephadm/ceph-mds.yaml -e /root/containers-prepare-parameters.yaml -e /root/deployed_network.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/neutron-ovn-sriov.yaml -e /root/sriov_template.yaml -e /root/dhcp_agent_template.yaml
Dec  2 09:15:04 localhost sudo[40320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:15:10 localhost sudo[40343]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chown -R root /root/tripleo-standalone-passwords.yaml
Dec  2 09:15:10 localhost sudo[40343]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 09:15:10 localhost sudo[40343]: pam_unix(sudo:session): session closed for user root
Dec  2 09:15:19 localhost sshd[40325]: Invalid user super from 171.231.183.134 port 43230
Dec  2 09:15:20 localhost sshd[40325]: Connection closed by invalid user super 171.231.183.134 port 43230 [preauth]
Dec  2 09:15:31 localhost sshd[40349]: Invalid user cisco from 171.231.177.4 port 47628
Dec  2 09:15:32 localhost sshd[40349]: Connection closed by invalid user cisco 171.231.177.4 port 47628 [preauth]
Dec  2 09:15:46 localhost sshd[40353]: Invalid user admin from 171.231.177.4 port 36234
Dec  2 09:15:47 localhost sshd[40353]: Connection closed by invalid user admin 171.231.177.4 port 36234 [preauth]
Dec  2 09:15:50 localhost sudo[40355]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:15:50 localhost sudo[40355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:15:50 localhost sudo[40355]: pam_unix(sudo:session): session closed for user root
Dec  2 09:15:50 localhost sudo[40370]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:15:50 localhost sudo[40370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:15:51 localhost sudo[40370]: pam_unix(sudo:session): session closed for user root
Dec  2 09:15:51 localhost sudo[40417]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:15:51 localhost sudo[40417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:15:51 localhost sudo[40417]: pam_unix(sudo:session): session closed for user root
Dec  2 09:16:51 localhost sudo[40433]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:16:51 localhost sudo[40433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:16:51 localhost sudo[40433]: pam_unix(sudo:session): session closed for user root
Dec  2 09:16:51 localhost sudo[40448]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:16:51 localhost sudo[40448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:16:51 localhost sudo[40448]: pam_unix(sudo:session): session closed for user root
Dec  2 09:16:51 localhost sudo[40494]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:16:51 localhost sudo[40494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:16:51 localhost sudo[40494]: pam_unix(sudo:session): session closed for user root
Dec  2 09:17:03 localhost sshd[40509]: Invalid user developer from 171.231.177.4 port 33754
Dec  2 09:17:05 localhost sshd[40509]: Connection closed by invalid user developer 171.231.177.4 port 33754 [preauth]
Dec  2 09:17:08 localhost sshd[40511]: Invalid user teste from 171.231.177.4 port 41182
Dec  2 09:17:09 localhost sshd[40511]: Connection closed by invalid user teste 171.231.177.4 port 41182 [preauth]
Dec  2 09:17:23 localhost sshd[40513]: Invalid user ace from 171.231.183.134 port 46308
Dec  2 09:17:24 localhost sshd[40513]: Connection closed by invalid user ace 171.231.183.134 port 46308 [preauth]
Dec  2 09:17:38 localhost sshd[40515]: Invalid user admin from 171.231.177.4 port 38374
Dec  2 09:17:38 localhost sshd[40515]: Connection closed by invalid user admin 171.231.177.4 port 38374 [preauth]
Dec  2 09:17:44 localhost sshd[40517]: Invalid user nginx from 171.231.177.4 port 44260
Dec  2 09:17:44 localhost sshd[40517]: Connection closed by invalid user nginx 171.231.177.4 port 44260 [preauth]
Dec  2 09:17:45 localhost sshd[40519]: Invalid user ubuntu from 217.170.199.90 port 52104
Dec  2 09:17:45 localhost sshd[40519]: Received disconnect from 217.170.199.90 port 52104:11:  [preauth]
Dec  2 09:17:45 localhost sshd[40519]: Disconnected from invalid user ubuntu 217.170.199.90 port 52104 [preauth]
Dec  2 09:17:52 localhost sudo[40521]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:17:52 localhost sudo[40521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:17:52 localhost sudo[40521]: pam_unix(sudo:session): session closed for user root
Dec  2 09:17:52 localhost sudo[40536]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:17:52 localhost sudo[40536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:17:52 localhost sudo[40536]: pam_unix(sudo:session): session closed for user root
Dec  2 09:17:52 localhost sudo[40584]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:17:52 localhost sudo[40584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:17:52 localhost sudo[40584]: pam_unix(sudo:session): session closed for user root
Dec  2 09:18:05 localhost sshd[40599]: Invalid user install from 171.231.177.4 port 33346
Dec  2 09:18:05 localhost sshd[40599]: Connection closed by invalid user install 171.231.177.4 port 33346 [preauth]
Dec  2 09:18:31 localhost sshd[40601]: Invalid user ubuntu from 171.231.183.134 port 57554
Dec  2 09:18:32 localhost sshd[40601]: Connection closed by invalid user ubuntu 171.231.183.134 port 57554 [preauth]
Dec  2 09:18:52 localhost sudo[40603]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:18:52 localhost sudo[40603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:18:52 localhost sudo[40603]: pam_unix(sudo:session): session closed for user root
Dec  2 09:18:52 localhost sudo[40618]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:18:52 localhost sudo[40618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:18:53 localhost sudo[40618]: pam_unix(sudo:session): session closed for user root
Dec  2 09:18:53 localhost sudo[40665]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:18:53 localhost sudo[40665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:18:53 localhost sudo[40665]: pam_unix(sudo:session): session closed for user root
Dec  2 09:19:08 localhost sshd[40680]: Invalid user tomcat from 171.231.177.4 port 47434
Dec  2 09:19:08 localhost sshd[40680]: Connection closed by invalid user tomcat 171.231.177.4 port 47434 [preauth]
Dec  2 09:19:12 localhost sshd[40684]: Connection closed by authenticating user ftp 171.231.183.134 port 56038 [preauth]
Dec  2 09:19:27 localhost sshd[40686]: Invalid user nagios from 171.231.183.134 port 47724
Dec  2 09:19:27 localhost sshd[40686]: Connection closed by invalid user nagios 171.231.183.134 port 47724 [preauth]
Dec  2 09:19:34 localhost sshd[40688]: Invalid user demo from 171.231.177.4 port 54048
Dec  2 09:19:34 localhost sshd[40688]: Connection closed by invalid user demo 171.231.177.4 port 54048 [preauth]
Dec  2 09:19:53 localhost sudo[40690]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:19:53 localhost sudo[40690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:19:53 localhost sudo[40690]: pam_unix(sudo:session): session closed for user root
Dec  2 09:19:53 localhost sudo[40705]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:19:53 localhost sudo[40705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:19:54 localhost sudo[40705]: pam_unix(sudo:session): session closed for user root
Dec  2 09:19:54 localhost sudo[40752]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:19:54 localhost sudo[40752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:19:54 localhost sudo[40752]: pam_unix(sudo:session): session closed for user root
Dec  2 09:20:48 localhost sshd[40767]: Invalid user help from 171.231.177.4 port 48462
Dec  2 09:20:48 localhost sshd[40767]: Connection closed by invalid user help 171.231.177.4 port 48462 [preauth]
Dec  2 09:20:54 localhost sudo[40769]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:20:54 localhost sudo[40769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:20:54 localhost sudo[40769]: pam_unix(sudo:session): session closed for user root
Dec  2 09:20:54 localhost sudo[40784]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:20:54 localhost sudo[40784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:20:55 localhost sudo[40784]: pam_unix(sudo:session): session closed for user root
Dec  2 09:20:55 localhost sudo[40831]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:20:55 localhost sudo[40831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:20:55 localhost sudo[40831]: pam_unix(sudo:session): session closed for user root
Dec  2 09:21:02 localhost sshd[40846]: Invalid user user from 171.231.177.4 port 57420
Dec  2 09:21:02 localhost sshd[40846]: Connection closed by invalid user user 171.231.177.4 port 57420 [preauth]
Dec  2 09:21:49 localhost sshd[40848]: Invalid user sysadmin from 171.231.183.134 port 52700
Dec  2 09:21:50 localhost sshd[40848]: Connection closed by invalid user sysadmin 171.231.183.134 port 52700 [preauth]
Dec  2 09:21:55 localhost sudo[40850]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:21:55 localhost sudo[40850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:21:55 localhost sudo[40850]: pam_unix(sudo:session): session closed for user root
Dec  2 09:21:55 localhost sudo[40865]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:21:55 localhost sudo[40865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:21:55 localhost sudo[40865]: pam_unix(sudo:session): session closed for user root
Dec  2 09:21:56 localhost sudo[40912]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:21:56 localhost sudo[40912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:21:56 localhost sudo[40912]: pam_unix(sudo:session): session closed for user root
Dec  2 09:22:02 localhost sshd[40927]: Invalid user sysadmin from 171.231.183.134 port 59236
Dec  2 09:22:03 localhost sshd[40927]: Connection closed by invalid user sysadmin 171.231.183.134 port 59236 [preauth]
Dec  2 09:22:15 localhost sshd[40930]: Invalid user reception from 171.231.177.4 port 48952
Dec  2 09:22:16 localhost sshd[40930]: Connection closed by invalid user reception 171.231.177.4 port 48952 [preauth]
Dec  2 09:22:23 localhost sshd[40932]: Invalid user madrid from 171.231.177.4 port 48956
Dec  2 09:22:23 localhost sshd[40932]: Connection closed by invalid user madrid 171.231.177.4 port 48956 [preauth]
Dec  2 09:22:47 localhost sshd[40934]: Invalid user ubnt from 171.231.183.134 port 52322
Dec  2 09:22:47 localhost sshd[40934]: Connection closed by invalid user ubnt 171.231.183.134 port 52322 [preauth]
Dec  2 09:22:56 localhost sudo[40937]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:22:56 localhost sudo[40937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:22:56 localhost sudo[40937]: pam_unix(sudo:session): session closed for user root
Dec  2 09:22:56 localhost sudo[40952]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:22:56 localhost sudo[40952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:22:56 localhost sudo[40952]: pam_unix(sudo:session): session closed for user root
Dec  2 09:22:56 localhost sudo[40999]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:22:56 localhost sudo[40999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:22:56 localhost sudo[40999]: pam_unix(sudo:session): session closed for user root
Dec  2 09:23:24 localhost sshd[41551]: Invalid user madrid from 171.231.177.4 port 37854
Dec  2 09:23:24 localhost sshd[41551]: Connection closed by invalid user madrid 171.231.177.4 port 37854 [preauth]
Dec  2 09:23:26 localhost sshd[41556]: Invalid user admin from 171.231.183.134 port 54828
Dec  2 09:23:27 localhost sshd[41556]: Connection closed by invalid user admin 171.231.183.134 port 54828 [preauth]
Dec  2 09:23:32 localhost sshd[42060]: Invalid user support from 171.231.183.134 port 34034
Dec  2 09:23:33 localhost sshd[42060]: Connection closed by invalid user support 171.231.183.134 port 34034 [preauth]
Dec  2 09:23:56 localhost sudo[43068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:23:56 localhost sudo[43068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:23:56 localhost sudo[43068]: pam_unix(sudo:session): session closed for user root
Dec  2 09:23:56 localhost sudo[43083]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:23:56 localhost sudo[43083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:23:57 localhost sudo[43083]: pam_unix(sudo:session): session closed for user root
Dec  2 09:23:57 localhost sudo[43149]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:23:57 localhost sudo[43149]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:23:57 localhost sudo[43149]: pam_unix(sudo:session): session closed for user root
Dec  2 09:24:00 localhost sshd[43228]: Invalid user shagrath from 171.231.183.134 port 54128
Dec  2 09:24:01 localhost sshd[43228]: Connection closed by invalid user shagrath 171.231.183.134 port 54128 [preauth]
Dec  2 09:24:48 localhost groupadd[44247]: group added to /etc/group: name=apache, GID=48
Dec  2 09:24:48 localhost groupadd[44247]: group added to /etc/gshadow: name=apache
Dec  2 09:24:48 localhost groupadd[44247]: new group: name=apache, GID=48
Dec  2 09:24:48 localhost useradd[44254]: new user: name=apache, UID=48, GID=48, home=/usr/share/httpd, shell=/sbin/nologin, from=none
Dec  2 09:24:57 localhost sudo[44985]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:24:57 localhost sudo[44985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:24:57 localhost sudo[44985]: pam_unix(sudo:session): session closed for user root
Dec  2 09:24:57 localhost sudo[45000]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 09:24:57 localhost sudo[45000]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:24:58 localhost sudo[45000]: pam_unix(sudo:session): session closed for user root
Dec  2 09:24:58 localhost sudo[45047]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:24:58 localhost sudo[45047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:24:58 localhost sudo[45047]: pam_unix(sudo:session): session closed for user root
Dec  2 09:24:58 localhost sudo[45063]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 09:24:58 localhost sudo[45063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:25:00 localhost sudo[45063]: pam_unix(sudo:session): session closed for user root
Dec  2 09:25:00 localhost sudo[45272]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:25:00 localhost sudo[45272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:25:00 localhost sudo[45272]: pam_unix(sudo:session): session closed for user root
Dec  2 09:25:00 localhost sudo[45305]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:25:00 localhost sudo[45305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:25:00 localhost sudo[45305]: pam_unix(sudo:session): session closed for user root
Dec  2 09:25:01 localhost sudo[45394]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:25:01 localhost sudo[45394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:25:01 localhost sudo[45394]: pam_unix(sudo:session): session closed for user root
Dec  2 09:25:34 localhost groupadd[45899]: group added to /etc/group: name=qemu, GID=107
Dec  2 09:25:34 localhost groupadd[45899]: group added to /etc/gshadow: name=qemu
Dec  2 09:25:34 localhost groupadd[45899]: new group: name=qemu, GID=107
Dec  2 09:25:35 localhost useradd[45910]: new user: name=qemu, UID=107, GID=107, home=/home/qemu, shell=/sbin/nologin, from=none
Dec  2 09:26:01 localhost sudo[46313]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:26:01 localhost sudo[46313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:26:01 localhost sudo[46313]: pam_unix(sudo:session): session closed for user root
Dec  2 09:26:01 localhost sudo[46328]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:26:01 localhost sudo[46328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:26:01 localhost sudo[46328]: pam_unix(sudo:session): session closed for user root
Dec  2 09:26:01 localhost sudo[46389]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:26:01 localhost sudo[46389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:26:02 localhost sudo[46389]: pam_unix(sudo:session): session closed for user root
Dec  2 09:26:11 localhost sshd[1129]: Received signal 15; terminating.
Dec  2 09:26:11 localhost sshd[46506]: Server listening on 0.0.0.0 port 22.
Dec  2 09:26:11 localhost sshd[46506]: Server listening on :: port 22.
Dec  2 09:27:02 localhost sudo[47742]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 09:27:02 localhost sudo[47742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:27:02 localhost sudo[47742]: pam_unix(sudo:session): session closed for user root
Dec  2 09:27:02 localhost sudo[47757]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 09:27:02 localhost sudo[47757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:27:04 localhost sudo[47757]: pam_unix(sudo:session): session closed for user root
Dec  2 09:27:05 localhost sudo[47805]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 09:27:05 localhost sudo[47805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 09:27:05 localhost sudo[47805]: pam_unix(sudo:session): session closed for user root
Dec  2 14:28:05 standalone sudo[50357]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:28:05 standalone sudo[50357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:28:05 standalone sudo[50357]: pam_unix(sudo:session): session closed for user root
Dec  2 14:28:05 standalone sudo[50372]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:28:05 standalone sudo[50372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:28:05 standalone sudo[50372]: pam_unix(sudo:session): session closed for user root
Dec  2 14:28:05 standalone sudo[50417]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:28:05 standalone sudo[50417]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:28:05 standalone sudo[50417]: pam_unix(sudo:session): session closed for user root
Dec  2 14:29:05 standalone sudo[51673]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:29:05 standalone sudo[51673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:29:05 standalone sudo[51673]: pam_unix(sudo:session): session closed for user root
Dec  2 14:29:05 standalone sudo[51688]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:29:05 standalone sudo[51688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:29:15 standalone sudo[51688]: pam_unix(sudo:session): session closed for user root
Dec  2 14:29:15 standalone sudo[51810]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:29:15 standalone sudo[51810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:29:15 standalone sudo[51810]: pam_unix(sudo:session): session closed for user root
Dec  2 14:30:15 standalone sudo[52745]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:30:15 standalone sudo[52745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:30:15 standalone sudo[52745]: pam_unix(sudo:session): session closed for user root
Dec  2 14:30:15 standalone sudo[52760]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:30:15 standalone sudo[52760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:30:16 standalone sudo[52760]: pam_unix(sudo:session): session closed for user root
Dec  2 14:30:16 standalone sudo[52807]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:30:16 standalone sudo[52807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:30:16 standalone sudo[52807]: pam_unix(sudo:session): session closed for user root
Dec  2 14:31:16 standalone sudo[53872]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:31:16 standalone sudo[53872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:31:16 standalone sudo[53872]: pam_unix(sudo:session): session closed for user root
Dec  2 14:31:16 standalone sudo[53887]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:31:16 standalone sudo[53887]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:31:17 standalone sudo[53887]: pam_unix(sudo:session): session closed for user root
Dec  2 14:31:17 standalone sudo[53959]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:31:17 standalone sudo[53959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:31:17 standalone sudo[53959]: pam_unix(sudo:session): session closed for user root
Dec  2 14:32:17 standalone sudo[55313]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:32:17 standalone sudo[55313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:32:17 standalone sudo[55313]: pam_unix(sudo:session): session closed for user root
Dec  2 14:32:17 standalone sudo[55344]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:32:17 standalone sudo[55344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:32:17 standalone sudo[55344]: pam_unix(sudo:session): session closed for user root
Dec  2 14:32:18 standalone sudo[55395]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:32:18 standalone sudo[55395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:32:18 standalone sudo[55395]: pam_unix(sudo:session): session closed for user root
Dec  2 14:32:44 standalone groupadd[55921]: group added to /etc/group: name=haclient, GID=189
Dec  2 14:32:44 standalone groupadd[55921]: group added to /etc/gshadow: name=haclient
Dec  2 14:32:44 standalone groupadd[55921]: new group: name=haclient, GID=189
Dec  2 14:32:44 standalone useradd[55928]: new user: name=hacluster, UID=189, GID=189, home=/home/hacluster, shell=/sbin/nologin, from=none
Dec  2 14:32:45 standalone sshd[46506]: Received signal 15; terminating.
Dec  2 14:32:45 standalone sshd[55953]: Server listening on 0.0.0.0 port 22.
Dec  2 14:32:45 standalone sshd[55953]: Server listening on :: port 22.
Dec  2 14:32:57 standalone usermod[57222]: add 'hacluster' to group 'haclient'
Dec  2 14:32:57 standalone usermod[57222]: add 'hacluster' to shadow group 'haclient'
Dec  2 14:33:18 standalone sudo[57781]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:33:18 standalone sudo[57781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:33:18 standalone sudo[57781]: pam_unix(sudo:session): session closed for user root
Dec  2 14:33:18 standalone sudo[57796]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:33:18 standalone sudo[57796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:33:18 standalone sudo[57796]: pam_unix(sudo:session): session closed for user root
Dec  2 14:33:18 standalone sudo[57841]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:33:18 standalone sudo[57841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:33:18 standalone sudo[57841]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:06 standalone runuser[63163]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:34:06 standalone runuser[63163]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:34:06 standalone runuser[63364]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:34:07 standalone runuser[63364]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:34:18 standalone sudo[64542]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:34:18 standalone sudo[64542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:34:18 standalone sudo[64542]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:19 standalone sudo[64559]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:34:19 standalone sudo[64559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:34:19 standalone sudo[64559]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:19 standalone sudo[64681]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:34:19 standalone sudo[64681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:34:19 standalone sudo[64681]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:24 standalone sudo[65048]: memcached : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:34:24 standalone sudo[65048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42457)
Dec  2 14:34:24 standalone sudo[65048]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:25 standalone sudo[65230]:    root : PWD=/ ; USER=mysql ; COMMAND=/usr/local/bin/kolla_extend_start
Dec  2 14:34:25 standalone sudo[65230]: pam_unix(sudo:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:34:27 standalone sudo[65590]:   mysql : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_security_reset
Dec  2 14:34:27 standalone sudo[65590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42434)
Dec  2 14:34:27 standalone sudo[65590]: pam_unix(sudo:session): session closed for user root
Dec  2 14:34:28 standalone sudo[65230]: pam_unix(sudo:session): session closed for user mysql
Dec  2 14:35:18 standalone sudo[67442]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:35:18 standalone sudo[67442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:18 standalone sudo[67442]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:18 standalone sudo[67469]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 14:35:18 standalone sudo[67469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:18 standalone sudo[67469]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:19 standalone sudo[67526]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:35:19 standalone sudo[67526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:19 standalone sudo[67526]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:19 standalone sudo[67545]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 14:35:19 standalone sudo[67545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:20 standalone sudo[67545]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:20 standalone sudo[67771]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:35:20 standalone sudo[67771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:20 standalone sudo[67771]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:20 standalone sudo[67805]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:35:20 standalone sudo[67805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:21 standalone sudo[67805]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:21 standalone sudo[67871]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:35:21 standalone sudo[67871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:21 standalone sudo[67871]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:21 standalone sudo[67888]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 _orch deploy --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c
Dec  2 14:35:21 standalone sudo[67888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:23 standalone sudo[67888]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:23 standalone sudo[68256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:35:23 standalone sudo[68256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:23 standalone sudo[68256]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:23 standalone sudo[68272]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:35:23 standalone sudo[68272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:23 standalone sudo[68272]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:23 standalone sudo[68288]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 14:35:23 standalone sudo[68288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:24 standalone sudo[68288]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:25 standalone sudo[68536]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:35:25 standalone sudo[68536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:25 standalone sudo[68536]: pam_unix(sudo:session): session closed for user root
Dec  2 14:35:25 standalone sudo[68568]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:35:25 standalone sudo[68568]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:35:25 standalone sudo[68568]: pam_unix(sudo:session): session closed for user root
Dec  2 14:36:25 standalone sudo[70161]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:36:25 standalone sudo[70161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:36:25 standalone sudo[70161]: pam_unix(sudo:session): session closed for user root
Dec  2 14:36:25 standalone sudo[70212]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:36:25 standalone sudo[70212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:36:26 standalone sudo[70212]: pam_unix(sudo:session): session closed for user root
Dec  2 14:36:26 standalone sudo[70374]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:36:26 standalone sudo[70374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:36:26 standalone sudo[70374]: pam_unix(sudo:session): session closed for user root
Dec  2 14:37:07 standalone sudo[71966]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:37:07 standalone sudo[71966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:37:07 standalone sudo[71966]: pam_unix(sudo:session): session closed for user root
Dec  2 14:37:26 standalone sudo[72544]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:37:26 standalone sudo[72544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:37:26 standalone sudo[72544]: pam_unix(sudo:session): session closed for user root
Dec  2 14:37:26 standalone sudo[72600]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:37:26 standalone sudo[72600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:37:26 standalone sudo[72600]: pam_unix(sudo:session): session closed for user root
Dec  2 14:37:27 standalone sudo[72697]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:37:27 standalone sudo[72697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:37:27 standalone sudo[72697]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:04 standalone sudo[73889]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:38:04 standalone sudo[73889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:38:04 standalone sudo[73889]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:11 standalone sudo[74531]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:38:11 standalone sudo[74531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:38:11 standalone sudo[74531]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:13 standalone runuser[74856]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:13 standalone runuser[74856]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:13 standalone runuser[74872]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:13 standalone runuser[74872]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:13 standalone runuser[74888]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:13 standalone runuser[74888]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:14 standalone runuser[74920]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:15 standalone runuser[74920]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:20 standalone runuser[75815]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:20 standalone runuser[75815]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:20 standalone runuser[75831]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:20 standalone runuser[75831]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:20 standalone runuser[75847]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:20 standalone runuser[75847]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 14:38:20 standalone runuser[75864]: pam_unix(runuser-l:session): session opened for user mysql(uid=42434) by (uid=0)
Dec  2 14:38:27 standalone sudo[76438]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:38:27 standalone sudo[76438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:38:27 standalone sudo[76438]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:27 standalone sudo[76453]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:38:27 standalone sudo[76453]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:38:27 standalone sudo[76453]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:27 standalone sudo[76544]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:38:27 standalone sudo[76544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:38:27 standalone sudo[76544]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:35 standalone sudo[76798]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:38:35 standalone sudo[76798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:38:35 standalone sudo[76798]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:40 standalone sudo[77463]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:38:40 standalone sudo[77463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:38:40 standalone sudo[77463]: pam_unix(sudo:session): session closed for user root
Dec  2 14:38:42 standalone runuser[77669]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:43 standalone runuser[77669]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:44 standalone runuser[77787]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:44 standalone runuser[77787]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:45 standalone runuser[77923]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:45 standalone runuser[77928]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:50 standalone runuser[77928]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:50 standalone runuser[78405]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:51 standalone runuser[78405]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:51 standalone runuser[78465]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:52 standalone runuser[78465]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:52 standalone runuser[78532]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:53 standalone runuser[78532]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:53 standalone runuser[78592]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:54 standalone runuser[78592]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:54 standalone runuser[78654]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:54 standalone runuser[78654]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:55 standalone runuser[78724]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:55 standalone runuser[78724]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:38:55 standalone runuser[78790]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:38:56 standalone runuser[78790]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:04 standalone sudo[79274]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:39:04 standalone sudo[79274]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:39:04 standalone sudo[79274]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:06 standalone runuser[79610]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:07 standalone runuser[79610]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:07 standalone runuser[79717]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:08 standalone runuser[79717]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:08 standalone runuser[79842]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:09 standalone runuser[79842]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:10 standalone sudo[80179]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:39:10 standalone sudo[80179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:39:10 standalone sudo[80179]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:12 standalone su[80563]: pam_unix(su:session): session opened for user redis(uid=42460) by (uid=0)
Dec  2 14:39:12 standalone su[80563]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:39:12 standalone su[80563]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:39:12 standalone su[80563]: pam_unix(su:session): session closed for user redis
Dec  2 14:39:19 standalone runuser[81427]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:20 standalone runuser[81427]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:20 standalone runuser[81493]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:21 standalone runuser[81493]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:21 standalone runuser[81552]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:21 standalone runuser[81552]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:28 standalone sudo[81955]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:39:28 standalone sudo[81955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:39:28 standalone sudo[81955]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:28 standalone sudo[81970]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:39:28 standalone sudo[81970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:39:28 standalone sudo[81970]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:28 standalone sudo[82061]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:39:28 standalone sudo[82061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:39:28 standalone sudo[82061]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:32 standalone runuser[82146]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:33 standalone runuser[82146]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:33 standalone runuser[82218]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:34 standalone runuser[82218]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:34 standalone runuser[82292]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:34 standalone runuser[82292]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:45 standalone runuser[83668]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:45 standalone runuser[83668]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:46 standalone runuser[84182]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:46 standalone runuser[84182]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:46 standalone runuser[84772]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:47 standalone runuser[84772]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:49 standalone runuser[85487]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:50 standalone runuser[85487]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:50 standalone runuser[85540]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:50 standalone runuser[85540]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:51 standalone runuser[85761]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:52 standalone runuser[85761]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:52 standalone runuser[85836]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:53 standalone runuser[85836]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:53 standalone runuser[85932]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:53 standalone runuser[85932]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:53 standalone runuser[85997]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:54 standalone runuser[85997]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:54 standalone runuser[86049]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:55 standalone runuser[86049]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:55 standalone runuser[86103]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:56 standalone runuser[86103]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:56 standalone runuser[86155]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:57 standalone runuser[86155]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:58 standalone runuser[86733]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:58 standalone sudo[86747]:   mysql : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:39:58 standalone sudo[86747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42434)
Dec  2 14:39:58 standalone sudo[86747]: pam_unix(sudo:session): session closed for user root
Dec  2 14:39:58 standalone runuser[86733]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:59 standalone runuser[87080]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:39:59 standalone runuser[87080]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:39:59 standalone runuser[87236]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:00 standalone runuser[87236]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:10 standalone runuser[88262]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:11 standalone runuser[88262]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:11 standalone runuser[88382]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:11 standalone sudo[88397]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:40:11 standalone sudo[88397]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:40:11 standalone sudo[88397]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:12 standalone runuser[88382]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:12 standalone runuser[88566]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:13 standalone runuser[88566]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:18 standalone sudo[89064]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:40:18 standalone sudo[89064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:40:18 standalone sudo[89064]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:23 standalone runuser[89525]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:24 standalone runuser[89525]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:24 standalone runuser[89601]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:25 standalone runuser[89601]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:25 standalone sudo[89713]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:40:25 standalone sudo[89713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:40:25 standalone runuser[89716]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:25 standalone sudo[89713]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:26 standalone runuser[89716]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:28 standalone sudo[90366]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:40:28 standalone sudo[90366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:40:28 standalone sudo[90366]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:28 standalone sudo[90388]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:40:28 standalone sudo[90388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:40:29 standalone sudo[90388]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:29 standalone sudo[90549]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:40:29 standalone sudo[90549]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:40:29 standalone sudo[90549]: pam_unix(sudo:session): session closed for user root
Dec  2 14:40:36 standalone runuser[90796]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:37 standalone runuser[90796]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:37 standalone runuser[90983]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:38 standalone runuser[90983]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:38 standalone runuser[91088]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:38 standalone runuser[91088]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:45 standalone sshd[91434]: error: kex_exchange_identification: read: Connection reset by peer
Dec  2 14:40:45 standalone sshd[91434]: Connection reset by 45.140.17.97 port 41891
Dec  2 14:40:49 standalone runuser[91688]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:49 standalone runuser[91688]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:50 standalone runuser[91792]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:50 standalone runuser[91792]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:40:50 standalone runuser[91890]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:40:51 standalone runuser[91890]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:02 standalone runuser[92824]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:02 standalone runuser[92824]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:02 standalone runuser[92902]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:03 standalone sudo[93232]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:03 standalone sudo[93232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:03 standalone sudo[93249]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:03 standalone sudo[93249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:03 standalone sudo[93232]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:03 standalone sudo[93249]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:03 standalone runuser[92902]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:03 standalone su[93313]: pam_unix(su:session): session opened for user aodh(uid=42402) by (uid=0)
Dec  2 14:41:03 standalone su[93313]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:03 standalone su[93313]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:03 standalone runuser[93317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:03 standalone su[93333]: pam_unix(su:session): session opened for user cinder(uid=42407) by (uid=0)
Dec  2 14:41:03 standalone su[93333]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:03 standalone su[93333]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:04 standalone su[93524]: pam_unix(su:session): session opened for user glance(uid=42415) by (uid=0)
Dec  2 14:41:04 standalone su[93524]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:04 standalone su[93524]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:04 standalone sudo[93530]:  glance : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:04 standalone sudo[93530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42415)
Dec  2 14:41:04 standalone sudo[93532]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:04 standalone sudo[93532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:04 standalone sudo[93532]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:04 standalone sudo[93530]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:04 standalone sudo[93553]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:04 standalone sudo[93553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:04 standalone su[93573]: pam_unix(su:session): session opened for user heat(uid=42418) by (uid=0)
Dec  2 14:41:04 standalone su[93573]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:04 standalone su[93573]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:04 standalone sudo[93553]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:04 standalone runuser[93317]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:04 standalone sudo[93710]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:04 standalone sudo[93710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:04 standalone sudo[93710]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:05 standalone sudo[93720]:    root : PWD=/ ; USER=keystone ; COMMAND=/usr/bin/keystone-manage db_sync
Dec  2 14:41:05 standalone sudo[93720]: pam_unix(sudo:session): session opened for user keystone(uid=42425) by (uid=0)
Dec  2 14:41:05 standalone su[93313]: pam_unix(su:session): session closed for user aodh
Dec  2 14:41:06 standalone sudo[93843]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:06 standalone sudo[93843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:06 standalone sudo[93843]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:06 standalone su[93848]: pam_unix(su:session): session opened for user manila(uid=42429) by (uid=0)
Dec  2 14:41:06 standalone su[93848]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:06 standalone su[93848]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:09 standalone su[93573]: pam_unix(su:session): session closed for user heat
Dec  2 14:41:10 standalone sudo[94333]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:10 standalone sudo[94333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:10 standalone sudo[94333]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:12 standalone su[93333]: pam_unix(su:session): session closed for user cinder
Dec  2 14:41:13 standalone sudo[94486]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:13 standalone sudo[94486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:13 standalone sudo[94486]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:13 standalone su[94491]: pam_unix(su:session): session opened for user nova(uid=42436) by (uid=0)
Dec  2 14:41:13 standalone su[94491]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:13 standalone su[94491]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:15 standalone runuser[94514]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:15 standalone runuser[94514]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:16 standalone runuser[94583]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:16 standalone runuser[94583]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:16 standalone runuser[94637]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:17 standalone runuser[94637]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:20 standalone su[94491]: pam_unix(su:session): session closed for user nova
Dec  2 14:41:22 standalone sudo[95248]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:22 standalone sudo[95248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:22 standalone sudo[95248]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:22 standalone sudo[95405]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:22 standalone sudo[95405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:22 standalone sudo[95405]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:22 standalone su[95410]: pam_unix(su:session): session opened for user octavia(uid=42437) by (uid=0)
Dec  2 14:41:22 standalone su[95410]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:22 standalone su[95410]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:23 standalone su[93524]: pam_unix(su:session): session closed for user glance
Dec  2 14:41:28 standalone runuser[95970]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:28 standalone su[93848]: pam_unix(su:session): session closed for user manila
Dec  2 14:41:28 standalone runuser[95970]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:29 standalone runuser[96116]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:29 standalone runuser[96116]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:29 standalone runuser[96260]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:29 standalone sudo[96275]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:41:29 standalone sudo[96275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:41:29 standalone sudo[96275]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:29 standalone sudo[96335]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:41:29 standalone sudo[96335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:41:30 standalone sudo[96335]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:30 standalone runuser[96260]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:30 standalone sudo[96452]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:41:30 standalone sudo[96452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:41:30 standalone sudo[96452]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:31 standalone sudo[93720]: pam_unix(sudo:session): session closed for user keystone
Dec  2 14:41:34 standalone su[95410]: pam_unix(su:session): session closed for user octavia
Dec  2 14:41:36 standalone sudo[96826]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:36 standalone sudo[96826]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:36 standalone sudo[96830]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:36 standalone sudo[96830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:36 standalone sudo[96826]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:36 standalone sudo[96830]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:36 standalone sudo[96846]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:36 standalone sudo[96846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:36 standalone su[96861]: pam_unix(su:session): session opened for user placement(uid=998) by (uid=0)
Dec  2 14:41:36 standalone su[96861]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:36 standalone su[96861]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:36 standalone su[96870]: pam_unix(su:session): session opened for user nova(uid=42436) by (uid=0)
Dec  2 14:41:36 standalone su[96870]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:36 standalone su[96870]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:36 standalone sudo[96846]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:38 standalone su[96861]: pam_unix(su:session): session closed for user placement
Dec  2 14:41:41 standalone runuser[97295]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:41 standalone runuser[97295]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:42 standalone runuser[97365]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:42 standalone runuser[97365]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:42 standalone runuser[97419]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:43 standalone su[96870]: pam_unix(su:session): session closed for user nova
Dec  2 14:41:43 standalone runuser[97419]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:43 standalone sudo[97700]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[97718]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[97718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[97719]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[97700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[97719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[97718]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:44 standalone sudo[97700]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:44 standalone sudo[97719]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:44 standalone sudo[98072]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[98072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[98067]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[98067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[98087]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:44 standalone sudo[98087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:44 standalone sudo[98072]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:45 standalone sudo[98067]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:45 standalone sudo[98087]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:45 standalone su[98105]: pam_unix(su:session): session opened for user barbican(uid=42403) by (uid=0)
Dec  2 14:41:45 standalone su[98105]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:45 standalone su[98105]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:45 standalone su[98127]: pam_unix(su:session): session opened for user nova(uid=42436) by (uid=0)
Dec  2 14:41:45 standalone su[98127]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:45 standalone su[98127]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:46 standalone su[98105]: pam_unix(su:session): session closed for user barbican
Dec  2 14:41:54 standalone runuser[98546]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:54 standalone runuser[98546]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:55 standalone runuser[98615]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:55 standalone runuser[98615]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:55 standalone runuser[98677]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:41:56 standalone runuser[98677]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:41:56 standalone su[98127]: pam_unix(su:session): session closed for user nova
Dec  2 14:41:57 standalone sudo[98964]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:57 standalone sudo[98964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:57 standalone sudo[98964]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:57 standalone sudo[99001]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:57 standalone sudo[99001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:57 standalone su[99062]: pam_unix(su:session): session opened for user barbican(uid=42403) by (uid=0)
Dec  2 14:41:57 standalone su[99062]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:41:57 standalone su[99062]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:41:57 standalone sudo[99001]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:58 standalone su[99062]: pam_unix(su:session): session closed for user barbican
Dec  2 14:41:59 standalone sudo[99411]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:59 standalone sudo[99411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:59 standalone sudo[99408]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:59 standalone sudo[99408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:41:59 standalone sudo[99411]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:59 standalone sudo[99408]: pam_unix(sudo:session): session closed for user root
Dec  2 14:41:59 standalone sudo[99656]: barbican : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:41:59 standalone sudo[99656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42403)
Dec  2 14:41:59 standalone sudo[99656]: pam_unix(sudo:session): session closed for user root
Dec  2 14:42:00 standalone sudo[99837]: barbican : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:42:00 standalone sudo[99837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42403)
Dec  2 14:42:00 standalone sudo[99837]: pam_unix(sudo:session): session closed for user root
Dec  2 14:42:00 standalone sshd[99974]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 14:42:07 standalone runuser[100130]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:07 standalone runuser[100130]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:07 standalone runuser[100249]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:08 standalone runuser[100249]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:08 standalone runuser[100401]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:09 standalone runuser[100401]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:19 standalone runuser[101257]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:20 standalone runuser[101257]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:20 standalone runuser[101421]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:21 standalone runuser[101421]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:21 standalone runuser[101581]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:22 standalone runuser[101581]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:30 standalone sudo[102654]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:42:31 standalone sudo[102654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:42:31 standalone sudo[102654]: pam_unix(sudo:session): session closed for user root
Dec  2 14:42:31 standalone sudo[102734]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:42:31 standalone sudo[102734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:42:31 standalone sudo[102734]: pam_unix(sudo:session): session closed for user root
Dec  2 14:42:31 standalone sudo[102854]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:42:31 standalone sudo[102854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:42:31 standalone sudo[102854]: pam_unix(sudo:session): session closed for user root
Dec  2 14:42:32 standalone runuser[102989]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:33 standalone runuser[102989]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:33 standalone runuser[103084]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:34 standalone runuser[103084]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:34 standalone runuser[103157]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:35 standalone runuser[103157]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:45 standalone runuser[103761]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:46 standalone runuser[103761]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:46 standalone runuser[103839]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:47 standalone runuser[103839]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:47 standalone runuser[103917]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:48 standalone runuser[103917]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:58 standalone runuser[104586]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:42:59 standalone runuser[104586]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:42:59 standalone runuser[104699]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:00 standalone runuser[104699]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:00 standalone runuser[104845]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:00 standalone runuser[104845]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:11 standalone runuser[105579]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:12 standalone runuser[105579]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:12 standalone runuser[105717]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:13 standalone runuser[105717]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:13 standalone runuser[105815]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:14 standalone runuser[105815]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:24 standalone runuser[106497]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:25 standalone runuser[106497]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:25 standalone runuser[106609]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:26 standalone runuser[106609]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:26 standalone runuser[106708]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:26 standalone runuser[106708]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:31 standalone sudo[107385]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:43:31 standalone sudo[107385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:43:31 standalone sudo[107385]: pam_unix(sudo:session): session closed for user root
Dec  2 14:43:31 standalone sudo[107403]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:43:31 standalone sudo[107403]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:43:32 standalone sudo[107403]: pam_unix(sudo:session): session closed for user root
Dec  2 14:43:32 standalone sudo[107567]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:43:32 standalone sudo[107567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:43:32 standalone sudo[107567]: pam_unix(sudo:session): session closed for user root
Dec  2 14:43:37 standalone runuser[107671]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:38 standalone runuser[107671]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:38 standalone runuser[107816]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:38 standalone runuser[107816]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:39 standalone runuser[108020]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:39 standalone runuser[108020]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:50 standalone runuser[108785]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:51 standalone runuser[108785]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:51 standalone runuser[108931]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:52 standalone runuser[108931]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:43:52 standalone runuser[108993]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:43:52 standalone runuser[108993]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:03 standalone runuser[109911]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:04 standalone runuser[109911]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:04 standalone runuser[109980]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:05 standalone runuser[109980]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:05 standalone runuser[110034]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:05 standalone runuser[110034]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:11 standalone sshd[110434]: Invalid user  from 64.62.156.227 port 20667
Dec  2 14:44:15 standalone sshd[110434]: Connection closed by invalid user  64.62.156.227 port 20667 [preauth]
Dec  2 14:44:16 standalone runuser[110700]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:17 standalone runuser[110700]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:17 standalone runuser[110812]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:18 standalone runuser[110812]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:18 standalone runuser[110936]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:18 standalone runuser[110936]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:29 standalone runuser[111640]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:30 standalone runuser[111640]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:30 standalone runuser[111803]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:30 standalone runuser[111803]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:30 standalone runuser[111979]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:31 standalone runuser[111979]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:32 standalone sudo[112170]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:44:32 standalone sudo[112170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:44:32 standalone sudo[112170]: pam_unix(sudo:session): session closed for user root
Dec  2 14:44:33 standalone sudo[112192]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:44:33 standalone sudo[112192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:44:33 standalone sudo[112192]: pam_unix(sudo:session): session closed for user root
Dec  2 14:44:33 standalone sudo[112293]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:44:33 standalone sudo[112293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:44:33 standalone sudo[112293]: pam_unix(sudo:session): session closed for user root
Dec  2 14:44:33 standalone sudo[112308]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks
Dec  2 14:44:33 standalone sudo[112308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:44:34 standalone sudo[112308]: pam_unix(sudo:session): session closed for user root
Dec  2 14:44:34 standalone sudo[112370]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:44:34 standalone sudo[112370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:44:34 standalone sudo[112370]: pam_unix(sudo:session): session closed for user root
Dec  2 14:44:34 standalone sshd[111922]: Invalid user 0 from 185.246.128.170 port 54649
Dec  2 14:44:35 standalone sshd[111922]: Disconnecting invalid user 0 185.246.128.170 port 54649: Change of username or service not allowed: (0,ssh-connection) -> (odoo17,ssh-connection) [preauth]
Dec  2 14:44:42 standalone runuser[112837]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:42 standalone runuser[112837]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:43 standalone runuser[112912]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:43 standalone runuser[112912]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:43 standalone runuser[113068]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:44 standalone runuser[113068]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:44 standalone sshd[112533]: Invalid user odoo17 from 185.246.128.170 port 35279
Dec  2 14:44:45 standalone sshd[112533]: Disconnecting invalid user odoo17 185.246.128.170 port 35279: Change of username or service not allowed: (odoo17,ssh-connection) -> (system,ssh-connection) [preauth]
Dec  2 14:44:55 standalone runuser[113709]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:55 standalone runuser[113709]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:55 standalone runuser[113778]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:56 standalone runuser[113778]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:56 standalone runuser[113832]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:44:57 standalone runuser[113832]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:44:58 standalone sshd[113528]: Invalid user system from 185.246.128.170 port 41232
Dec  2 14:44:58 standalone sshd[113528]: Disconnecting invalid user system 185.246.128.170 port 41232: Change of username or service not allowed: (system,ssh-connection) -> (ubnt,ssh-connection) [preauth]
Dec  2 14:45:08 standalone runuser[114660]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:08 standalone runuser[114660]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:08 standalone runuser[114763]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:08 standalone sshd[114180]: Invalid user ubnt from 185.246.128.170 port 20934
Dec  2 14:45:09 standalone runuser[114763]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:09 standalone runuser[114869]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:10 standalone runuser[114869]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:11 standalone sshd[114180]: Disconnecting invalid user ubnt 185.246.128.170 port 20934: Change of username or service not allowed: (ubnt,ssh-connection) -> (array,ssh-connection) [preauth]
Dec  2 14:45:16 standalone sshd[115235]: Invalid user array from 185.246.128.170 port 46726
Dec  2 14:45:16 standalone sshd[115235]: Disconnecting invalid user array 185.246.128.170 port 46726: Change of username or service not allowed: (array,ssh-connection) -> (a,ssh-connection) [preauth]
Dec  2 14:45:20 standalone runuser[115660]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:21 standalone runuser[115660]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:21 standalone runuser[115792]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:22 standalone runuser[115792]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:22 standalone runuser[115854]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:23 standalone runuser[115854]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:23 standalone sshd[115359]: Invalid user a from 185.246.128.170 port 60269
Dec  2 14:45:24 standalone sshd[115359]: Disconnecting invalid user a 185.246.128.170 port 60269: Change of username or service not allowed: (a,ssh-connection) -> (marek,ssh-connection) [preauth]
Dec  2 14:45:24 standalone sshd[115986]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 14:45:33 standalone runuser[116662]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:34 standalone sudo[116754]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:45:34 standalone sudo[116754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:34 standalone sudo[116754]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:34 standalone sudo[116779]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 14:45:34 standalone sudo[116779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:34 standalone runuser[116662]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:34 standalone runuser[116815]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:34 standalone sudo[116779]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:34 standalone sudo[116896]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:45:34 standalone sudo[116896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:34 standalone sudo[116896]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:34 standalone sudo[116921]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 14:45:34 standalone sudo[116921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:35 standalone sshd[115996]: Invalid user marek from 185.246.128.170 port 64030
Dec  2 14:45:35 standalone runuser[116815]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:35 standalone runuser[116981]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:35 standalone sshd[115996]: Disconnecting invalid user marek 185.246.128.170 port 64030: Change of username or service not allowed: (marek,ssh-connection) -> (peter,ssh-connection) [preauth]
Dec  2 14:45:36 standalone runuser[116981]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:36 standalone sudo[116921]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:36 standalone sudo[117233]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:45:36 standalone sudo[117233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:36 standalone sudo[117233]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:36 standalone sudo[117249]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:45:36 standalone sudo[117249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:37 standalone sudo[117249]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:37 standalone sudo[117378]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:45:37 standalone sudo[117378]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:37 standalone sudo[117378]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:37 standalone sudo[117394]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 14:45:37 standalone sudo[117394]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:40 standalone sudo[117394]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:40 standalone sudo[119448]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:45:40 standalone sudo[119448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:45:40 standalone sudo[119448]: pam_unix(sudo:session): session closed for user root
Dec  2 14:45:41 standalone sshd[117392]: Invalid user peter from 185.246.128.170 port 1873
Dec  2 14:45:43 standalone sshd[117392]: Disconnecting invalid user peter 185.246.128.170 port 1873: Change of username or service not allowed: (peter,ssh-connection) -> (manager,ssh-connection) [preauth]
Dec  2 14:45:46 standalone runuser[119851]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:47 standalone runuser[119851]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:47 standalone runuser[119932]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:48 standalone runuser[119932]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:48 standalone runuser[120000]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:45:49 standalone runuser[120000]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:45:58 standalone sshd[119982]: Invalid user manager from 185.246.128.170 port 58418
Dec  2 14:45:59 standalone runuser[120944]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:00 standalone runuser[120944]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:00 standalone runuser[121113]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:01 standalone runuser[121113]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:01 standalone runuser[121218]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:01 standalone runuser[121218]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:03 standalone sshd[119982]: Disconnecting invalid user manager 185.246.128.170 port 58418: Change of username or service not allowed: (manager,ssh-connection) -> (git,ssh-connection) [preauth]
Dec  2 14:46:12 standalone runuser[122021]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:13 standalone runuser[122021]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:13 standalone runuser[122096]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:14 standalone runuser[122096]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:14 standalone runuser[122171]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:14 standalone runuser[122171]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:15 standalone sshd[121707]: Invalid user git from 185.246.128.170 port 13384
Dec  2 14:46:16 standalone sshd[121707]: Disconnecting invalid user git 185.246.128.170 port 13384: Change of username or service not allowed: (git,ssh-connection) -> (intern,ssh-connection) [preauth]
Dec  2 14:46:25 standalone runuser[123141]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:25 standalone sudo[123381]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:25 standalone sudo[123381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:25 standalone sudo[123384]:    aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:25 standalone sudo[123384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402)
Dec  2 14:46:25 standalone sudo[123381]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:25 standalone sudo[123384]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:25 standalone sudo[123427]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:25 standalone sudo[123427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:25 standalone sudo[123432]:    aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:25 standalone sudo[123432]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402)
Dec  2 14:46:25 standalone sshd[122422]: Invalid user intern from 185.246.128.170 port 47869
Dec  2 14:46:26 standalone sudo[123427]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:26 standalone sudo[123432]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:26 standalone runuser[123141]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:26 standalone runuser[123640]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:26 standalone sudo[123684]:    aodh : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:26 standalone sudo[123684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42402)
Dec  2 14:46:26 standalone sudo[123684]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:26 standalone sudo[123901]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:26 standalone sudo[123901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405)
Dec  2 14:46:26 standalone sudo[123903]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:26 standalone sudo[123903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:26 standalone sudo[123903]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:27 standalone sudo[123901]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:27 standalone sudo[123975]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:27 standalone sudo[123975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405)
Dec  2 14:46:27 standalone sudo[123975]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:27 standalone sudo[124066]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:27 standalone sudo[124066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:27 standalone sudo[124066]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:27 standalone runuser[123640]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:27 standalone runuser[124233]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:28 standalone sudo[124421]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:28 standalone sudo[124421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:28 standalone sudo[124471]:  cinder : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:28 standalone sudo[124471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42407)
Dec  2 14:46:28 standalone sudo[124421]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:28 standalone sudo[124471]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:28 standalone sudo[124556]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:28 standalone sudo[124556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:28 standalone sudo[124556]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:29 standalone sudo[124871]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:29 standalone sudo[124871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:29 standalone sudo[124871]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:29 standalone sudo[124993]:    heat : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:29 standalone sudo[124993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42418)
Dec  2 14:46:29 standalone runuser[124233]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:29 standalone sudo[124993]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:29 standalone sudo[125142]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:29 standalone sudo[125137]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:29 standalone sudo[125142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:29 standalone sudo[125137]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:29 standalone sudo[125137]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:29 standalone sudo[125142]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:29 standalone sudo[125287]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:29 standalone sudo[125287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:30 standalone sudo[125287]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:30 standalone sshd[122422]: Disconnecting invalid user intern 185.246.128.170 port 47869: Change of username or service not allowed: (intern,ssh-connection) -> (openvswitch,ssh-connection) [preauth]
Dec  2 14:46:30 standalone sudo[125474]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:30 standalone sudo[125474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:30 standalone sudo[125474]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:30 standalone sudo[125583]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:30 standalone sudo[125583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:46:30 standalone sudo[125601]:  manila : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:30 standalone sudo[125601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42429)
Dec  2 14:46:30 standalone sudo[125583]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:30 standalone sudo[125601]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:30 standalone sudo[125686]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:30 standalone sudo[125686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:46:30 standalone sudo[125686]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:31 standalone sudo[126054]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:31 standalone sudo[126054]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:31 standalone sudo[126068]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:31 standalone sudo[126068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:46:31 standalone sudo[126068]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:31 standalone sudo[126054]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:32 standalone sshd[6]: Server listening on 0.0.0.0 port 2022.
Dec  2 14:46:32 standalone sshd[6]: Server listening on :: port 2022.
Dec  2 14:46:32 standalone sudo[126312]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:32 standalone sudo[126312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:32 standalone sudo[126312]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:32 standalone sudo[126406]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:32 standalone sudo[126406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:33 standalone sudo[126444]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:33 standalone sudo[126444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:46:33 standalone sudo[126406]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:33 standalone sudo[126444]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:33 standalone sudo[126485]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:33 standalone sudo[126485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:33 standalone sudo[126485]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:33 standalone sudo[126760]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:33 standalone sudo[126760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:33 standalone sudo[126760]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:34 standalone sudo[126815]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:34 standalone sudo[126815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:34 standalone sudo[126815]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:34 standalone sudo[126879]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:34 standalone sudo[126879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:34 standalone sudo[126884]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:34 standalone sudo[126884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:34 standalone sudo[126884]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:34 standalone sudo[126879]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:36 standalone sudo[127416]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:36 standalone sudo[127416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:37 standalone sudo[127416]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:37 standalone sudo[127452]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:37 standalone sudo[127452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:46:37 standalone sudo[127452]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:37 standalone sudo[127818]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:37 standalone sudo[127818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:37 standalone sudo[127832]:  glance : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:37 standalone sudo[127832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42415)
Dec  2 14:46:37 standalone sudo[127818]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:38 standalone sudo[127871]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:38 standalone sudo[127871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:38 standalone sudo[127832]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:38 standalone sudo[127871]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:38 standalone sudo[127947]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:38 standalone sudo[127947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:38 standalone sudo[127947]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:38 standalone sudo[127992]:  glance : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:38 standalone sudo[127992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42415)
Dec  2 14:46:38 standalone sudo[127992]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:38 standalone sudo[128297]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/networking-ovn/networking-ovn-metadata-agent.ini --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmph0e1pm0e/privsep.sock
Dec  2 14:46:38 standalone sudo[128297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:46:39 standalone sudo[128327]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:39 standalone sudo[128327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:46:39 standalone sudo[128327]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:39 standalone sudo[128346]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:39 standalone sudo[128346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:39 standalone sudo[128346]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:39 standalone su[128399]: pam_unix(su:session): session opened for user placement(uid=998) by (uid=0)
Dec  2 14:46:39 standalone su[128399]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:46:39 standalone su[128399]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:46:39 standalone sudo[128416]:   swift : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:39 standalone sudo[128416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42445)
Dec  2 14:46:39 standalone sudo[128414]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:39 standalone sudo[128414]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:39 standalone sudo[128416]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:39 standalone sudo[128414]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:39 standalone sudo[128297]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:39 standalone runuser[128642]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:40 standalone runuser[128642]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:40 standalone sudo[128787]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:46:40 standalone sudo[128787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:46:40 standalone sudo[128787]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:40 standalone sudo[128802]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:46:40 standalone sudo[128802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:46:40 standalone runuser[128815]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:41 standalone sudo[128802]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:41 standalone sudo[128995]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:46:41 standalone sudo[128995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:46:41 standalone sudo[128995]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:41 standalone runuser[128815]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:41 standalone runuser[129019]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:41 standalone su[128399]: pam_unix(su:session): session closed for user placement
Dec  2 14:46:42 standalone sudo[129221]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:42 standalone sudo[129221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:42 standalone runuser[129019]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:42 standalone sudo[129221]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:42 standalone su[129227]: pam_unix(su:session): session opened for user nova(uid=42436) by (uid=0)
Dec  2 14:46:42 standalone su[129227]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:46:42 standalone su[129227]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:46:43 standalone su[129227]: pam_unix(su:session): session closed for user nova
Dec  2 14:46:44 standalone sudo[129366]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:44 standalone sudo[129366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:46:44 standalone sudo[129366]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:45 standalone sudo[129595]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:45 standalone sudo[129595]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:46:45 standalone sudo[129617]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:46:45 standalone sudo[129595]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:45 standalone sudo[129617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:46:45 standalone sudo[129617]: pam_unix(sudo:session): session closed for user root
Dec  2 14:46:46 standalone sshd[128211]: Disconnecting authenticating user openvswitch 185.246.128.170 port 44463: Change of username or service not allowed: (openvswitch,ssh-connection) -> (astra,ssh-connection) [preauth]
Dec  2 14:46:52 standalone runuser[130214]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:53 standalone runuser[130214]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:53 standalone runuser[130293]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:54 standalone runuser[130293]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:46:54 standalone runuser[130353]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:46:55 standalone sshd[129847]: Invalid user astra from 185.246.128.170 port 33053
Dec  2 14:46:55 standalone sshd[129847]: Disconnecting invalid user astra 185.246.128.170 port 33053: Change of username or service not allowed: (astra,ssh-connection) -> (timothy,ssh-connection) [preauth]
Dec  2 14:46:55 standalone runuser[130353]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:02 standalone sshd[130564]: Invalid user timothy from 185.246.128.170 port 34854
Dec  2 14:47:04 standalone sshd[130564]: Disconnecting invalid user timothy 185.246.128.170 port 34854: Change of username or service not allowed: (timothy,ssh-connection) -> (cq,ssh-connection) [preauth]
Dec  2 14:47:05 standalone runuser[131645]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:06 standalone runuser[131645]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:06 standalone runuser[131811]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:07 standalone runuser[131811]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:07 standalone runuser[131877]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:07 standalone sshd[131764]: Invalid user cq from 185.246.128.170 port 53759
Dec  2 14:47:08 standalone runuser[131877]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:08 standalone sshd[131764]: Disconnecting invalid user cq 185.246.128.170 port 53759: Change of username or service not allowed: (cq,ssh-connection) -> (hugo,ssh-connection) [preauth]
Dec  2 14:47:13 standalone sshd[132081]: Invalid user hugo from 185.246.128.170 port 19390
Dec  2 14:47:13 standalone sshd[132081]: Disconnecting invalid user hugo 185.246.128.170 port 19390: Change of username or service not allowed: (hugo,ssh-connection) -> (hacluster,ssh-connection) [preauth]
Dec  2 14:47:13 standalone sshd[132502]: Connection closed by 3.82.130.45 port 56890 [preauth]
Dec  2 14:47:18 standalone runuser[132676]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:19 standalone runuser[132676]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:19 standalone runuser[132769]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:20 standalone runuser[132769]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:20 standalone runuser[132912]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:21 standalone runuser[132912]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:21 standalone sshd[132642]: Disconnecting authenticating user hacluster 185.246.128.170 port 8122: Change of username or service not allowed: (hacluster,ssh-connection) -> (minecraft,ssh-connection) [preauth]
Dec  2 14:47:27 standalone sshd[133266]: Invalid user minecraft from 185.246.128.170 port 6126
Dec  2 14:47:27 standalone sshd[133266]: Disconnecting invalid user minecraft 185.246.128.170 port 6126: Change of username or service not allowed: (minecraft,ssh-connection) -> (root,ssh-connection) [preauth]
Dec  2 14:47:31 standalone runuser[134393]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:32 standalone runuser[134393]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:32 standalone runuser[134518]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:33 standalone runuser[134518]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:33 standalone runuser[134765]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:34 standalone runuser[134765]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:41 standalone sudo[135751]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:47:41 standalone sudo[135751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:47:41 standalone sudo[135751]: pam_unix(sudo:session): session closed for user root
Dec  2 14:47:41 standalone sudo[135791]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:47:41 standalone sudo[135791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:47:42 standalone sudo[135791]: pam_unix(sudo:session): session closed for user root
Dec  2 14:47:42 standalone sudo[135997]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:47:42 standalone sudo[135997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:47:42 standalone sudo[135997]: pam_unix(sudo:session): session closed for user root
Dec  2 14:47:43 standalone sshd[133841]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 45558 ssh2 [preauth]
Dec  2 14:47:43 standalone sshd[133841]: Disconnecting authenticating user root 185.246.128.170 port 45558: Too many authentication failures [preauth]
Dec  2 14:47:44 standalone runuser[136152]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:45 standalone runuser[136152]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:45 standalone runuser[136279]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:46 standalone runuser[136279]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:46 standalone runuser[136385]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:46 standalone runuser[136385]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:57 standalone runuser[137279]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:58 standalone runuser[137279]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:58 standalone runuser[137494]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:58 standalone runuser[137494]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:47:58 standalone runuser[137633]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:47:59 standalone runuser[137633]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:03 standalone sshd[136808]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 32016 ssh2 [preauth]
Dec  2 14:48:03 standalone sshd[136808]: Disconnecting authenticating user root 185.246.128.170 port 32016: Too many authentication failures [preauth]
Dec  2 14:48:10 standalone runuser[139314]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:11 standalone runuser[139314]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:11 standalone runuser[139432]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:12 standalone runuser[139432]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:12 standalone runuser[139669]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:12 standalone runuser[139669]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:17 standalone sshd[138564]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 58164 ssh2 [preauth]
Dec  2 14:48:17 standalone sshd[138564]: Disconnecting authenticating user root 185.246.128.170 port 58164: Too many authentication failures [preauth]
Dec  2 14:48:23 standalone runuser[140566]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:24 standalone runuser[140566]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:24 standalone runuser[140635]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:24 standalone runuser[140635]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:25 standalone runuser[140750]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:25 standalone runuser[140750]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:31 standalone sshd[140117]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 12841 ssh2 [preauth]
Dec  2 14:48:31 standalone sshd[140117]: Disconnecting authenticating user root 185.246.128.170 port 12841: Too many authentication failures [preauth]
Dec  2 14:48:36 standalone runuser[142306]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:37 standalone runuser[142306]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:37 standalone runuser[142529]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:37 standalone runuser[142529]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:37 standalone runuser[142653]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:38 standalone runuser[142653]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:41 standalone sshd[142182]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 36040 ssh2 [preauth]
Dec  2 14:48:41 standalone sshd[142182]: Disconnecting authenticating user root 185.246.128.170 port 36040: Too many authentication failures [preauth]
Dec  2 14:48:42 standalone sudo[143296]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:48:42 standalone sudo[143296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:48:42 standalone sudo[143296]: pam_unix(sudo:session): session closed for user root
Dec  2 14:48:42 standalone sudo[143317]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:48:42 standalone sudo[143317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:48:43 standalone sudo[143317]: pam_unix(sudo:session): session closed for user root
Dec  2 14:48:43 standalone sudo[143461]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:48:43 standalone sudo[143461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:48:43 standalone sudo[143461]: pam_unix(sudo:session): session closed for user root
Dec  2 14:48:49 standalone sshd[143300]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 37077 ssh2 [preauth]
Dec  2 14:48:49 standalone sshd[143300]: Disconnecting authenticating user root 185.246.128.170 port 37077: Too many authentication failures [preauth]
Dec  2 14:48:49 standalone runuser[143851]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:50 standalone runuser[143851]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:50 standalone runuser[143984]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:50 standalone runuser[143984]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:50 standalone runuser[144130]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:48:51 standalone runuser[144130]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:48:57 standalone sshd[143949]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 43813 ssh2 [preauth]
Dec  2 14:48:57 standalone sshd[143949]: Disconnecting authenticating user root 185.246.128.170 port 43813: Too many authentication failures [preauth]
Dec  2 14:49:02 standalone runuser[144965]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:02 standalone runuser[144965]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:03 standalone runuser[145318]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:03 standalone runuser[145318]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:03 standalone runuser[145381]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:04 standalone runuser[145381]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:04 standalone sshd[144559]: Connection closed by authenticating user root 172.182.195.135 port 61496 [preauth]
Dec  2 14:49:15 standalone runuser[146665]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:15 standalone runuser[146665]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:15 standalone runuser[146738]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:16 standalone runuser[146738]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:16 standalone runuser[146805]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:17 standalone runuser[146805]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:25 standalone sshd[144914]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 63419 ssh2 [preauth]
Dec  2 14:49:25 standalone sshd[144914]: Disconnecting authenticating user root 185.246.128.170 port 63419: Too many authentication failures [preauth]
Dec  2 14:49:26 standalone sudo[147517]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:49:26 standalone sudo[147517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:49:26 standalone sudo[147517]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:26 standalone sudo[147544]:    root : PWD=/ ; USER=root ; COMMAND=/usr/bin/chown -R cinder:kolla /var/lib/cinder
Dec  2 14:49:26 standalone sudo[147544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:49:26 standalone sudo[147544]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:27 standalone runuser[147819]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:28 standalone runuser[147819]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:28 standalone runuser[148079]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:29 standalone runuser[148079]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:29 standalone runuser[148139]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:30 standalone runuser[148139]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:40 standalone runuser[149632]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:40 standalone sshd[148954]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 11027 ssh2 [preauth]
Dec  2 14:49:40 standalone sshd[148954]: Disconnecting authenticating user root 185.246.128.170 port 11027: Too many authentication failures [preauth]
Dec  2 14:49:41 standalone runuser[149632]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:41 standalone runuser[149771]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:42 standalone runuser[149771]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:42 standalone runuser[149870]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:43 standalone runuser[149870]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:43 standalone sudo[150145]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:49:43 standalone sudo[150145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:49:43 standalone sudo[150145]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:43 standalone sudo[150160]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:49:43 standalone sudo[150160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:49:44 standalone sudo[150160]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:44 standalone sudo[150278]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:49:44 standalone sudo[150278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:49:44 standalone sudo[150278]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:51 standalone sudo[150701]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:49:51 standalone sudo[150701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:49:51 standalone sudo[150701]: pam_unix(sudo:session): session closed for user root
Dec  2 14:49:53 standalone runuser[151307]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:54 standalone runuser[151307]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:54 standalone sshd[150187]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 7379 ssh2 [preauth]
Dec  2 14:49:54 standalone sshd[150187]: Disconnecting authenticating user root 185.246.128.170 port 7379: Too many authentication failures [preauth]
Dec  2 14:49:54 standalone runuser[151403]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:55 standalone runuser[151403]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:49:55 standalone runuser[151469]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:49:55 standalone runuser[151469]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:01 standalone sshd[151620]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 56776 ssh2 [preauth]
Dec  2 14:50:01 standalone sshd[151620]: Disconnecting authenticating user root 185.246.128.170 port 56776: Too many authentication failures [preauth]
Dec  2 14:50:06 standalone runuser[152552]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:07 standalone runuser[152552]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:07 standalone runuser[152704]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:08 standalone runuser[152704]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:08 standalone runuser[152769]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:08 standalone runuser[152769]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:15 standalone sudo[153792]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:50:15 standalone sudo[153792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:50:15 standalone sudo[153792]: pam_unix(sudo:session): session closed for user root
Dec  2 14:50:16 standalone sshd[152049]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 40071 ssh2 [preauth]
Dec  2 14:50:16 standalone sshd[152049]: Disconnecting authenticating user root 185.246.128.170 port 40071: Too many authentication failures [preauth]
Dec  2 14:50:19 standalone runuser[154218]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:20 standalone runuser[154218]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:20 standalone runuser[154371]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:21 standalone runuser[154371]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:21 standalone runuser[154578]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:21 standalone runuser[154578]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:28 standalone sshd[155106]: Connection closed by authenticating user root 172.182.195.135 port 61496 [preauth]
Dec  2 14:50:29 standalone sshd[154627]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 37169 ssh2 [preauth]
Dec  2 14:50:29 standalone sshd[154627]: Disconnecting authenticating user root 185.246.128.170 port 37169: Too many authentication failures [preauth]
Dec  2 14:50:32 standalone runuser[155843]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:32 standalone runuser[155843]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:33 standalone runuser[156000]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:33 standalone runuser[156000]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:33 standalone runuser[156120]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:34 standalone runuser[156120]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:44 standalone sudo[157330]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:50:44 standalone sudo[157330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:50:44 standalone sudo[157330]: pam_unix(sudo:session): session closed for user root
Dec  2 14:50:44 standalone sudo[157346]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:50:44 standalone sudo[157346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:50:45 standalone sudo[157346]: pam_unix(sudo:session): session closed for user root
Dec  2 14:50:45 standalone runuser[157414]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:45 standalone sudo[157434]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:50:45 standalone sudo[157434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:50:45 standalone sudo[157434]: pam_unix(sudo:session): session closed for user root
Dec  2 14:50:46 standalone runuser[157414]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:46 standalone runuser[157570]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:46 standalone sshd[155999]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 16856 ssh2 [preauth]
Dec  2 14:50:46 standalone sshd[155999]: Disconnecting authenticating user root 185.246.128.170 port 16856: Too many authentication failures [preauth]
Dec  2 14:50:46 standalone runuser[157570]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:46 standalone runuser[157712]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:47 standalone runuser[157712]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:54 standalone sshd[157708]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 44556 ssh2 [preauth]
Dec  2 14:50:54 standalone sshd[157708]: Disconnecting authenticating user root 185.246.128.170 port 44556: Too many authentication failures [preauth]
Dec  2 14:50:58 standalone sudo[158737]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:50:58 standalone sudo[158737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:50:58 standalone sudo[158737]: pam_unix(sudo:session): session closed for user root
Dec  2 14:50:58 standalone runuser[158747]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:59 standalone runuser[158747]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:59 standalone runuser[158816]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:50:59 standalone runuser[158816]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:50:59 standalone runuser[158913]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:00 standalone sudo[159122]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:00 standalone sudo[159122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416)
Dec  2 14:51:00 standalone sudo[159136]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:00 standalone sudo[159136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:51:00 standalone sudo[159122]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:00 standalone sudo[159179]: gnocchi : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:00 standalone sudo[159179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42416)
Dec  2 14:51:00 standalone sudo[159136]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:00 standalone sudo[159179]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:00 standalone runuser[158913]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:01 standalone sudo[159597]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:01 standalone sudo[159597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:01 standalone sudo[159623]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:01 standalone sudo[159623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:51:01 standalone sudo[159623]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:01 standalone sudo[159597]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:01 standalone sudo[159692]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:01 standalone sudo[159692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:01 standalone sudo[159691]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:01 standalone sudo[159691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:01 standalone sudo[159692]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:01 standalone sudo[159691]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:02 standalone sudo[160020]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:02 standalone sudo[160020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:51:02 standalone sudo[160020]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:03 standalone sudo[160176]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:03 standalone sudo[160176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:51:03 standalone sudo[160176]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:11 standalone runuser[161251]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:11 standalone runuser[161251]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:12 standalone runuser[161366]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:12 standalone runuser[161366]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:12 standalone runuser[161420]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:13 standalone runuser[161420]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:15 standalone sudo[161900]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:15 standalone sudo[161900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:51:15 standalone sudo[161900]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:15 standalone su[161918]: pam_unix(su:session): session opened for user ceilometer(uid=42405) by (uid=0)
Dec  2 14:51:15 standalone su[161918]: pam_lastlog(su:session): file /var/log/lastlog created
Dec  2 14:51:15 standalone su[161918]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 14:51:16 standalone sshd[158993]: error: maximum authentication attempts exceeded for root from 185.246.128.170 port 22664 ssh2 [preauth]
Dec  2 14:51:16 standalone sshd[158993]: Disconnecting authenticating user root 185.246.128.170 port 22664: Too many authentication failures [preauth]
Dec  2 14:51:21 standalone su[161918]: pam_unix(su:session): session closed for user ceilometer
Dec  2 14:51:24 standalone runuser[162520]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:24 standalone runuser[162520]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:25 standalone runuser[162599]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:25 standalone runuser[162599]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:25 standalone runuser[162691]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:26 standalone runuser[162691]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:27 standalone sshd[162116]: Disconnecting authenticating user root 185.246.128.170 port 1196: Change of username or service not allowed: (root,ssh-connection) -> (log,ssh-connection) [preauth]
Dec  2 14:51:37 standalone runuser[164053]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:37 standalone runuser[164053]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:37 standalone runuser[164165]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:38 standalone sshd[163812]: Connection closed by authenticating user root 172.182.195.135 port 61496 [preauth]
Dec  2 14:51:38 standalone runuser[164165]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:38 standalone runuser[164373]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:39 standalone runuser[164373]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:39 standalone sshd[163288]: Invalid user log from 185.246.128.170 port 11584
Dec  2 14:51:40 standalone sudo[164576]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:40 standalone sudo[164576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:40 standalone sshd[163288]: Disconnecting invalid user log 185.246.128.170 port 11584: Change of username or service not allowed: (log,ssh-connection) -> (test,ssh-connection) [preauth]
Dec  2 14:51:40 standalone sudo[164576]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:42 standalone sudo[165033]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:42 standalone sudo[165033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:42 standalone sudo[165033]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:45 standalone sudo[165472]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:45 standalone sudo[165472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:45 standalone sudo[165472]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:45 standalone sudo[165508]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:51:45 standalone sudo[165508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:51:45 standalone sudo[165508]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:45 standalone sudo[165524]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:51:45 standalone sudo[165524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:51:46 standalone sudo[165524]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:46 standalone sudo[165624]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:51:46 standalone sudo[165624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:51:46 standalone sudo[165624]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:47 standalone sshd[164607]: Invalid user test from 185.246.128.170 port 56361
Dec  2 14:51:47 standalone sudo[165740]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:47 standalone sudo[165740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:47 standalone sudo[165740]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:47 standalone sudo[165795]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:47 standalone sudo[165795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:47 standalone sudo[165795]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:49 standalone sudo[165930]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:49 standalone sudo[165930]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:49 standalone sudo[165930]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:49 standalone runuser[165985]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:50 standalone runuser[165985]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:50 standalone sshd[164607]: error: maximum authentication attempts exceeded for invalid user test from 185.246.128.170 port 56361 ssh2 [preauth]
Dec  2 14:51:50 standalone sshd[164607]: Disconnecting invalid user test 185.246.128.170 port 56361: Too many authentication failures [preauth]
Dec  2 14:51:50 standalone runuser[166165]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:51 standalone runuser[166165]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:51 standalone runuser[166330]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:51:51 standalone sudo[166396]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:51 standalone sudo[166396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:51 standalone sudo[166396]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:51 standalone sudo[166470]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:51 standalone sudo[166470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:51 standalone sudo[166470]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:52 standalone runuser[166330]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:51:53 standalone sudo[166789]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:53 standalone sudo[166789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:53 standalone sudo[166789]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:55 standalone sshd[166257]: Invalid user test from 185.246.128.170 port 46750
Dec  2 14:51:55 standalone sudo[167055]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:55 standalone sudo[167055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:55 standalone sudo[167055]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:55 standalone sudo[167105]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:55 standalone sudo[167105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:55 standalone sudo[167105]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:56 standalone sshd[166257]: Disconnecting invalid user test 185.246.128.170 port 46750: Change of username or service not allowed: (test,ssh-connection) -> (abc,ssh-connection) [preauth]
Dec  2 14:51:57 standalone sudo[167229]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:57 standalone sudo[167229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:57 standalone sudo[167229]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:59 standalone sudo[167380]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:59 standalone sudo[167380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:59 standalone sudo[167396]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:51:59 standalone sudo[167396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:51:59 standalone sudo[167380]: pam_unix(sudo:session): session closed for user root
Dec  2 14:51:59 standalone sudo[167396]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:00 standalone sshd[167251]: Invalid user abc from 185.246.128.170 port 5853
Dec  2 14:52:01 standalone sshd[167251]: Disconnecting invalid user abc 185.246.128.170 port 5853: Change of username or service not allowed: (abc,ssh-connection) -> (mohamed,ssh-connection) [preauth]
Dec  2 14:52:02 standalone runuser[167678]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:02 standalone sudo[167702]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:02 standalone sudo[167702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:02 standalone sudo[167702]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:03 standalone runuser[167678]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:03 standalone runuser[168009]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:04 standalone runuser[168009]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:04 standalone runuser[168116]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:05 standalone runuser[168116]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:07 standalone sshd[167792]: Invalid user mohamed from 185.246.128.170 port 19413
Dec  2 14:52:07 standalone sshd[167792]: Disconnecting invalid user mohamed 185.246.128.170 port 19413: Change of username or service not allowed: (mohamed,ssh-connection) -> (craft,ssh-connection) [preauth]
Dec  2 14:52:09 standalone sudo[168775]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:09 standalone sudo[168775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:09 standalone sudo[168775]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:12 standalone sudo[169211]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:12 standalone sudo[169211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:12 standalone sudo[169211]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:13 standalone sudo[169381]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:13 standalone sudo[169381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:13 standalone sudo[169381]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:13 standalone sshd[168763]: Invalid user craft from 185.246.128.170 port 52892
Dec  2 14:52:13 standalone sudo[169513]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:13 standalone sudo[169513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:13 standalone sudo[169513]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:15 standalone sshd[168763]: Disconnecting invalid user craft 185.246.128.170 port 52892: Change of username or service not allowed: (craft,ssh-connection) -> (sapadm,ssh-connection) [preauth]
Dec  2 14:52:16 standalone runuser[169802]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:16 standalone sudo[169867]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:16 standalone sudo[169867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:16 standalone sudo[169867]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:16 standalone runuser[169802]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:17 standalone runuser[169983]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:17 standalone sudo[170088]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:17 standalone sudo[170088]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:17 standalone sudo[170088]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:17 standalone runuser[169983]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:17 standalone runuser[170147]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:17 standalone sudo[170215]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:17 standalone sudo[170215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:18 standalone sudo[170215]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:18 standalone runuser[170147]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:20 standalone sudo[170385]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:20 standalone sudo[170385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:20 standalone sudo[170385]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:21 standalone sudo[170442]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:21 standalone sudo[170442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:21 standalone sudo[170442]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:22 standalone sudo[170610]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:22 standalone sudo[170610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:22 standalone sudo[170610]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:25 standalone sshd[170535]: Invalid user sapadm from 185.246.128.170 port 26844
Dec  2 14:52:25 standalone sshd[170535]: Disconnecting invalid user sapadm 185.246.128.170 port 26844: Change of username or service not allowed: (sapadm,ssh-connection) -> (csgo,ssh-connection) [preauth]
Dec  2 14:52:29 standalone runuser[171059]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:29 standalone runuser[171059]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:29 standalone runuser[171130]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:30 standalone sshd[170956]: Invalid user csgo from 185.246.128.170 port 13093
Dec  2 14:52:30 standalone runuser[171130]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:30 standalone runuser[171243]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:31 standalone runuser[171243]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:33 standalone sshd[170956]: Disconnecting invalid user csgo 185.246.128.170 port 13093: Change of username or service not allowed: (csgo,ssh-connection) -> (openmediavault,ssh-connection) [preauth]
Dec  2 14:52:33 standalone sudo[171736]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:33 standalone sudo[171736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:33 standalone sudo[171736]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:33 standalone sudo[171818]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:33 standalone sudo[171818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:34 standalone sudo[171818]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:34 standalone sudo[171843]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:34 standalone sudo[171843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:34 standalone sudo[171843]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:38 standalone sudo[172143]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:38 standalone sudo[172143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:38 standalone sudo[172160]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:38 standalone sudo[172160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:38 standalone sudo[172143]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:38 standalone sudo[172160]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:42 standalone sshd[171991]: Invalid user openmediavault from 185.246.128.170 port 59800
Dec  2 14:52:42 standalone runuser[172647]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:42 standalone runuser[172647]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:43 standalone sshd[171991]: Disconnecting invalid user openmediavault 185.246.128.170 port 59800: Change of username or service not allowed: (openmediavault,ssh-connection) -> (nobody,ssh-connection [preauth]
Dec  2 14:52:43 standalone runuser[172912]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:43 standalone runuser[172912]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:43 standalone runuser[173059]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:44 standalone runuser[173059]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:45 standalone sudo[173279]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:45 standalone sudo[173279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:46 standalone sudo[173279]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:46 standalone sudo[173324]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:52:46 standalone sudo[173324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:52:46 standalone sudo[173324]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:47 standalone sudo[173342]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:52:47 standalone sudo[173342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:52:49 standalone sudo[173342]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:50 standalone sudo[173834]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:52:50 standalone sudo[173834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:52:50 standalone sudo[173834]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:50 standalone sudo[173950]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:50 standalone sudo[173950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:50 standalone sudo[173972]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:50 standalone sudo[173972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:50 standalone sudo[173950]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:50 standalone sudo[173972]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:51 standalone sudo[174144]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:51 standalone sudo[174144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:51 standalone sudo[174144]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:54 standalone sudo[174633]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:54 standalone sudo[174633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:54 standalone sudo[174636]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:54 standalone sudo[174636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:54 standalone sudo[174633]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:54 standalone sudo[174636]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:55 standalone runuser[174770]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:55 standalone sudo[174835]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:55 standalone sudo[174835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:55 standalone sudo[174835]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:56 standalone runuser[174770]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:56 standalone runuser[174886]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:57 standalone runuser[174886]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:57 standalone runuser[174940]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:52:57 standalone runuser[174940]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:52:59 standalone sudo[175119]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:59 standalone sudo[175119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:59 standalone sudo[175123]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:52:59 standalone sudo[175123]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:52:59 standalone sudo[175119]: pam_unix(sudo:session): session closed for user root
Dec  2 14:52:59 standalone sudo[175123]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:00 standalone sudo[175228]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:00 standalone sudo[175228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:00 standalone sudo[175228]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:03 standalone sudo[175499]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:03 standalone sudo[175499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:03 standalone sudo[175499]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:03 standalone sudo[175522]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:03 standalone sudo[175522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:03 standalone sudo[175522]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:04 standalone sudo[175821]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:04 standalone sudo[175821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:04 standalone sudo[175821]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:04 standalone sshd[173334]: Disconnecting authenticating user nobody 185.246.128.170 port 55337: Change of username or service not allowed: (nobody,ssh-connection) -> (ftp,ssh-connection) [preauth]
Dec  2 14:53:07 standalone sudo[176083]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:07 standalone sudo[176083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:07 standalone sudo[176095]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:07 standalone sudo[176095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:07 standalone sshd[175971]: Disconnecting authenticating user ftp 185.246.128.170 port 9227: Change of username or service not allowed: (ftp,ssh-connection) -> (aovalle,ssh-connection) [preauth]
Dec  2 14:53:07 standalone sudo[176083]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:07 standalone sudo[176095]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:08 standalone runuser[176203]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:08 standalone sshd[176144]: Invalid user aovalle from 185.246.128.170 port 45748
Dec  2 14:53:08 standalone sshd[176144]: Disconnecting invalid user aovalle 185.246.128.170 port 45748: Change of username or service not allowed: (aovalle,ssh-connection) -> (rafael,ssh-connection) [preauth]
Dec  2 14:53:09 standalone sudo[176307]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:09 standalone sudo[176307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:09 standalone runuser[176203]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:09 standalone sudo[176307]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:09 standalone runuser[176346]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:10 standalone sshd[176276]: Invalid user rafael from 185.246.128.170 port 28266
Dec  2 14:53:10 standalone runuser[176346]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:10 standalone runuser[176408]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:10 standalone sshd[176276]: Disconnecting invalid user rafael 185.246.128.170 port 28266: Change of username or service not allowed: (rafael,ssh-connection) -> (splunk,ssh-connection) [preauth]
Dec  2 14:53:11 standalone runuser[176408]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:12 standalone sudo[176785]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:12 standalone sudo[176785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:12 standalone sudo[176785]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:12 standalone sudo[176856]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:12 standalone sudo[176856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:12 standalone sudo[176856]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:12 standalone sshd[176481]: Invalid user splunk from 185.246.128.170 port 29230
Dec  2 14:53:13 standalone sudo[177069]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:13 standalone sudo[177069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:14 standalone sudo[177069]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:14 standalone sshd[176481]: Disconnecting invalid user splunk 185.246.128.170 port 29230: Change of username or service not allowed: (splunk,ssh-connection) -> (dbadmin,ssh-connection) [preauth]
Dec  2 14:53:15 standalone sshd[177162]: Connection closed by authenticating user root 172.182.195.135 port 61496 [preauth]
Dec  2 14:53:16 standalone sudo[177272]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:16 standalone sudo[177272]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:16 standalone sudo[177272]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:17 standalone sudo[177344]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:17 standalone sudo[177344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:17 standalone sudo[177344]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:18 standalone sudo[177594]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:18 standalone sudo[177594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:18 standalone sudo[177594]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:21 standalone runuser[178436]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:22 standalone runuser[178436]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:22 standalone sudo[178647]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:22 standalone sudo[178647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:22 standalone sudo[178672]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:22 standalone sudo[178672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:22 standalone sudo[178647]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:22 standalone runuser[178674]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:22 standalone sudo[178672]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:23 standalone sudo[178875]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:23 standalone sudo[178875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:23 standalone sudo[178875]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:23 standalone runuser[178674]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:23 standalone runuser[178909]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:24 standalone runuser[178909]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:26 standalone sshd[177921]: Invalid user dbadmin from 185.246.128.170 port 19565
Dec  2 14:53:27 standalone sudo[179248]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:27 standalone sudo[179248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:27 standalone sudo[179248]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:27 standalone sudo[179279]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:27 standalone sudo[179279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:27 standalone sudo[179279]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:27 standalone sudo[179345]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:27 standalone sudo[179345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:27 standalone sudo[179345]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:28 standalone sshd[177921]: Disconnecting invalid user dbadmin 185.246.128.170 port 19565: Change of username or service not allowed: (dbadmin,ssh-connection) -> (stack,ssh-connection) [preauth]
Dec  2 14:53:31 standalone sudo[179513]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:31 standalone sudo[179513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:31 standalone sudo[179528]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:31 standalone sudo[179528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:31 standalone sudo[179513]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:31 standalone sudo[179528]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:32 standalone sudo[179682]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:32 standalone sudo[179682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:32 standalone sudo[179682]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:35 standalone runuser[180146]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:35 standalone runuser[180146]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:35 standalone sudo[180337]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:35 standalone sudo[180337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:35 standalone runuser[180345]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:36 standalone sudo[180337]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:36 standalone sudo[180421]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:36 standalone sudo[180421]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:36 standalone sudo[180421]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:36 standalone runuser[180345]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:36 standalone runuser[180487]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:36 standalone sshd[179454]: Invalid user stack from 185.246.128.170 port 9173
Dec  2 14:53:37 standalone sudo[180555]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:37 standalone sudo[180555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:37 standalone sshd[179454]: Disconnecting invalid user stack 185.246.128.170 port 9173: Change of username or service not allowed: (stack,ssh-connection) -> (theta,ssh-connection) [preauth]
Dec  2 14:53:37 standalone sudo[180555]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:37 standalone runuser[180487]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:39 standalone sshd[180597]: Invalid user theta from 185.246.128.170 port 8498
Dec  2 14:53:40 standalone sshd[180597]: Disconnecting invalid user theta 185.246.128.170 port 8498: Change of username or service not allowed: (theta,ssh-connection) -> (jrodrig,ssh-connection) [preauth]
Dec  2 14:53:40 standalone sudo[180696]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:40 standalone sudo[180696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:40 standalone sudo[180696]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:40 standalone sudo[180755]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:40 standalone sudo[180755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:40 standalone sudo[180755]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:41 standalone sudo[180849]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:41 standalone sudo[180849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:41 standalone sudo[180849]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:45 standalone sudo[181324]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:45 standalone sudo[181324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:45 standalone sudo[181324]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:45 standalone sudo[181369]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:45 standalone sudo[181369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:45 standalone sudo[181369]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:46 standalone sudo[181484]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:46 standalone sudo[181484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:46 standalone sudo[181484]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:47 standalone sshd[180845]: Invalid user jrodrig from 185.246.128.170 port 60156
Dec  2 14:53:48 standalone runuser[181529]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:49 standalone runuser[181529]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:49 standalone sshd[180845]: Disconnecting invalid user jrodrig 185.246.128.170 port 60156: Change of username or service not allowed: (jrodrig,ssh-connection) -> (vhserver,ssh-connection) [preauth]
Dec  2 14:53:49 standalone runuser[181758]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:49 standalone sudo[181892]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:49 standalone sudo[181892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:49 standalone sudo[181892]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:50 standalone runuser[181758]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:50 standalone runuser[181931]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:53:50 standalone sudo[181964]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:50 standalone sudo[181964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:50 standalone sudo[181964]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:50 standalone sudo[182005]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:53:50 standalone sudo[182005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:53:50 standalone sudo[182005]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:50 standalone sudo[182029]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:53:50 standalone sudo[182029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:53:50 standalone sudo[182029]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:50 standalone sudo[182192]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:50 standalone sudo[182192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:50 standalone sudo[182192]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:50 standalone sudo[182235]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:53:50 standalone sudo[182235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:53:51 standalone sudo[182235]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:51 standalone runuser[181931]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:53:51 standalone sshd[181889]: Invalid user vhserver from 185.246.128.170 port 35229
Dec  2 14:53:53 standalone sshd[181889]: Disconnecting invalid user vhserver 185.246.128.170 port 35229: Change of username or service not allowed: (vhserver,ssh-connection) -> (auditadm,ssh-connection) [preauth]
Dec  2 14:53:54 standalone sudo[183350]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:54 standalone sudo[183350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:54 standalone sudo[183350]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:54 standalone sudo[183410]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:54 standalone sudo[183410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:54 standalone sudo[183410]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:55 standalone sudo[183570]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:55 standalone sudo[183570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:55 standalone sudo[183570]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:56 standalone sshd[183479]: Invalid user auditadm from 185.246.128.170 port 29813
Dec  2 14:53:57 standalone sshd[183479]: Disconnecting invalid user auditadm 185.246.128.170 port 29813: Change of username or service not allowed: (auditadm,ssh-connection) -> (wade,ssh-connection) [preauth]
Dec  2 14:53:58 standalone sudo[183729]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:58 standalone sudo[183729]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:58 standalone sudo[183729]: pam_unix(sudo:session): session closed for user root
Dec  2 14:53:59 standalone sudo[183781]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:53:59 standalone sudo[183781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:53:59 standalone sudo[183781]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:00 standalone sudo[183858]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:00 standalone sudo[183858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:00 standalone sudo[183858]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:01 standalone runuser[183924]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:02 standalone runuser[183924]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:02 standalone runuser[184100]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:02 standalone sudo[184192]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:02 standalone sudo[184192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:03 standalone sudo[184192]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:03 standalone sudo[184254]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:03 standalone sudo[184254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:03 standalone sudo[184254]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:03 standalone runuser[184100]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:03 standalone runuser[184330]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:04 standalone runuser[184330]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:04 standalone sudo[184561]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:04 standalone sudo[184561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:04 standalone sudo[184561]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:06 standalone sshd[184220]: Connection closed by authenticating user root 172.182.195.135 port 61496 [preauth]
Dec  2 14:54:07 standalone sudo[184820]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:07 standalone sudo[184820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:07 standalone sudo[184820]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:07 standalone sudo[184864]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:07 standalone sudo[184864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:07 standalone sudo[184864]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:07 standalone sshd[184300]: Invalid user wade from 185.246.128.170 port 1407
Dec  2 14:54:09 standalone sudo[185027]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:09 standalone sudo[185027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:09 standalone sudo[185027]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:10 standalone sshd[184300]: Disconnecting invalid user wade 185.246.128.170 port 1407: Change of username or service not allowed: (wade,ssh-connection) -> (nagios,ssh-connection) [preauth]
Dec  2 14:54:11 standalone sudo[185197]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:11 standalone sudo[185197]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:11 standalone sudo[185199]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:11 standalone sudo[185199]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:11 standalone sudo[185199]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:11 standalone sudo[185197]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:14 standalone sudo[185651]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:14 standalone sudo[185651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:14 standalone sudo[185651]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:14 standalone runuser[185780]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:15 standalone runuser[185780]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:15 standalone runuser[185868]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:16 standalone sudo[185988]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:16 standalone sudo[185988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:16 standalone sudo[185988]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:16 standalone runuser[185868]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:16 standalone runuser[186051]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:16 standalone sudo[186119]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:16 standalone sudo[186119]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:16 standalone sudo[186119]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:17 standalone runuser[186051]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:18 standalone sudo[186259]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:18 standalone sudo[186259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:18 standalone sudo[186259]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:19 standalone sudo[186304]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/dhcp_agent.ini --config-dir /etc/neutron/conf.d/neutron-dhcp-agent --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmpxbai9zgm/privsep.sock
Dec  2 14:54:19 standalone sudo[186304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:54:20 standalone sudo[186304]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:20 standalone sudo[186526]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:20 standalone sudo[186526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:20 standalone sudo[186526]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:20 standalone sudo[186620]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:20 standalone sudo[186620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:20 standalone sudo[186620]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:21 standalone sudo[186805]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf
Dec  2 14:54:21 standalone sudo[186805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435)
Dec  2 14:54:22 standalone sudo[187094]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:22 standalone sudo[187094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:22 standalone sudo[187094]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:22 standalone sshd[185718]: Invalid user nagios from 185.246.128.170 port 60920
Dec  2 14:54:23 standalone sshd[185718]: Disconnecting invalid user nagios 185.246.128.170 port 60920: Change of username or service not allowed: (nagios,ssh-connection) -> (1,ssh-connection) [preauth]
Dec  2 14:54:24 standalone sudo[187882]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:24 standalone sudo[187882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:24 standalone sudo[187882]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:25 standalone sudo[187938]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:25 standalone sudo[187938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:25 standalone sudo[187938]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:27 standalone sudo[188110]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:27 standalone sudo[188110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:27 standalone sudo[188110]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:27 standalone runuser[188149]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:28 standalone runuser[188149]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:28 standalone runuser[188290]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:28 standalone sudo[188310]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:28 standalone sudo[188310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:28 standalone sudo[188310]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:28 standalone sudo[188381]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:28 standalone sudo[188381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:28 standalone sudo[188381]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:29 standalone runuser[188290]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:29 standalone runuser[188427]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:30 standalone runuser[188427]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:31 standalone sudo[188565]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:31 standalone sudo[188565]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:31 standalone sudo[188565]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:32 standalone sudo[188726]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:32 standalone sudo[188726]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:32 standalone sudo[188726]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:32 standalone sudo[188824]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:32 standalone sudo[188824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:33 standalone sudo[188824]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:35 standalone sshd[188201]: Invalid user 1 from 185.246.128.170 port 26266
Dec  2 14:54:35 standalone sudo[189316]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:35 standalone sudo[189316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:35 standalone sudo[189316]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:36 standalone sshd[188201]: Disconnecting invalid user 1 185.246.128.170 port 26266: Change of username or service not allowed: (1,ssh-connection) -> (finance,ssh-connection) [preauth]
Dec  2 14:54:36 standalone sudo[189498]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:36 standalone sudo[189498]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:36 standalone sudo[189498]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:37 standalone sudo[189552]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:37 standalone sudo[189552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:37 standalone sudo[189552]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:39 standalone sudo[189668]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:39 standalone sudo[189668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:39 standalone sudo[189668]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:40 standalone runuser[189738]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:40 standalone sudo[189830]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:40 standalone sudo[189830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:41 standalone sudo[189830]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:41 standalone sudo[189875]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:41 standalone sudo[189875]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:41 standalone sudo[189875]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:41 standalone runuser[189738]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:41 standalone runuser[189934]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:41 standalone sshd[189593]: Invalid user finance from 185.246.128.170 port 40573
Dec  2 14:54:41 standalone sshd[189593]: Disconnecting invalid user finance 185.246.128.170 port 40573: Change of username or service not allowed: (finance,ssh-connection) -> (operator,ssh-connection) [preauth]
Dec  2 14:54:41 standalone runuser[189934]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:42 standalone runuser[189997]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:42 standalone runuser[189997]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:44 standalone sudo[190393]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:44 standalone sudo[190393]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:44 standalone sudo[190393]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:45 standalone sudo[190585]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:45 standalone sudo[190585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:45 standalone sudo[190585]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:45 standalone sudo[190629]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:45 standalone sudo[190629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:45 standalone sudo[190629]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:48 standalone sudo[190801]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:48 standalone sudo[190801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:48 standalone sudo[190801]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:49 standalone sudo[190916]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:49 standalone sudo[190916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:49 standalone sudo[190916]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:49 standalone sudo[190957]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:49 standalone sudo[190957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:49 standalone sudo[190957]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:51 standalone sudo[191220]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:54:51 standalone sudo[191220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:54:51 standalone sudo[191220]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:51 standalone sudo[191235]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:54:51 standalone sudo[191235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:54:51 standalone sshd[190664]: Disconnecting authenticating user operator 185.246.128.170 port 26763: Change of username or service not allowed: (operator,ssh-connection) -> (nsroot,ssh-connection) [preauth]
Dec  2 14:54:51 standalone sudo[191235]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:51 standalone sudo[191363]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:54:51 standalone sudo[191363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:54:51 standalone sudo[191363]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:52 standalone sudo[191597]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:52 standalone sudo[191597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:52 standalone sudo[191597]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:53 standalone runuser[191804]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:54 standalone sudo[192325]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:54 standalone sudo[192325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:54 standalone sudo[192325]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:54 standalone sudo[192369]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:54 standalone sudo[192369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:54 standalone sudo[192369]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:54 standalone runuser[191804]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:54 standalone runuser[192483]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:54 standalone sshd[192017]: Invalid user nsroot from 185.246.128.170 port 10007
Dec  2 14:54:54 standalone sshd[192017]: Disconnecting invalid user nsroot 185.246.128.170 port 10007: Change of username or service not allowed: (nsroot,ssh-connection) -> (tunnel,ssh-connection) [preauth]
Dec  2 14:54:55 standalone runuser[192483]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:55 standalone runuser[192745]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:54:56 standalone runuser[192745]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:54:57 standalone sudo[192956]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:57 standalone sudo[192956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:57 standalone sudo[192956]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:58 standalone sudo[193091]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:58 standalone sudo[193090]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:54:58 standalone sudo[193090]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:58 standalone sudo[193091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:54:58 standalone sshd[192673]: Invalid user tunnel from 185.246.128.170 port 25077
Dec  2 14:54:58 standalone sudo[193090]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:58 standalone sudo[193091]: pam_unix(sudo:session): session closed for user root
Dec  2 14:54:58 standalone sshd[192673]: Disconnecting invalid user tunnel 185.246.128.170 port 25077: Change of username or service not allowed: (tunnel,ssh-connection) -> (ftp_inst,ssh-connection) [preauth]
Dec  2 14:55:01 standalone sudo[193225]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:01 standalone sudo[193225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:01 standalone sudo[193225]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:02 standalone sudo[193387]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:02 standalone sudo[193387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:02 standalone sudo[193387]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:02 standalone sudo[193408]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:02 standalone sudo[193408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:02 standalone sudo[193408]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:03 standalone sshd[193157]: Invalid user ftp_inst from 185.246.128.170 port 39132
Dec  2 14:55:04 standalone sshd[193157]: Disconnecting invalid user ftp_inst 185.246.128.170 port 39132: Change of username or service not allowed: (ftp_inst,ssh-connection) -> (rahul,ssh-connection) [preauth]
Dec  2 14:55:05 standalone sudo[193733]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:05 standalone sudo[193733]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:05 standalone sudo[193733]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:06 standalone runuser[193937]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:07 standalone sudo[194051]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:07 standalone sudo[194051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:07 standalone sudo[194067]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:07 standalone sudo[194051]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:07 standalone sudo[194067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:07 standalone sudo[194067]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:07 standalone runuser[193937]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:07 standalone runuser[194122]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:08 standalone runuser[194122]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:08 standalone runuser[194198]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:08 standalone runuser[194198]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:09 standalone sudo[194353]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:09 standalone sudo[194353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:09 standalone sudo[194353]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:11 standalone sudo[194515]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:11 standalone sudo[194515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:11 standalone sudo[194521]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:11 standalone sudo[194521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:11 standalone sudo[194515]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:11 standalone sudo[194521]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:14 standalone sudo[195036]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:14 standalone sudo[195036]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:14 standalone sudo[195036]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:15 standalone sudo[195264]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:15 standalone sudo[195264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:15 standalone sudo[195264]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:15 standalone sudo[195301]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:15 standalone sudo[195301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:15 standalone sudo[195301]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:16 standalone sshd[194271]: Invalid user rahul from 185.246.128.170 port 42356
Dec  2 14:55:18 standalone sudo[195529]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:18 standalone sudo[195529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:18 standalone sudo[195529]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:18 standalone sshd[194271]: Disconnecting invalid user rahul 185.246.128.170 port 42356: Change of username or service not allowed: (rahul,ssh-connection) -> (huawei,ssh-connection) [preauth]
Dec  2 14:55:19 standalone sudo[195651]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:19 standalone sudo[195651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:19 standalone sudo[195651]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:19 standalone runuser[195674]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:19 standalone sudo[195705]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:19 standalone sudo[195705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:19 standalone sudo[195705]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:20 standalone runuser[195674]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:20 standalone runuser[195780]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:20 standalone runuser[195780]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:21 standalone runuser[196061]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:21 standalone runuser[196061]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:22 standalone sshd[196158]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 14:55:22 standalone sudo[196315]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:22 standalone sudo[196315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:22 standalone sudo[196315]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:23 standalone sudo[196613]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:23 standalone sudo[196613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:23 standalone sudo[196613]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:23 standalone sudo[196705]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:23 standalone sudo[196705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:23 standalone sudo[196705]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:27 standalone sudo[197514]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:27 standalone sudo[197514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:27 standalone sudo[197514]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:27 standalone sudo[197574]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:27 standalone sudo[197574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:27 standalone sudo[197574]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:28 standalone sudo[197652]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:28 standalone sudo[197652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:28 standalone sudo[197652]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:29 standalone sshd[196445]: Invalid user huawei from 185.246.128.170 port 22540
Dec  2 14:55:31 standalone sudo[197798]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:31 standalone sudo[197798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:31 standalone sudo[197798]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:31 standalone sudo[197846]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:31 standalone sudo[197846]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:31 standalone sudo[197846]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:32 standalone sudo[197920]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:32 standalone sudo[197920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:32 standalone sudo[197920]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:32 standalone runuser[197954]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:33 standalone runuser[197954]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:33 standalone runuser[198115]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:33 standalone runuser[198115]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:34 standalone runuser[198226]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:34 standalone sshd[196445]: Disconnecting invalid user huawei 185.246.128.170 port 22540: Change of username or service not allowed: (huawei,ssh-connection) -> (prod,ssh-connection) [preauth]
Dec  2 14:55:34 standalone runuser[198226]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:35 standalone sudo[198822]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:35 standalone sudo[198822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:35 standalone sudo[198822]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:35 standalone sudo[198876]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:35 standalone sudo[198876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:35 standalone sudo[198876]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:36 standalone sshd[198693]: Invalid user prod from 185.246.128.170 port 37459
Dec  2 14:55:36 standalone sshd[198693]: Disconnecting invalid user prod 185.246.128.170 port 37459: Change of username or service not allowed: (prod,ssh-connection) -> (netlink,ssh-connection) [preauth]
Dec  2 14:55:36 standalone sudo[199008]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:36 standalone sudo[199008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:36 standalone sudo[199008]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:39 standalone sudo[199268]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:39 standalone sudo[199268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:39 standalone sudo[199268]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:39 standalone sudo[199289]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:39 standalone sudo[199289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:39 standalone sudo[199289]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:40 standalone sudo[199384]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:40 standalone sudo[199384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:55:40 standalone sudo[199384]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:41 standalone sshd[199090]: Invalid user netlink from 185.246.128.170 port 36782
Dec  2 14:55:41 standalone sshd[199090]: Disconnecting invalid user netlink 185.246.128.170 port 36782: Change of username or service not allowed: (netlink,ssh-connection) -> (dspace,ssh-connection) [preauth]
Dec  2 14:55:44 standalone sshd[199463]: Invalid user dspace from 185.246.128.170 port 12884
Dec  2 14:55:44 standalone sshd[199463]: Disconnecting invalid user dspace 185.246.128.170 port 12884: Change of username or service not allowed: (dspace,ssh-connection) -> (amir,ssh-connection) [preauth]
Dec  2 14:55:45 standalone sudo[199968]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:45 standalone sudo[199968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:55:45 standalone sudo[199968]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:45 standalone runuser[199982]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:46 standalone runuser[199982]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:46 standalone runuser[200064]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:46 standalone runuser[200064]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:46 standalone runuser[200163]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:47 standalone runuser[200163]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:47 standalone sshd[199837]: Invalid user amir from 185.246.128.170 port 37220
Dec  2 14:55:49 standalone sshd[199837]: Disconnecting invalid user amir 185.246.128.170 port 37220: Change of username or service not allowed: (amir,ssh-connection) -> (wuhan,ssh-connection) [preauth]
Dec  2 14:55:51 standalone sudo[200607]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:55:51 standalone sudo[200607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:55:51 standalone sudo[200607]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:51 standalone sudo[200621]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:55:51 standalone sudo[200621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:51 standalone sudo[200621]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:52 standalone sudo[200665]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 14:55:52 standalone sudo[200665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:52 standalone sudo[200665]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:52 standalone sudo[200782]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:55:52 standalone sudo[200782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:52 standalone sudo[200782]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:52 standalone sudo[200812]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 14:55:52 standalone sudo[200812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:54 standalone sudo[200812]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:54 standalone sudo[201651]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:55:54 standalone sudo[201651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:54 standalone sudo[201651]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:54 standalone sudo[201669]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:55:54 standalone sudo[201669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:55 standalone sshd[200316]: Invalid user wuhan from 185.246.128.170 port 27548
Dec  2 14:55:55 standalone sudo[201669]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:55 standalone sshd[200316]: Disconnecting invalid user wuhan 185.246.128.170 port 27548: Change of username or service not allowed: (wuhan,ssh-connection) -> (github,ssh-connection) [preauth]
Dec  2 14:55:55 standalone sudo[201907]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:55:55 standalone sudo[201907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:55:55 standalone sudo[201907]: pam_unix(sudo:session): session closed for user root
Dec  2 14:55:58 standalone runuser[202193]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:55:59 standalone runuser[202193]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:55:59 standalone runuser[202262]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:00 standalone runuser[202262]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:00 standalone runuser[202372]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:00 standalone sudo[202398]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:56:00 standalone sudo[202398]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:56:00 standalone sudo[202398]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:00 standalone runuser[202372]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:01 standalone sudo[202540]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:56:01 standalone sudo[202540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:56:02 standalone sudo[202540]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:03 standalone sudo[202641]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:56:03 standalone sudo[202641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:56:03 standalone sshd[202089]: Invalid user github from 185.246.128.170 port 11358
Dec  2 14:56:03 standalone sudo[202641]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:03 standalone sshd[202089]: Disconnecting invalid user github 185.246.128.170 port 11358: Change of username or service not allowed: (github,ssh-connection) -> (ftpguest,ssh-connection) [preauth]
Dec  2 14:56:04 standalone sudo[202891]: octavia : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 14:56:04 standalone sudo[202891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42437)
Dec  2 14:56:04 standalone sudo[202891]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:09 standalone sshd[202999]: Invalid user ftpguest from 185.246.128.170 port 24689
Dec  2 14:56:10 standalone sshd[202999]: Disconnecting invalid user ftpguest 185.246.128.170 port 24689: Change of username or service not allowed: (ftpguest,ssh-connection) -> (scsadmin,ssh-connection) [preauth]
Dec  2 14:56:11 standalone runuser[203300]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:12 standalone runuser[203300]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:12 standalone runuser[203361]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:13 standalone runuser[203361]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:13 standalone runuser[203442]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:13 standalone runuser[203442]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:17 standalone sudo[204021]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chown -R root /root/tripleo-heat-installer-templates
Dec  2 14:56:17 standalone sudo[204021]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:17 standalone sudo[204021]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:17 standalone sudo[204030]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chown -R root /root/standalone-ansible-oxw8emgm
Dec  2 14:56:17 standalone sudo[204030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:17 standalone sudo[204030]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:17 standalone sudo[204044]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chown -R root /root/.tripleo
Dec  2 14:56:17 standalone sudo[204044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:17 standalone sudo[204044]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:18 standalone sudo[204052]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cp /etc/openstack/clouds.yaml /root/.config/openstack
Dec  2 14:56:18 standalone sudo[204052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:18 standalone sudo[204052]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:18 standalone sudo[204055]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chmod 0600 /root/.config/openstack/clouds.yaml
Dec  2 14:56:18 standalone sudo[204055]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:18 standalone sudo[204055]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:18 standalone sudo[204058]:    root : PWD=/root ; USER=root ; COMMAND=/bin/chown -R 0:0 /root/.config
Dec  2 14:56:18 standalone sudo[204058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:18 standalone sudo[204058]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:18 standalone sudo[40320]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:18 standalone sshd[23515]: Received disconnect from 192.168.122.11 port 45754:11: disconnected by user
Dec  2 14:56:18 standalone sshd[23515]: Disconnected from user root 192.168.122.11 port 45754
Dec  2 14:56:18 standalone sshd[23512]: pam_unix(sshd:session): session closed for user root
Dec  2 14:56:18 standalone sshd[204063]: Accepted publickey for root from 192.168.122.11 port 34194 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:56:18 standalone sshd[204063]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:18 standalone sshd[204066]: Received disconnect from 192.168.122.11 port 34194:11: disconnected by user
Dec  2 14:56:18 standalone sshd[204066]: Disconnected from user root 192.168.122.11 port 34194
Dec  2 14:56:18 standalone sshd[204063]: pam_unix(sshd:session): session closed for user root
Dec  2 14:56:19 standalone sshd[203497]: Invalid user scsadmin from 185.246.128.170 port 20732
Dec  2 14:56:19 standalone sshd[203497]: Disconnecting invalid user scsadmin 185.246.128.170 port 20732: Change of username or service not allowed: (scsadmin,ssh-connection) -> (loginuser,ssh-connection) [preauth]
Dec  2 14:56:24 standalone runuser[204747]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:25 standalone runuser[204747]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:25 standalone runuser[205066]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:26 standalone runuser[205066]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:26 standalone runuser[205365]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:26 standalone runuser[205365]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:27 standalone sshd[204104]: Invalid user loginuser from 185.246.128.170 port 51758
Dec  2 14:56:28 standalone sshd[204104]: Disconnecting invalid user loginuser 185.246.128.170 port 51758: Change of username or service not allowed: (loginuser,ssh-connection) -> (alex,ssh-connection) [preauth]
Dec  2 14:56:30 standalone sshd[205637]: error: kex_exchange_identification: Connection closed by remote host
Dec  2 14:56:30 standalone sshd[205637]: Connection closed by 192.168.122.11 port 36440
Dec  2 14:56:30 standalone sshd[205639]: Connection closed by 192.168.122.11 port 36456 [preauth]
Dec  2 14:56:30 standalone sshd[205638]: Connection closed by 192.168.122.11 port 36458 [preauth]
Dec  2 14:56:30 standalone sshd[205640]: Connection closed by 192.168.122.11 port 36462 [preauth]
Dec  2 14:56:30 standalone sshd[205641]: Unable to negotiate with 192.168.122.11 port 36470: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth]
Dec  2 14:56:30 standalone sshd[205642]: Unable to negotiate with 192.168.122.11 port 36476: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth]
Dec  2 14:56:31 standalone sshd[205687]: Accepted publickey for root from 192.168.122.11 port 36490 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:56:31 standalone systemd[205691]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:32 standalone sshd[205687]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:56:33 standalone sshd[205889]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 14:56:37 standalone runuser[206728]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:37 standalone runuser[206728]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:38 standalone runuser[206842]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:38 standalone runuser[206842]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:38 standalone runuser[206904]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:39 standalone runuser[206904]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:40 standalone sshd[205886]: Invalid user alex from 185.246.128.170 port 24062
Dec  2 14:56:40 standalone sshd[205886]: Disconnecting invalid user alex 185.246.128.170 port 24062: Change of username or service not allowed: (alex,ssh-connection) -> (ADMIN,ssh-connection) [preauth]
Dec  2 14:56:43 standalone sshd[206980]: Invalid user ADMIN from 185.246.128.170 port 20955
Dec  2 14:56:44 standalone sshd[206980]: Disconnecting invalid user ADMIN 185.246.128.170 port 20955: Change of username or service not allowed: (ADMIN,ssh-connection) -> (oper,ssh-connection) [preauth]
Dec  2 14:56:47 standalone sshd[207407]: Accepted publickey for zuul from 38.102.83.114 port 50642 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:56:47 standalone systemd[207433]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 14:56:47 standalone sshd[207407]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 14:56:48 standalone sudo[207500]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzdtsbqcskotcelnbchyxkvbyroejqwh ; /usr/bin/python3
Dec  2 14:56:48 standalone sudo[207500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 14:56:50 standalone runuser[207524]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:51 standalone runuser[207524]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:51 standalone runuser[207593]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:51 standalone sudo[207500]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:51 standalone sudo[207653]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uubueauciiahtszrvrvotnjbfxwifscr ; /usr/bin/python3
Dec  2 14:56:51 standalone sudo[207653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 14:56:51 standalone runuser[207593]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:51 standalone runuser[207673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:56:52 standalone runuser[207673]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:56:54 standalone sshd[207405]: Invalid user oper from 185.246.128.170 port 3417
Dec  2 14:56:55 standalone sudo[208576]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:56:55 standalone sudo[208576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:56:55 standalone sudo[208576]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:55 standalone sudo[208658]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:56:55 standalone sudo[208658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:56:56 standalone sudo[208658]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:56 standalone sudo[209143]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:56:56 standalone sudo[209143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:56:56 standalone sudo[209143]: pam_unix(sudo:session): session closed for user root
Dec  2 14:56:56 standalone sshd[207405]: Disconnecting invalid user oper 185.246.128.170 port 3417: Change of username or service not allowed: (oper,ssh-connection) -> (vodafone,ssh-connection) [preauth]
Dec  2 14:56:57 standalone sudo[207653]: pam_unix(sudo:session): session closed for user root
Dec  2 14:57:03 standalone runuser[209484]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:03 standalone runuser[209484]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:04 standalone runuser[209685]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:04 standalone runuser[209685]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:04 standalone runuser[209758]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:06 standalone runuser[209758]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:06 standalone sshd[209433]: Invalid user vodafone from 185.246.128.170 port 13104
Dec  2 14:57:07 standalone sshd[209433]: Disconnecting invalid user vodafone 185.246.128.170 port 13104: Change of username or service not allowed: (vodafone,ssh-connection) -> (sftp,ssh-connection) [preauth]
Dec  2 14:57:14 standalone sshd[210163]: Invalid user sftp from 185.246.128.170 port 11981
Dec  2 14:57:16 standalone runuser[210687]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:17 standalone runuser[210687]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:17 standalone sshd[210163]: Disconnecting invalid user sftp 185.246.128.170 port 11981: Change of username or service not allowed: (sftp,ssh-connection) -> (service,ssh-connection) [preauth]
Dec  2 14:57:17 standalone runuser[210756]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:18 standalone runuser[210756]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:18 standalone runuser[210905]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:19 standalone runuser[210905]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:23 standalone sshd[210952]: Invalid user service from 185.246.128.170 port 8498
Dec  2 14:57:24 standalone sshd[210952]: Disconnecting invalid user service 185.246.128.170 port 8498: Change of username or service not allowed: (service,ssh-connection) -> (anonymous,ssh-connection) [preauth]
Dec  2 14:57:29 standalone runuser[212289]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:29 standalone sshd[211870]: Invalid user anonymous from 185.246.128.170 port 14854
Dec  2 14:57:30 standalone runuser[212289]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:30 standalone runuser[212385]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:31 standalone runuser[212385]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:31 standalone runuser[212439]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:32 standalone runuser[212439]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:34 standalone sshd[205710]: Received disconnect from 192.168.122.11 port 36490:11: disconnected by user
Dec  2 14:57:34 standalone sshd[205710]: Disconnected from user root 192.168.122.11 port 36490
Dec  2 14:57:34 standalone sshd[205687]: pam_unix(sshd:session): session closed for user root
Dec  2 14:57:37 standalone sshd[211870]: error: maximum authentication attempts exceeded for invalid user anonymous from 185.246.128.170 port 14854 ssh2 [preauth]
Dec  2 14:57:37 standalone sshd[211870]: Disconnecting invalid user anonymous 185.246.128.170 port 14854: Too many authentication failures [preauth]
Dec  2 14:57:38 standalone sudo[213228]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-voiyxynhbdvvlcdufeigkduwkohpqgvh ; /usr/bin/python3
Dec  2 14:57:38 standalone sudo[213228]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 14:57:42 standalone runuser[213397]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:43 standalone runuser[213397]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:43 standalone runuser[213468]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:44 standalone runuser[213468]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:44 standalone runuser[213613]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:45 standalone runuser[213613]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:46 standalone sshd[213382]: Invalid user anonymous from 185.246.128.170 port 29948
Dec  2 14:57:51 standalone sshd[214121]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 14:57:51 standalone sshd[213382]: Disconnecting invalid user anonymous 185.246.128.170 port 29948: Change of username or service not allowed: (anonymous,ssh-connection) -> (cisco,ssh-connection) [preauth]
Dec  2 14:57:55 standalone runuser[214844]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:56 standalone sshd[214142]: Invalid user cisco from 185.246.128.170 port 52083
Dec  2 14:57:56 standalone runuser[214844]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:56 standalone sudo[215068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:57:56 standalone sudo[215068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:57:56 standalone sudo[215068]: pam_unix(sudo:session): session closed for user root
Dec  2 14:57:56 standalone runuser[215083]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:56 standalone sudo[215085]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:57:56 standalone sudo[215085]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:57:57 standalone sudo[215085]: pam_unix(sudo:session): session closed for user root
Dec  2 14:57:57 standalone runuser[215083]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:57:57 standalone runuser[215194]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:57:57 standalone sudo[215209]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:57:57 standalone sudo[215209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:57:57 standalone sudo[215209]: pam_unix(sudo:session): session closed for user root
Dec  2 14:57:57 standalone sudo[213228]: pam_unix(sudo:session): session closed for user root
Dec  2 14:57:57 standalone sshd[214142]: Disconnecting invalid user cisco 185.246.128.170 port 52083: Change of username or service not allowed: (cisco,ssh-connection) -> (alan,ssh-connection) [preauth]
Dec  2 14:57:58 standalone runuser[215194]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:01 standalone sshd[215793]: Invalid user alan from 185.246.128.170 port 44439
Dec  2 14:58:01 standalone sshd[215793]: Disconnecting invalid user alan 185.246.128.170 port 44439: Change of username or service not allowed: (alan,ssh-connection) -> (elasticsearch,ssh-connection) [preauth]
Dec  2 14:58:08 standalone sshd[216034]: Invalid user elasticsearch from 185.246.128.170 port 54044
Dec  2 14:58:08 standalone runuser[216354]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:09 standalone runuser[216354]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:09 standalone runuser[216444]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:10 standalone runuser[216444]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:10 standalone runuser[216520]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:11 standalone runuser[216520]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:12 standalone sshd[216034]: Disconnecting invalid user elasticsearch 185.246.128.170 port 54044: Change of username or service not allowed: (elasticsearch,ssh-connection) -> (backup,ssh-connection) [preauth]
Dec  2 14:58:19 standalone sshd[216884]: Invalid user backup from 185.246.128.170 port 30536
Dec  2 14:58:21 standalone sshd[216884]: Disconnecting invalid user backup 185.246.128.170 port 30536: Change of username or service not allowed: (backup,ssh-connection) -> (instrument,ssh-connection) [preauth]
Dec  2 14:58:21 standalone runuser[217213]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:22 standalone runuser[217213]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:22 standalone runuser[217283]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:23 standalone runuser[217283]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:23 standalone runuser[217346]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:24 standalone runuser[217346]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:30 standalone sshd[217270]: Invalid user instrument from 185.246.128.170 port 2373
Dec  2 14:58:32 standalone sshd[217270]: Disconnecting invalid user instrument 185.246.128.170 port 2373: Change of username or service not allowed: (instrument,ssh-connection) -> (user,ssh-connection) [preauth]
Dec  2 14:58:34 standalone runuser[218920]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:35 standalone runuser[218920]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:35 standalone runuser[219192]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:36 standalone runuser[219192]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:36 standalone runuser[219287]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:37 standalone runuser[219287]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:38 standalone sshd[218744]: Invalid user user from 185.246.128.170 port 38542
Dec  2 14:58:41 standalone sshd[219646]: Accepted publickey for root from 192.168.122.11 port 37330 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:42 standalone systemd[219650]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:42 standalone sshd[219646]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:44 standalone sshd[219665]: Received disconnect from 192.168.122.11 port 37330:11: disconnected by user
Dec  2 14:58:44 standalone sshd[219665]: Disconnected from user root 192.168.122.11 port 37330
Dec  2 14:58:44 standalone sshd[219646]: pam_unix(sshd:session): session closed for user root
Dec  2 14:58:45 standalone sshd[219797]: Accepted publickey for root from 192.168.122.11 port 37336 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:45 standalone sshd[219797]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:46 standalone sshd[218744]: error: maximum authentication attempts exceeded for invalid user user from 185.246.128.170 port 38542 ssh2 [preauth]
Dec  2 14:58:46 standalone sshd[218744]: Disconnecting invalid user user 185.246.128.170 port 38542: Too many authentication failures [preauth]
Dec  2 14:58:47 standalone runuser[220021]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:48 standalone runuser[220021]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:48 standalone runuser[220105]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:49 standalone runuser[220105]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:49 standalone runuser[220368]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:58:49 standalone sshd[219800]: Received disconnect from 192.168.122.11 port 37336:11: disconnected by user
Dec  2 14:58:49 standalone sshd[219800]: Disconnected from user root 192.168.122.11 port 37336
Dec  2 14:58:49 standalone sshd[219797]: pam_unix(sshd:session): session closed for user root
Dec  2 14:58:49 standalone sshd[220433]: Accepted publickey for root from 192.168.122.11 port 39484 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:49 standalone sshd[220433]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:50 standalone runuser[220368]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:58:52 standalone sshd[220445]: Received disconnect from 192.168.122.11 port 39484:11: disconnected by user
Dec  2 14:58:52 standalone sshd[220445]: Disconnected from user root 192.168.122.11 port 39484
Dec  2 14:58:52 standalone sshd[220433]: pam_unix(sshd:session): session closed for user root
Dec  2 14:58:52 standalone sshd[220522]: Accepted publickey for root from 192.168.122.11 port 39490 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:52 standalone sshd[220522]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:52 standalone sshd[220088]: Invalid user user from 185.246.128.170 port 47339
Dec  2 14:58:52 standalone sshd[220088]: Disconnecting invalid user user 185.246.128.170 port 47339: Change of username or service not allowed: (user,ssh-connection) -> (123,ssh-connection) [preauth]
Dec  2 14:58:54 standalone sshd[220525]: Received disconnect from 192.168.122.11 port 39490:11: disconnected by user
Dec  2 14:58:54 standalone sshd[220525]: Disconnected from user root 192.168.122.11 port 39490
Dec  2 14:58:54 standalone sshd[220522]: pam_unix(sshd:session): session closed for user root
Dec  2 14:58:54 standalone sshd[220668]: Accepted publickey for root from 192.168.122.11 port 39496 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:54 standalone sshd[220668]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:55 standalone sshd[220565]: Invalid user 123 from 185.246.128.170 port 35548
Dec  2 14:58:56 standalone sshd[220565]: Disconnecting invalid user 123 185.246.128.170 port 35548: Change of username or service not allowed: (123,ssh-connection) -> (yesenia,ssh-connection) [preauth]
Dec  2 14:58:57 standalone sshd[220690]: Received disconnect from 192.168.122.11 port 39496:11: disconnected by user
Dec  2 14:58:57 standalone sshd[220690]: Disconnected from user root 192.168.122.11 port 39496
Dec  2 14:58:57 standalone sshd[220668]: pam_unix(sshd:session): session closed for user root
Dec  2 14:58:57 standalone sshd[221283]: Accepted publickey for root from 192.168.122.11 port 45632 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:58:57 standalone sshd[221283]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:58:57 standalone sudo[221448]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:58:57 standalone sudo[221448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:58:57 standalone sudo[221448]: pam_unix(sudo:session): session closed for user root
Dec  2 14:58:57 standalone sshd[207486]: Received disconnect from 38.102.83.114 port 50642:11: disconnected by user
Dec  2 14:58:57 standalone sshd[207486]: Disconnected from user zuul 38.102.83.114 port 50642
Dec  2 14:58:57 standalone sshd[207407]: pam_unix(sshd:session): session closed for user zuul
Dec  2 14:58:57 standalone sudo[221471]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:58:57 standalone sudo[221471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:58:58 standalone sudo[221471]: pam_unix(sudo:session): session closed for user root
Dec  2 14:58:58 standalone sudo[221527]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:58:58 standalone sudo[221527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:58:58 standalone sudo[221527]: pam_unix(sudo:session): session closed for user root
Dec  2 14:59:00 standalone sshd[221325]: Received disconnect from 192.168.122.11 port 45632:11: disconnected by user
Dec  2 14:59:00 standalone sshd[221325]: Disconnected from user root 192.168.122.11 port 45632
Dec  2 14:59:00 standalone sshd[221283]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:00 standalone sshd[222063]: Accepted publickey for root from 192.168.122.11 port 45642 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:00 standalone sshd[222063]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:00 standalone runuser[222118]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:01 standalone runuser[222118]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:01 standalone runuser[222191]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:02 standalone runuser[222191]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:02 standalone runuser[222261]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:02 standalone sshd[222092]: Received disconnect from 192.168.122.11 port 45642:11: disconnected by user
Dec  2 14:59:02 standalone sshd[222092]: Disconnected from user root 192.168.122.11 port 45642
Dec  2 14:59:02 standalone sshd[222063]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:02 standalone sshd[222336]: Accepted publickey for root from 192.168.122.11 port 45644 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:02 standalone sshd[222336]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:03 standalone runuser[222261]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:05 standalone sshd[222472]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 14:59:05 standalone sshd[221840]: Invalid user yesenia from 185.246.128.170 port 50622
Dec  2 14:59:06 standalone sshd[221840]: Disconnecting invalid user yesenia 185.246.128.170 port 50622: Change of username or service not allowed: (yesenia,ssh-connection) -> (vncuser,ssh-connection) [preauth]
Dec  2 14:59:07 standalone sshd[222343]: Received disconnect from 192.168.122.11 port 45644:11: disconnected by user
Dec  2 14:59:07 standalone sshd[222343]: Disconnected from user root 192.168.122.11 port 45644
Dec  2 14:59:07 standalone sshd[222336]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:07 standalone sshd[222785]: Accepted publickey for root from 192.168.122.11 port 39866 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:07 standalone sshd[222785]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:09 standalone sshd[222788]: Received disconnect from 192.168.122.11 port 39866:11: disconnected by user
Dec  2 14:59:09 standalone sshd[222788]: Disconnected from user root 192.168.122.11 port 39866
Dec  2 14:59:09 standalone sshd[222785]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:09 standalone sshd[222914]: Accepted publickey for root from 192.168.122.11 port 39880 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:09 standalone sshd[222914]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:12 standalone sshd[222913]: Invalid user vncuser from 185.246.128.170 port 16963
Dec  2 14:59:12 standalone sshd[222913]: Disconnecting invalid user vncuser 185.246.128.170 port 16963: Change of username or service not allowed: (vncuser,ssh-connection) -> (user01,ssh-connection) [preauth]
Dec  2 14:59:13 standalone sshd[222930]: Received disconnect from 192.168.122.11 port 39880:11: disconnected by user
Dec  2 14:59:13 standalone sshd[222930]: Disconnected from user root 192.168.122.11 port 39880
Dec  2 14:59:13 standalone sshd[222914]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:13 standalone sshd[223125]: Accepted publickey for root from 192.168.122.11 port 39896 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:13 standalone sshd[223125]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:13 standalone runuser[223146]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:14 standalone runuser[223146]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:14 standalone runuser[223285]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:15 standalone runuser[223285]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:15 standalone runuser[223371]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:15 standalone sshd[223128]: Received disconnect from 192.168.122.11 port 39896:11: disconnected by user
Dec  2 14:59:15 standalone sshd[223128]: Disconnected from user root 192.168.122.11 port 39896
Dec  2 14:59:15 standalone sshd[223125]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:15 standalone sshd[223461]: Accepted publickey for root from 192.168.122.11 port 43352 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:15 standalone sshd[223461]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:16 standalone runuser[223371]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:17 standalone sshd[223200]: Invalid user user01 from 185.246.128.170 port 27232
Dec  2 14:59:19 standalone sshd[223200]: Disconnecting invalid user user01 185.246.128.170 port 27232: Change of username or service not allowed: (user01,ssh-connection) -> (tomcat,ssh-connection) [preauth]
Dec  2 14:59:19 standalone sshd[223464]: Received disconnect from 192.168.122.11 port 43352:11: disconnected by user
Dec  2 14:59:19 standalone sshd[223464]: Disconnected from user root 192.168.122.11 port 43352
Dec  2 14:59:19 standalone sshd[223461]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:19 standalone sshd[223916]: Accepted publickey for root from 192.168.122.11 port 43356 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:19 standalone sshd[223916]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:21 standalone sshd[223945]: Received disconnect from 192.168.122.11 port 43356:11: disconnected by user
Dec  2 14:59:21 standalone sshd[223945]: Disconnected from user root 192.168.122.11 port 43356
Dec  2 14:59:21 standalone sshd[223916]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:22 standalone sshd[224118]: Accepted publickey for root from 192.168.122.11 port 43364 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:22 standalone sshd[224118]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:24 standalone sshd[224121]: Received disconnect from 192.168.122.11 port 43364:11: disconnected by user
Dec  2 14:59:24 standalone sshd[224121]: Disconnected from user root 192.168.122.11 port 43364
Dec  2 14:59:24 standalone sshd[224118]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:24 standalone sshd[224204]: Accepted publickey for root from 192.168.122.11 port 43378 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:24 standalone sshd[224204]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:26 standalone runuser[224425]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:27 standalone runuser[224425]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:27 standalone runuser[224703]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:27 standalone sshd[224272]: Invalid user tomcat from 185.246.128.170 port 44208
Dec  2 14:59:28 standalone sshd[224272]: Disconnecting invalid user tomcat 185.246.128.170 port 44208: Change of username or service not allowed: (tomcat,ssh-connection) -> (hduser,ssh-connection) [preauth]
Dec  2 14:59:28 standalone runuser[224703]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:28 standalone runuser[225038]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:29 standalone runuser[225038]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:29 standalone sshd[224256]: Received disconnect from 192.168.122.11 port 43378:11: disconnected by user
Dec  2 14:59:29 standalone sshd[224256]: Disconnected from user root 192.168.122.11 port 43378
Dec  2 14:59:29 standalone sshd[224204]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:29 standalone sshd[225228]: Accepted publickey for root from 192.168.122.11 port 53984 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:29 standalone sshd[225228]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:32 standalone sshd[225208]: Invalid user hduser from 185.246.128.170 port 55628
Dec  2 14:59:32 standalone sshd[225208]: Disconnecting invalid user hduser 185.246.128.170 port 55628: Change of username or service not allowed: (hduser,ssh-connection) -> (test1,ssh-connection) [preauth]
Dec  2 14:59:34 standalone sshd[225233]: Received disconnect from 192.168.122.11 port 53984:11: disconnected by user
Dec  2 14:59:34 standalone sshd[225233]: Disconnected from user root 192.168.122.11 port 53984
Dec  2 14:59:34 standalone sshd[225228]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:34 standalone sshd[225934]: Accepted publickey for root from 192.168.122.11 port 53998 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:34 standalone sshd[225934]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:35 standalone sshd[225884]: Invalid user test1 from 185.246.128.170 port 49382
Dec  2 14:59:36 standalone sshd[225884]: Disconnecting invalid user test1 185.246.128.170 port 49382: Change of username or service not allowed: (test1,ssh-connection) -> (kubelet,ssh-connection) [preauth]
Dec  2 14:59:37 standalone sshd[225966]: Received disconnect from 192.168.122.11 port 53998:11: disconnected by user
Dec  2 14:59:37 standalone sshd[225966]: Disconnected from user root 192.168.122.11 port 53998
Dec  2 14:59:37 standalone sshd[225934]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:37 standalone sshd[226342]: Accepted publickey for root from 192.168.122.11 port 33888 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:37 standalone sshd[226342]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:39 standalone sshd[226346]: Invalid user kubelet from 185.246.128.170 port 55399
Dec  2 14:59:40 standalone sshd[226346]: Disconnecting invalid user kubelet 185.246.128.170 port 55399: Change of username or service not allowed: (kubelet,ssh-connection) -> (user3,ssh-connection) [preauth]
Dec  2 14:59:40 standalone runuser[226502]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:40 standalone sshd[226345]: Received disconnect from 192.168.122.11 port 33888:11: disconnected by user
Dec  2 14:59:40 standalone sshd[226345]: Disconnected from user root 192.168.122.11 port 33888
Dec  2 14:59:40 standalone sshd[226342]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:40 standalone runuser[226502]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:40 standalone sshd[226598]: Accepted publickey for root from 192.168.122.11 port 33900 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:40 standalone sshd[226598]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:40 standalone runuser[226684]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:41 standalone runuser[226684]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:41 standalone runuser[226750]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:42 standalone runuser[226750]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:43 standalone sshd[226658]: Received disconnect from 192.168.122.11 port 33900:11: disconnected by user
Dec  2 14:59:43 standalone sshd[226658]: Disconnected from user root 192.168.122.11 port 33900
Dec  2 14:59:43 standalone sshd[226598]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:43 standalone sshd[226828]: Accepted publickey for root from 192.168.122.11 port 33912 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:43 standalone sshd[226828]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:50 standalone sshd[226799]: Invalid user user3 from 185.246.128.170 port 1027
Dec  2 14:59:51 standalone sshd[226799]: Disconnecting invalid user user3 185.246.128.170 port 1027: Change of username or service not allowed: (user3,ssh-connection) -> (router,ssh-connection) [preauth]
Dec  2 14:59:53 standalone runuser[227974]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:53 standalone runuser[227974]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:53 standalone runuser[228139]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:54 standalone sudo[228186]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/bin/nova-rootwrap /etc/nova/rootwrap.conf privsep-helper --config-file /usr/share/nova/nova-dist.conf --config-file /etc/nova/nova.conf --privsep_context vif_plug_ovs.privsep.vif_plug --privsep_sock_path /tmp/tmpgz2djjvt/privsep.sock
Dec  2 14:59:54 standalone sudo[228186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 14:59:54 standalone runuser[228139]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:54 standalone runuser[228220]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 14:59:55 standalone sudo[228186]: pam_unix(sudo:session): session closed for user root
Dec  2 14:59:55 standalone runuser[228220]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 14:59:58 standalone sshd[226840]: Received disconnect from 192.168.122.11 port 33912:11: disconnected by user
Dec  2 14:59:58 standalone sshd[226840]: Disconnected from user root 192.168.122.11 port 33912
Dec  2 14:59:58 standalone sshd[226828]: pam_unix(sshd:session): session closed for user root
Dec  2 14:59:58 standalone sudo[228730]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 14:59:58 standalone sudo[228730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:59:58 standalone sudo[228730]: pam_unix(sudo:session): session closed for user root
Dec  2 14:59:58 standalone sudo[228829]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 14:59:58 standalone sudo[228829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:59:58 standalone sshd[228763]: Accepted publickey for root from 192.168.122.11 port 32792 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 14:59:58 standalone sshd[228763]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 14:59:59 standalone sudo[228829]: pam_unix(sudo:session): session closed for user root
Dec  2 14:59:59 standalone sudo[229277]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 14:59:59 standalone sudo[229277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 14:59:59 standalone sudo[229277]: pam_unix(sudo:session): session closed for user root
Dec  2 15:00:02 standalone sshd[228941]: Received disconnect from 192.168.122.11 port 32792:11: disconnected by user
Dec  2 15:00:02 standalone sshd[228941]: Disconnected from user root 192.168.122.11 port 32792
Dec  2 15:00:02 standalone sshd[228763]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:03 standalone sshd[229923]: Accepted publickey for root from 192.168.122.11 port 32802 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:03 standalone sshd[229923]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:05 standalone sshd[229926]: Received disconnect from 192.168.122.11 port 32802:11: disconnected by user
Dec  2 15:00:05 standalone sshd[229926]: Disconnected from user root 192.168.122.11 port 32802
Dec  2 15:00:05 standalone sshd[229923]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:05 standalone sshd[230077]: Accepted publickey for root from 192.168.122.11 port 42330 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:05 standalone sshd[230077]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:06 standalone runuser[230147]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:07 standalone runuser[230147]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:07 standalone runuser[230375]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:07 standalone sshd[228921]: Invalid user router from 185.246.128.170 port 57679
Dec  2 15:00:07 standalone sshd[228921]: Disconnecting invalid user router 185.246.128.170 port 57679: Change of username or service not allowed: (router,ssh-connection) -> (root2,ssh-connection) [preauth]
Dec  2 15:00:07 standalone runuser[230375]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:07 standalone runuser[230436]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:08 standalone sshd[230080]: Received disconnect from 192.168.122.11 port 42330:11: disconnected by user
Dec  2 15:00:08 standalone sshd[230080]: Disconnected from user root 192.168.122.11 port 42330
Dec  2 15:00:08 standalone sshd[230077]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:08 standalone sshd[230492]: Accepted publickey for root from 192.168.122.11 port 42344 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:08 standalone sshd[230492]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:08 standalone runuser[230436]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:10 standalone sshd[230545]: Invalid user root2 from 185.246.128.170 port 62493
Dec  2 15:00:10 standalone sshd[230526]: Received disconnect from 192.168.122.11 port 42344:11: disconnected by user
Dec  2 15:00:10 standalone sshd[230526]: Disconnected from user root 192.168.122.11 port 42344
Dec  2 15:00:10 standalone sshd[230492]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:10 standalone sshd[230636]: Accepted publickey for root from 192.168.122.11 port 42356 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:10 standalone sshd[230636]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:11 standalone sshd[230545]: Disconnecting invalid user root2 185.246.128.170 port 62493: Change of username or service not allowed: (root2,ssh-connection) -> (cloudera,ssh-connection) [preauth]
Dec  2 15:00:13 standalone sshd[230639]: Received disconnect from 192.168.122.11 port 42356:11: disconnected by user
Dec  2 15:00:13 standalone sshd[230639]: Disconnected from user root 192.168.122.11 port 42356
Dec  2 15:00:13 standalone sshd[230636]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:13 standalone sshd[230866]: Accepted publickey for root from 192.168.122.11 port 42362 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:13 standalone sshd[230866]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:15 standalone sshd[230991]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:00:16 standalone sshd[230877]: Received disconnect from 192.168.122.11 port 42362:11: disconnected by user
Dec  2 15:00:16 standalone sshd[230877]: Disconnected from user root 192.168.122.11 port 42362
Dec  2 15:00:16 standalone sshd[230866]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:16 standalone sshd[231093]: Accepted publickey for root from 192.168.122.11 port 56528 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:16 standalone sshd[231093]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:19 standalone sshd[231096]: Received disconnect from 192.168.122.11 port 56528:11: disconnected by user
Dec  2 15:00:19 standalone sshd[231096]: Disconnected from user root 192.168.122.11 port 56528
Dec  2 15:00:19 standalone sshd[231093]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:19 standalone runuser[231275]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:19 standalone sshd[231283]: Accepted publickey for root from 192.168.122.11 port 56536 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:19 standalone sshd[231283]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:19 standalone sshd[230862]: Invalid user cloudera from 185.246.128.170 port 16485
Dec  2 15:00:19 standalone sshd[230862]: Disconnecting invalid user cloudera 185.246.128.170 port 16485: Change of username or service not allowed: (cloudera,ssh-connection) -> (morteza,ssh-connection) [preauth]
Dec  2 15:00:19 standalone runuser[231275]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:20 standalone runuser[231416]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:20 standalone runuser[231416]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:20 standalone runuser[231583]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:21 standalone runuser[231583]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:22 standalone sshd[231323]: Received disconnect from 192.168.122.11 port 56536:11: disconnected by user
Dec  2 15:00:22 standalone sshd[231323]: Disconnected from user root 192.168.122.11 port 56536
Dec  2 15:00:22 standalone sshd[231283]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:22 standalone sshd[231720]: Accepted publickey for root from 192.168.122.11 port 56540 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:22 standalone sshd[231720]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:23 standalone sudo[231813]:    root : PWD=/ ; USER=root ; COMMAND=/usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf privsep-helper --config-file /usr/share/cinder/cinder-dist.conf --config-file /etc/cinder/cinder.conf --privsep_context cinder.privsep.sys_admin_pctxt --privsep_sock_path /tmp/tmpy91537dd/privsep.sock
Dec  2 15:00:23 standalone sudo[231813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:24 standalone sudo[231813]: pam_unix(sudo:session): session closed for user root
Dec  2 15:00:25 standalone sshd[231723]: Received disconnect from 192.168.122.11 port 56540:11: disconnected by user
Dec  2 15:00:25 standalone sshd[231723]: Disconnected from user root 192.168.122.11 port 56540
Dec  2 15:00:25 standalone sshd[231720]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:26 standalone sshd[231830]: Invalid user morteza from 185.246.128.170 port 45592
Dec  2 15:00:27 standalone sshd[231830]: Disconnecting invalid user morteza 185.246.128.170 port 45592: Change of username or service not allowed: (morteza,ssh-connection) -> (dev,ssh-connection) [preauth]
Dec  2 15:00:30 standalone sshd[232612]: Accepted publickey for root from 192.168.122.11 port 34024 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:30 standalone sshd[232612]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:32 standalone runuser[232779]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:32 standalone runuser[232779]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:32 standalone runuser[233049]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:32 standalone sshd[232673]: Received disconnect from 192.168.122.11 port 34024:11: disconnected by user
Dec  2 15:00:32 standalone sshd[232673]: Disconnected from user root 192.168.122.11 port 34024
Dec  2 15:00:32 standalone sshd[232612]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:33 standalone sshd[233160]: Accepted publickey for root from 192.168.122.11 port 34026 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:33 standalone sshd[233160]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:33 standalone runuser[233049]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:33 standalone runuser[233401]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:34 standalone runuser[233401]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:35 standalone sshd[233259]: Received disconnect from 192.168.122.11 port 34026:11: disconnected by user
Dec  2 15:00:35 standalone sshd[233259]: Disconnected from user root 192.168.122.11 port 34026
Dec  2 15:00:35 standalone sshd[233160]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:35 standalone sshd[233709]: Accepted publickey for root from 192.168.122.11 port 39222 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:35 standalone sshd[233709]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:38 standalone sshd[233745]: Received disconnect from 192.168.122.11 port 39222:11: disconnected by user
Dec  2 15:00:38 standalone sshd[233745]: Disconnected from user root 192.168.122.11 port 39222
Dec  2 15:00:38 standalone sshd[233709]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:38 standalone sshd[234020]: Accepted publickey for root from 192.168.122.11 port 39228 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:38 standalone sshd[234020]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:39 standalone sshd[232763]: Invalid user dev from 185.246.128.170 port 8448
Dec  2 15:00:40 standalone sshd[234031]: Received disconnect from 192.168.122.11 port 39228:11: disconnected by user
Dec  2 15:00:40 standalone sshd[234031]: Disconnected from user root 192.168.122.11 port 39228
Dec  2 15:00:40 standalone sshd[234020]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:40 standalone sshd[234184]: Accepted publickey for root from 192.168.122.11 port 39230 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:41 standalone sshd[234184]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:43 standalone sshd[234187]: Received disconnect from 192.168.122.11 port 39230:11: disconnected by user
Dec  2 15:00:43 standalone sshd[234187]: Disconnected from user root 192.168.122.11 port 39230
Dec  2 15:00:43 standalone sshd[234184]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:43 standalone sshd[234332]: Accepted publickey for root from 192.168.122.11 port 39242 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:43 standalone sshd[234332]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:44 standalone sshd[232763]: Disconnecting invalid user dev 185.246.128.170 port 8448: Change of username or service not allowed: (dev,ssh-connection) -> (aman,ssh-connection) [preauth]
Dec  2 15:00:45 standalone runuser[234368]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:45 standalone runuser[234368]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:45 standalone runuser[234526]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:46 standalone sudo[234618]:    nova : PWD=/ ; USER=root ; COMMAND=/usr/bin/nova-rootwrap /etc/nova/rootwrap.conf privsep-helper --config-file /usr/share/nova/nova-dist.conf --config-file /etc/nova/nova.conf --privsep_context os_brick.privileged.default --privsep_sock_path /tmp/tmp1qzt_xo4/privsep.sock
Dec  2 15:00:46 standalone sudo[234618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42436)
Dec  2 15:00:46 standalone runuser[234526]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:46 standalone sshd[234339]: Received disconnect from 192.168.122.11 port 39242:11: disconnected by user
Dec  2 15:00:46 standalone sshd[234339]: Disconnected from user root 192.168.122.11 port 39242
Dec  2 15:00:46 standalone sshd[234332]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:46 standalone runuser[234633]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:46 standalone sshd[234643]: Accepted publickey for root from 192.168.122.11 port 48428 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:46 standalone sshd[234643]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:47 standalone sudo[234618]: pam_unix(sudo:session): session closed for user root
Dec  2 15:00:47 standalone runuser[234633]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:49 standalone sshd[234686]: Received disconnect from 192.168.122.11 port 48428:11: disconnected by user
Dec  2 15:00:49 standalone sshd[234686]: Disconnected from user root 192.168.122.11 port 48428
Dec  2 15:00:49 standalone sshd[234643]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:49 standalone sshd[234890]: Accepted publickey for root from 192.168.122.11 port 48436 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:49 standalone sshd[234890]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:52 standalone sshd[234894]: Received disconnect from 192.168.122.11 port 48436:11: disconnected by user
Dec  2 15:00:52 standalone sshd[234894]: Disconnected from user root 192.168.122.11 port 48436
Dec  2 15:00:52 standalone sshd[234890]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:52 standalone sshd[235173]: Accepted publickey for root from 192.168.122.11 port 48438 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:52 standalone sshd[235173]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:53 standalone sshd[234887]: Invalid user aman from 185.246.128.170 port 33028
Dec  2 15:00:53 standalone sshd[234887]: Disconnecting invalid user aman 185.246.128.170 port 33028: Change of username or service not allowed: (aman,ssh-connection) -> (joe,ssh-connection) [preauth]
Dec  2 15:00:54 standalone sshd[235212]: Received disconnect from 192.168.122.11 port 48438:11: disconnected by user
Dec  2 15:00:54 standalone sshd[235212]: Disconnected from user root 192.168.122.11 port 48438
Dec  2 15:00:54 standalone sshd[235173]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:54 standalone sshd[235366]: Accepted publickey for root from 192.168.122.11 port 48448 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:54 standalone sshd[235366]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:57 standalone sshd[235369]: Received disconnect from 192.168.122.11 port 48448:11: disconnected by user
Dec  2 15:00:57 standalone sshd[235369]: Disconnected from user root 192.168.122.11 port 48448
Dec  2 15:00:57 standalone sshd[235366]: pam_unix(sshd:session): session closed for user root
Dec  2 15:00:57 standalone sshd[235655]: Accepted publickey for root from 192.168.122.11 port 33088 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:00:57 standalone sshd[235655]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:00:57 standalone runuser[235727]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:58 standalone runuser[235727]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:58 standalone runuser[235794]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:59 standalone runuser[235794]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:00:59 standalone runuser[235871]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:00:59 standalone sudo[235856]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:00:59 standalone sudo[235856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:00:59 standalone sudo[235856]: pam_unix(sudo:session): session closed for user root
Dec  2 15:00:59 standalone sudo[235916]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:00:59 standalone sudo[235916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:01:00 standalone sudo[235916]: pam_unix(sudo:session): session closed for user root
Dec  2 15:01:00 standalone sudo[236039]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:01:00 standalone sudo[236039]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:01:00 standalone sudo[236039]: pam_unix(sudo:session): session closed for user root
Dec  2 15:01:00 standalone runuser[235871]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:01 standalone sshd[235554]: Invalid user joe from 185.246.128.170 port 49332
Dec  2 15:01:01 standalone sshd[235554]: Disconnecting invalid user joe 185.246.128.170 port 49332: Change of username or service not allowed: (joe,ssh-connection) -> (es2,ssh-connection) [preauth]
Dec  2 15:01:05 standalone sshd[235658]: Received disconnect from 192.168.122.11 port 33088:11: disconnected by user
Dec  2 15:01:05 standalone sshd[235658]: Disconnected from user root 192.168.122.11 port 33088
Dec  2 15:01:05 standalone sshd[235655]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:06 standalone sshd[237744]: Accepted publickey for root from 192.168.122.11 port 52600 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:06 standalone sshd[237744]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:08 standalone sshd[237747]: Received disconnect from 192.168.122.11 port 52600:11: disconnected by user
Dec  2 15:01:08 standalone sshd[237747]: Disconnected from user root 192.168.122.11 port 52600
Dec  2 15:01:08 standalone sshd[237744]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:09 standalone sshd[238013]: Accepted publickey for root from 192.168.122.11 port 52604 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:09 standalone sshd[238013]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:09 standalone sshd[237648]: Invalid user es2 from 185.246.128.170 port 14773
Dec  2 15:01:10 standalone sshd[237648]: Disconnecting invalid user es2 185.246.128.170 port 14773: Change of username or service not allowed: (es2,ssh-connection) -> (pwrchute,ssh-connection) [preauth]
Dec  2 15:01:10 standalone runuser[238125]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:11 standalone sudo[238172]:    root : PWD=/ ; USER=root ; COMMAND=/usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf privsep-helper --config-file /usr/share/cinder/cinder-dist.conf --config-file /etc/cinder/cinder.conf --privsep_context os_brick.privileged.default --privsep_sock_path /tmp/tmp8gm2l8uz/privsep.sock
Dec  2 15:01:11 standalone sudo[238172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:11 standalone sshd[238027]: Received disconnect from 192.168.122.11 port 52604:11: disconnected by user
Dec  2 15:01:11 standalone sshd[238027]: Disconnected from user root 192.168.122.11 port 52604
Dec  2 15:01:11 standalone sshd[238013]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:11 standalone sshd[238182]: Accepted publickey for root from 192.168.122.11 port 52612 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:11 standalone sshd[238182]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:11 standalone runuser[238125]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:11 standalone runuser[238218]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:12 standalone sudo[238172]: pam_unix(sudo:session): session closed for user root
Dec  2 15:01:12 standalone runuser[238218]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:12 standalone runuser[238329]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:13 standalone runuser[238329]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:13 standalone sshd[238193]: Received disconnect from 192.168.122.11 port 52612:11: disconnected by user
Dec  2 15:01:13 standalone sshd[238193]: Disconnected from user root 192.168.122.11 port 52612
Dec  2 15:01:13 standalone sshd[238182]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:19 standalone sshd[238894]: Accepted publickey for root from 192.168.122.11 port 51888 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:19 standalone sshd[238894]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:21 standalone sshd[238897]: Received disconnect from 192.168.122.11 port 51888:11: disconnected by user
Dec  2 15:01:21 standalone sshd[238897]: Disconnected from user root 192.168.122.11 port 51888
Dec  2 15:01:21 standalone sshd[238894]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:22 standalone sshd[239062]: Accepted publickey for root from 192.168.122.11 port 51898 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:22 standalone sshd[239062]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:23 standalone sshd[238422]: Invalid user pwrchute from 185.246.128.170 port 60222
Dec  2 15:01:24 standalone runuser[239277]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:24 standalone runuser[239277]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:24 standalone runuser[239348]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:25 standalone sshd[239122]: Received disconnect from 192.168.122.11 port 51898:11: disconnected by user
Dec  2 15:01:25 standalone sshd[239122]: Disconnected from user root 192.168.122.11 port 51898
Dec  2 15:01:25 standalone sshd[239062]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:25 standalone sshd[239393]: Accepted publickey for root from 192.168.122.11 port 35106 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:25 standalone sshd[239393]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:25 standalone runuser[239348]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:25 standalone runuser[239453]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:26 standalone runuser[239453]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:26 standalone sshd[238422]: Disconnecting invalid user pwrchute 185.246.128.170 port 60222: Change of username or service not allowed: (pwrchute,ssh-connection) -> (syncthing,ssh-connection) [preauth]
Dec  2 15:01:27 standalone sshd[239396]: Received disconnect from 192.168.122.11 port 35106:11: disconnected by user
Dec  2 15:01:27 standalone sshd[239396]: Disconnected from user root 192.168.122.11 port 35106
Dec  2 15:01:27 standalone sshd[239393]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:28 standalone sshd[239718]: Accepted publickey for root from 192.168.122.11 port 35110 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:01:28 standalone sshd[239718]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:01:31 standalone sshd[239721]: Received disconnect from 192.168.122.11 port 35110:11: disconnected by user
Dec  2 15:01:31 standalone sshd[239721]: Disconnected from user root 192.168.122.11 port 35110
Dec  2 15:01:31 standalone sshd[239718]: pam_unix(sshd:session): session closed for user root
Dec  2 15:01:34 standalone sshd[240334]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:01:36 standalone runuser[241154]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:37 standalone sshd[239826]: Invalid user syncthing from 185.246.128.170 port 51707
Dec  2 15:01:37 standalone sshd[239826]: Disconnecting invalid user syncthing 185.246.128.170 port 51707: Change of username or service not allowed: (syncthing,ssh-connection) -> (support,ssh-connection) [preauth]
Dec  2 15:01:37 standalone runuser[241154]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:37 standalone runuser[241305]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:38 standalone runuser[241305]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:38 standalone runuser[241367]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:39 standalone runuser[241367]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:49 standalone runuser[243041]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:50 standalone runuser[243041]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:50 standalone runuser[243110]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:50 standalone sshd[241576]: Invalid user support from 185.246.128.170 port 60849
Dec  2 15:01:51 standalone runuser[243110]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:51 standalone runuser[243217]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:01:52 standalone runuser[243217]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:01:54 standalone sshd[241576]: Disconnecting invalid user support 185.246.128.170 port 60849: Change of username or service not allowed: (support,ssh-connection) -> (guest,ssh-connection) [preauth]
Dec  2 15:01:57 standalone sshd[243638]: Invalid user guest from 185.246.128.170 port 37270
Dec  2 15:01:59 standalone sshd[243638]: Disconnecting invalid user guest 185.246.128.170 port 37270: Change of username or service not allowed: (guest,ssh-connection) -> (kafka,ssh-connection) [preauth]
Dec  2 15:02:00 standalone sudo[243797]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:02:00 standalone sudo[243797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:02:00 standalone sudo[243797]: pam_unix(sudo:session): session closed for user root
Dec  2 15:02:00 standalone sudo[243812]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:02:00 standalone sudo[243812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:02:01 standalone sudo[243812]: pam_unix(sudo:session): session closed for user root
Dec  2 15:02:01 standalone sudo[243979]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:02:01 standalone sudo[243979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:02:01 standalone sudo[243979]: pam_unix(sudo:session): session closed for user root
Dec  2 15:02:02 standalone runuser[244311]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:03 standalone runuser[244311]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:03 standalone runuser[244566]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:04 standalone runuser[244566]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:04 standalone runuser[244628]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:05 standalone sshd[243796]: Invalid user kafka from 185.246.128.170 port 56146
Dec  2 15:02:06 standalone runuser[244628]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:06 standalone sshd[243796]: Disconnecting invalid user kafka 185.246.128.170 port 56146: Change of username or service not allowed: (kafka,ssh-connection) -> (cristi,ssh-connection) [preauth]
Dec  2 15:02:09 standalone sshd[245456]: Invalid user cristi from 185.246.128.170 port 24199
Dec  2 15:02:10 standalone sshd[245456]: Disconnecting invalid user cristi 185.246.128.170 port 24199: Change of username or service not allowed: (cristi,ssh-connection) -> (prueba,ssh-connection) [preauth]
Dec  2 15:02:16 standalone runuser[245890]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:17 standalone runuser[245890]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:17 standalone runuser[246040]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:18 standalone runuser[246040]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:18 standalone runuser[246136]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:19 standalone runuser[246136]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:20 standalone sshd[245786]: Invalid user prueba from 185.246.128.170 port 6428
Dec  2 15:02:21 standalone sshd[245786]: Disconnecting invalid user prueba 185.246.128.170 port 6428: Change of username or service not allowed: (prueba,ssh-connection) -> (orangepi,ssh-connection) [preauth]
Dec  2 15:02:24 standalone sshd[246363]: Invalid user orangepi from 185.246.128.170 port 40757
Dec  2 15:02:25 standalone sshd[246363]: Disconnecting invalid user orangepi 185.246.128.170 port 40757: Change of username or service not allowed: (orangepi,ssh-connection) -> (lixiang,ssh-connection) [preauth]
Dec  2 15:02:29 standalone runuser[246806]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:30 standalone runuser[246806]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:30 standalone runuser[246875]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:31 standalone runuser[246875]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:31 standalone runuser[246937]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:32 standalone runuser[246937]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:35 standalone sshd[246801]: Invalid user lixiang from 185.246.128.170 port 45868
Dec  2 15:02:35 standalone sshd[246801]: Disconnecting invalid user lixiang 185.246.128.170 port 45868: Change of username or service not allowed: (lixiang,ssh-connection) -> (ftpusr,ssh-connection) [preauth]
Dec  2 15:02:38 standalone sshd[247625]: Invalid user ftpusr from 185.246.128.170 port 40007
Dec  2 15:02:38 standalone sshd[247625]: Disconnecting invalid user ftpusr 185.246.128.170 port 40007: Change of username or service not allowed: (ftpusr,ssh-connection) -> (Administrator,ssh-connection) [preauth]
Dec  2 15:02:42 standalone sshd[248500]: Invalid user Administrator from 185.246.128.170 port 1208
Dec  2 15:02:42 standalone runuser[248718]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:43 standalone runuser[248718]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:43 standalone runuser[248787]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:44 standalone runuser[248787]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:44 standalone runuser[248845]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:45 standalone runuser[248845]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:46 standalone sshd[249103]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:02:53 standalone sshd[248500]: Disconnecting invalid user Administrator 185.246.128.170 port 1208: Change of username or service not allowed: (Administrator,ssh-connection) -> (landscape,ssh-connecti [preauth]
Dec  2 15:02:55 standalone sshd[249339]: Invalid user landscape from 185.246.128.170 port 25900
Dec  2 15:02:55 standalone runuser[249565]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:56 standalone runuser[249565]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:56 standalone runuser[249748]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:56 standalone sshd[249339]: Disconnecting invalid user landscape 185.246.128.170 port 25900: Change of username or service not allowed: (landscape,ssh-connection) -> (cirros,ssh-connection) [preauth]
Dec  2 15:02:57 standalone runuser[249748]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:02:57 standalone runuser[249847]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:02:58 standalone runuser[249847]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:01 standalone sudo[250020]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:03:01 standalone sudo[250020]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:03:01 standalone sudo[250020]: pam_unix(sudo:session): session closed for user root
Dec  2 15:03:01 standalone sudo[250035]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:03:01 standalone sudo[250035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:03:02 standalone sudo[250035]: pam_unix(sudo:session): session closed for user root
Dec  2 15:03:02 standalone sudo[250205]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:03:02 standalone sudo[250205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:03:02 standalone sudo[250205]: pam_unix(sudo:session): session closed for user root
Dec  2 15:03:07 standalone sshd[250011]: Invalid user cirros from 185.246.128.170 port 36634
Dec  2 15:03:08 standalone sshd[250011]: Disconnecting invalid user cirros 185.246.128.170 port 36634: Change of username or service not allowed: (cirros,ssh-connection) -> (smart,ssh-connection) [preauth]
Dec  2 15:03:08 standalone runuser[251530]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:09 standalone runuser[251530]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:09 standalone runuser[251599]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:10 standalone runuser[251599]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:10 standalone runuser[251661]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:11 standalone runuser[251661]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:17 standalone sshd[251039]: Connection closed by authenticating user root 139.19.117.130 port 49596 [preauth]
Dec  2 15:03:21 standalone sshd[251708]: Invalid user smart from 185.246.128.170 port 29176
Dec  2 15:03:21 standalone sshd[251708]: Disconnecting invalid user smart 185.246.128.170 port 29176: Change of username or service not allowed: (smart,ssh-connection) -> (dqi,ssh-connection) [preauth]
Dec  2 15:03:21 standalone runuser[252354]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:22 standalone runuser[252354]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:22 standalone runuser[252510]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:23 standalone runuser[252510]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:23 standalone runuser[252564]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:24 standalone runuser[252564]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:25 standalone sshd[252484]: Invalid user dqi from 185.246.128.170 port 28828
Dec  2 15:03:30 standalone sshd[252484]: Disconnecting invalid user dqi 185.246.128.170 port 28828: Change of username or service not allowed: (dqi,ssh-connection) -> (Admin,ssh-connection) [preauth]
Dec  2 15:03:35 standalone runuser[253152]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:35 standalone runuser[253152]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:35 standalone runuser[253551]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:36 standalone runuser[253551]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:36 standalone runuser[253966]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:37 standalone runuser[253966]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:43 standalone sshd[254223]: Invalid user Admin from 185.246.128.170 port 36571
Dec  2 15:03:46 standalone sshd[254974]: Accepted publickey for root from 192.168.122.11 port 38076 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:03:46 standalone sshd[254974]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:03:47 standalone runuser[255291]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:48 standalone runuser[255291]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:48 standalone runuser[255542]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:49 standalone runuser[255542]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:49 standalone runuser[255649]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:03:49 standalone sshd[254223]: Disconnecting invalid user Admin 185.246.128.170 port 36571: Change of username or service not allowed: (Admin,ssh-connection) -> (seki,ssh-connection) [preauth]
Dec  2 15:03:49 standalone sshd[254982]: Received disconnect from 192.168.122.11 port 38076:11: disconnected by user
Dec  2 15:03:49 standalone sshd[254982]: Disconnected from user root 192.168.122.11 port 38076
Dec  2 15:03:49 standalone sshd[254974]: pam_unix(sshd:session): session closed for user root
Dec  2 15:03:50 standalone sshd[255713]: Accepted publickey for root from 192.168.122.11 port 38090 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:03:50 standalone sshd[255713]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:03:50 standalone sshd[255721]: Received disconnect from 192.168.122.11 port 38090:11: disconnected by user
Dec  2 15:03:50 standalone sshd[255721]: Disconnected from user root 192.168.122.11 port 38090
Dec  2 15:03:50 standalone sshd[255713]: pam_unix(sshd:session): session closed for user root
Dec  2 15:03:50 standalone runuser[255649]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:03:50 standalone sshd[255739]: Accepted publickey for root from 192.168.122.11 port 38104 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:03:50 standalone sshd[255739]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:03:50 standalone sshd[255753]: Received disconnect from 192.168.122.11 port 38104:11: disconnected by user
Dec  2 15:03:50 standalone sshd[255753]: Disconnected from user root 192.168.122.11 port 38104
Dec  2 15:03:50 standalone sshd[255739]: pam_unix(sshd:session): session closed for user root
Dec  2 15:03:56 standalone sshd[255780]: Invalid user seki from 185.246.128.170 port 22932
Dec  2 15:03:56 standalone sshd[255780]: Disconnecting invalid user seki 185.246.128.170 port 22932: Change of username or service not allowed: (seki,ssh-connection) -> (alireza,ssh-connection) [preauth]
Dec  2 15:04:00 standalone runuser[256361]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:01 standalone runuser[256361]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:01 standalone runuser[256430]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:02 standalone runuser[256430]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:02 standalone runuser[256486]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:02 standalone sudo[256581]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:04:02 standalone sudo[256581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:04:02 standalone sudo[256581]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:02 standalone sudo[256632]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:04:02 standalone sudo[256632]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:04:03 standalone runuser[256486]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:03 standalone sudo[256632]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:03 standalone sudo[256725]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:04:03 standalone sudo[256725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:04:03 standalone sudo[256725]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:03 standalone sshd[256740]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:04:05 standalone sshd[256290]: Invalid user alireza from 185.246.128.170 port 64309
Dec  2 15:04:06 standalone sshd[256766]: Accepted publickey for root from 192.168.122.11 port 39136 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:06 standalone sshd[256766]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:06 standalone sudo[256892]:    root : PWD=/root ; USER=root ; COMMAND=/bin/podman exec -it nova_api nova-manage cell_v2 list_cells
Dec  2 15:04:06 standalone sudo[256892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:09 standalone sudo[256892]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:09 standalone sshd[256858]: Received disconnect from 192.168.122.11 port 39136:11: disconnected by user
Dec  2 15:04:09 standalone sshd[256858]: Disconnected from user root 192.168.122.11 port 39136
Dec  2 15:04:09 standalone sshd[256766]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:10 standalone sshd[256290]: Disconnecting invalid user alireza 185.246.128.170 port 64309: Change of username or service not allowed: (alireza,ssh-connection) -> (minima,ssh-connection) [preauth]
Dec  2 15:04:13 standalone runuser[258194]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:14 standalone runuser[258194]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:14 standalone runuser[258331]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:15 standalone runuser[258331]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:15 standalone runuser[258415]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:16 standalone runuser[258415]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:16 standalone sshd[258288]: Invalid user minima from 185.246.128.170 port 29461
Dec  2 15:04:24 standalone sshd[258986]: Accepted publickey for root from 192.168.122.11 port 41538 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:24 standalone sshd[258986]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:24 standalone sudo[258998]:    root : PWD=/root ; USER=root ; COMMAND=/bin/podman exec -it nova_conductor nova-manage cell_v2 list_cells
Dec  2 15:04:24 standalone sudo[258998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:24 standalone sshd[258288]: Disconnecting invalid user minima 185.246.128.170 port 29461: Change of username or service not allowed: (minima,ssh-connection) -> (richard,ssh-connection) [preauth]
Dec  2 15:04:26 standalone sshd[259030]: Invalid user richard from 185.246.128.170 port 64936
Dec  2 15:04:26 standalone runuser[259138]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:27 standalone sudo[258998]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:27 standalone sshd[258997]: Received disconnect from 192.168.122.11 port 41538:11: disconnected by user
Dec  2 15:04:27 standalone sshd[258997]: Disconnected from user root 192.168.122.11 port 41538
Dec  2 15:04:27 standalone sshd[258986]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:27 standalone runuser[259138]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:27 standalone sshd[259375]: Accepted publickey for root from 192.168.122.11 port 39716 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:27 standalone sshd[259375]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:27 standalone runuser[259387]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:27 standalone sudo[259402]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api.service
Dec  2 15:04:27 standalone sudo[259402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:27 standalone sudo[259402]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:27 standalone sshd[259389]: Received disconnect from 192.168.122.11 port 39716:11: disconnected by user
Dec  2 15:04:27 standalone sshd[259389]: Disconnected from user root 192.168.122.11 port 39716
Dec  2 15:04:27 standalone sshd[259375]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:27 standalone sshd[259489]: Accepted publickey for root from 192.168.122.11 port 39724 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:27 standalone sshd[259489]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:28 standalone sudo[259493]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_api.service
Dec  2 15:04:28 standalone sudo[259493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:28 standalone runuser[259387]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:28 standalone runuser[259561]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:29 standalone runuser[259561]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:29 standalone sshd[259030]: Disconnecting invalid user richard 185.246.128.170 port 64936: Change of username or service not allowed: (richard,ssh-connection) -> (publicuser,ssh-connection) [preauth]
Dec  2 15:04:31 standalone sudo[259493]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:31 standalone sshd[259492]: Received disconnect from 192.168.122.11 port 39724:11: disconnected by user
Dec  2 15:04:31 standalone sshd[259492]: Disconnected from user root 192.168.122.11 port 39724
Dec  2 15:04:31 standalone sshd[259489]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:31 standalone sshd[259699]: Invalid user publicuser from 185.246.128.170 port 48042
Dec  2 15:04:31 standalone sshd[259735]: Accepted publickey for root from 192.168.122.11 port 39728 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:31 standalone sshd[259735]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:31 standalone sudo[259739]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api_cron.service
Dec  2 15:04:31 standalone sudo[259739]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:31 standalone sudo[259739]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:31 standalone sshd[259738]: Received disconnect from 192.168.122.11 port 39728:11: disconnected by user
Dec  2 15:04:31 standalone sshd[259738]: Disconnected from user root 192.168.122.11 port 39728
Dec  2 15:04:31 standalone sshd[259735]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:32 standalone sshd[259756]: Accepted publickey for root from 192.168.122.11 port 39732 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:32 standalone sshd[259756]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:32 standalone sudo[259760]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_api_cron.service
Dec  2 15:04:32 standalone sudo[259760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:32 standalone sshd[259699]: Disconnecting invalid user publicuser 185.246.128.170 port 48042: Change of username or service not allowed: (publicuser,ssh-connection) -> (charles,ssh-connection) [preauth]
Dec  2 15:04:32 standalone sudo[259760]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:32 standalone sshd[259759]: Received disconnect from 192.168.122.11 port 39732:11: disconnected by user
Dec  2 15:04:32 standalone sshd[259759]: Disconnected from user root 192.168.122.11 port 39732
Dec  2 15:04:32 standalone sshd[259756]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:32 standalone sshd[259825]: Accepted publickey for root from 192.168.122.11 port 39744 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:32 standalone sshd[259825]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:32 standalone sudo[259882]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_evaluator.service
Dec  2 15:04:32 standalone sudo[259882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:32 standalone sudo[259882]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:32 standalone sshd[259878]: Received disconnect from 192.168.122.11 port 39744:11: disconnected by user
Dec  2 15:04:33 standalone sshd[259878]: Disconnected from user root 192.168.122.11 port 39744
Dec  2 15:04:33 standalone sshd[259825]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:33 standalone sshd[259897]: Accepted publickey for root from 192.168.122.11 port 39750 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:33 standalone sshd[259897]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:33 standalone sudo[259910]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_evaluator.service
Dec  2 15:04:33 standalone sudo[259910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:34 standalone sudo[259910]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:34 standalone sshd[259909]: Received disconnect from 192.168.122.11 port 39750:11: disconnected by user
Dec  2 15:04:34 standalone sshd[259909]: Disconnected from user root 192.168.122.11 port 39750
Dec  2 15:04:34 standalone sshd[259897]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:34 standalone sshd[259971]: Accepted publickey for root from 192.168.122.11 port 39762 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:34 standalone sshd[259971]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:34 standalone sudo[259983]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_listener.service
Dec  2 15:04:34 standalone sudo[259983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:34 standalone sudo[259983]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:34 standalone sshd[259982]: Received disconnect from 192.168.122.11 port 39762:11: disconnected by user
Dec  2 15:04:34 standalone sshd[259982]: Disconnected from user root 192.168.122.11 port 39762
Dec  2 15:04:34 standalone sshd[259971]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:35 standalone sshd[259998]: Accepted publickey for root from 192.168.122.11 port 39776 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:35 standalone sshd[259998]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:35 standalone sudo[260002]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_listener.service
Dec  2 15:04:35 standalone sudo[260002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:38 standalone sshd[259907]: Invalid user charles from 185.246.128.170 port 16454
Dec  2 15:04:39 standalone sshd[259907]: Disconnecting invalid user charles 185.246.128.170 port 16454: Change of username or service not allowed: (charles,ssh-connection) -> (momoru,ssh-connection) [preauth]
Dec  2 15:04:39 standalone runuser[261241]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:40 standalone runuser[261241]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:40 standalone runuser[261470]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:41 standalone runuser[261470]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:41 standalone runuser[261532]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:42 standalone runuser[261532]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:44 standalone sudo[260002]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:44 standalone sshd[260001]: Received disconnect from 192.168.122.11 port 39776:11: disconnected by user
Dec  2 15:04:44 standalone sshd[260001]: Disconnected from user root 192.168.122.11 port 39776
Dec  2 15:04:44 standalone sshd[259998]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:44 standalone sshd[261827]: Accepted publickey for root from 192.168.122.11 port 39114 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:44 standalone sshd[261827]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:44 standalone sudo[261844]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_notifier.service
Dec  2 15:04:44 standalone sudo[261844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:44 standalone sudo[261844]: pam_unix(sudo:session): session closed for user root
Dec  2 15:04:44 standalone sshd[261843]: Received disconnect from 192.168.122.11 port 39114:11: disconnected by user
Dec  2 15:04:44 standalone sshd[261843]: Disconnected from user root 192.168.122.11 port 39114
Dec  2 15:04:44 standalone sshd[261827]: pam_unix(sshd:session): session closed for user root
Dec  2 15:04:44 standalone sshd[261859]: Accepted publickey for root from 192.168.122.11 port 39124 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:04:44 standalone sshd[261859]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:44 standalone sudo[261863]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_aodh_notifier.service
Dec  2 15:04:44 standalone sudo[261863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:04:48 standalone sshd[261594]: Invalid user momoru from 185.246.128.170 port 10553
Dec  2 15:04:48 standalone sshd[261594]: Disconnecting invalid user momoru 185.246.128.170 port 10553: Change of username or service not allowed: (momoru,ssh-connection) -> (bbs,ssh-connection) [preauth]
Dec  2 15:04:53 standalone runuser[262308]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:53 standalone runuser[262308]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:54 standalone runuser[262396]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:54 standalone runuser[262396]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:54 standalone runuser[262458]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:04:55 standalone sshd[262250]: Invalid user bbs from 185.246.128.170 port 47470
Dec  2 15:04:55 standalone runuser[262458]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:04:56 standalone sshd[262250]: Disconnecting invalid user bbs 185.246.128.170 port 47470: Change of username or service not allowed: (bbs,ssh-connection) -> (support1,ssh-connection) [preauth]
Dec  2 15:05:01 standalone sshd[262947]: Invalid user ubuntu from 103.42.181.150 port 39088
Dec  2 15:05:01 standalone sshd[262947]: Received disconnect from 103.42.181.150 port 39088:11:  [preauth]
Dec  2 15:05:01 standalone sshd[262947]: Disconnected from invalid user ubuntu 103.42.181.150 port 39088 [preauth]
Dec  2 15:05:01 standalone sshd[262751]: Invalid user support1 from 185.246.128.170 port 7954
Dec  2 15:05:02 standalone sshd[262751]: Disconnecting invalid user support1 185.246.128.170 port 7954: Change of username or service not allowed: (support1,ssh-connection) -> (vtiger,ssh-connection) [preauth]
Dec  2 15:05:03 standalone sudo[263028]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:05:03 standalone sudo[263028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:05:03 standalone sudo[263028]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:03 standalone sudo[263043]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:05:03 standalone sudo[263043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:05:04 standalone sudo[263043]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:04 standalone sudo[263156]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:05:04 standalone sudo[263156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:05:04 standalone sudo[263156]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:06 standalone runuser[263191]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:06 standalone runuser[263191]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:07 standalone runuser[263261]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:08 standalone runuser[263261]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:08 standalone runuser[263803]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:08 standalone runuser[263803]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:13 standalone sshd[263260]: Invalid user vtiger from 185.246.128.170 port 17328
Dec  2 15:05:13 standalone sudo[261863]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:13 standalone sshd[261862]: Received disconnect from 192.168.122.11 port 39124:11: disconnected by user
Dec  2 15:05:13 standalone sshd[261862]: Disconnected from user root 192.168.122.11 port 39124
Dec  2 15:05:13 standalone sshd[261859]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:14 standalone sshd[264686]: Accepted publickey for root from 192.168.122.11 port 41122 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:14 standalone sshd[264686]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:14 standalone sudo[264690]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_central.service
Dec  2 15:05:14 standalone sudo[264690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:14 standalone sudo[264690]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:14 standalone sshd[264689]: Received disconnect from 192.168.122.11 port 41122:11: disconnected by user
Dec  2 15:05:14 standalone sshd[264689]: Disconnected from user root 192.168.122.11 port 41122
Dec  2 15:05:14 standalone sshd[264686]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:14 standalone sshd[264725]: Accepted publickey for root from 192.168.122.11 port 41132 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:14 standalone sshd[264725]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:14 standalone sudo[264780]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ceilometer_agent_central.service
Dec  2 15:05:14 standalone sudo[264780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:15 standalone sudo[264780]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:15 standalone sshd[264771]: Received disconnect from 192.168.122.11 port 41132:11: disconnected by user
Dec  2 15:05:15 standalone sshd[264771]: Disconnected from user root 192.168.122.11 port 41132
Dec  2 15:05:15 standalone sshd[264725]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:15 standalone sshd[264880]: Accepted publickey for root from 192.168.122.11 port 44180 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:15 standalone sshd[264880]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:15 standalone sudo[264885]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_notification.service
Dec  2 15:05:15 standalone sudo[264885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:15 standalone sudo[264885]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:15 standalone sshd[264883]: Received disconnect from 192.168.122.11 port 44180:11: disconnected by user
Dec  2 15:05:15 standalone sshd[264883]: Disconnected from user root 192.168.122.11 port 44180
Dec  2 15:05:15 standalone sshd[264880]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:15 standalone sshd[264900]: Accepted publickey for root from 192.168.122.11 port 44192 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:15 standalone sshd[264900]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:15 standalone sudo[264924]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ceilometer_agent_notification.service
Dec  2 15:05:15 standalone sudo[264924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:15 standalone sshd[263260]: Disconnecting invalid user vtiger 185.246.128.170 port 17328: Change of username or service not allowed: (vtiger,ssh-connection) -> (api,ssh-connection) [preauth]
Dec  2 15:05:19 standalone runuser[265154]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:20 standalone runuser[265154]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:20 standalone runuser[265389]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:21 standalone runuser[265389]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:21 standalone runuser[265451]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:21 standalone sshd[265097]: Invalid user api from 185.246.128.170 port 30482
Dec  2 15:05:21 standalone runuser[265451]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:22 standalone sshd[265097]: Disconnecting invalid user api 185.246.128.170 port 30482: Change of username or service not allowed: (api,ssh-connection) -> (sftp_user,ssh-connection) [preauth]
Dec  2 15:05:22 standalone sshd[265519]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:05:23 standalone sudo[264924]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:23 standalone sshd[264904]: Received disconnect from 192.168.122.11 port 44192:11: disconnected by user
Dec  2 15:05:23 standalone sshd[264904]: Disconnected from user root 192.168.122.11 port 44192
Dec  2 15:05:23 standalone sshd[264900]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:23 standalone sshd[265557]: Accepted publickey for root from 192.168.122.11 port 44208 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:23 standalone sshd[265557]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:23 standalone sudo[265614]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_api.service
Dec  2 15:05:23 standalone sudo[265614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:23 standalone sudo[265614]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:23 standalone sshd[265613]: Received disconnect from 192.168.122.11 port 44208:11: disconnected by user
Dec  2 15:05:23 standalone sshd[265613]: Disconnected from user root 192.168.122.11 port 44208
Dec  2 15:05:23 standalone sshd[265557]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:23 standalone sshd[265636]: Accepted publickey for root from 192.168.122.11 port 44222 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:23 standalone sshd[265636]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:23 standalone sudo[265641]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_api.service
Dec  2 15:05:23 standalone sudo[265641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:27 standalone sudo[265641]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:27 standalone sshd[265640]: Received disconnect from 192.168.122.11 port 44222:11: disconnected by user
Dec  2 15:05:27 standalone sshd[265640]: Disconnected from user root 192.168.122.11 port 44222
Dec  2 15:05:27 standalone sshd[265636]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:27 standalone sshd[265862]: Accepted publickey for root from 192.168.122.11 port 36974 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:27 standalone sshd[265862]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:27 standalone sudo[265878]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_health_manager.service
Dec  2 15:05:27 standalone sudo[265878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:27 standalone sudo[265878]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:27 standalone sshd[265872]: Received disconnect from 192.168.122.11 port 36974:11: disconnected by user
Dec  2 15:05:27 standalone sshd[265872]: Disconnected from user root 192.168.122.11 port 36974
Dec  2 15:05:27 standalone sshd[265862]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:27 standalone sshd[265946]: Accepted publickey for root from 192.168.122.11 port 36986 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:27 standalone sshd[265946]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:28 standalone sudo[265978]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_health_manager.service
Dec  2 15:05:28 standalone sudo[265978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:29 standalone sudo[265978]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:29 standalone sshd[265977]: Received disconnect from 192.168.122.11 port 36986:11: disconnected by user
Dec  2 15:05:29 standalone sshd[265977]: Disconnected from user root 192.168.122.11 port 36986
Dec  2 15:05:29 standalone sshd[265946]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:29 standalone sshd[266150]: Accepted publickey for root from 192.168.122.11 port 36992 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:29 standalone sshd[266150]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:29 standalone sudo[266184]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_rsyslog.service
Dec  2 15:05:29 standalone sudo[266184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:29 standalone sudo[266184]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:29 standalone sshd[266183]: Received disconnect from 192.168.122.11 port 36992:11: disconnected by user
Dec  2 15:05:29 standalone sshd[266183]: Disconnected from user root 192.168.122.11 port 36992
Dec  2 15:05:29 standalone sshd[266150]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:29 standalone sshd[266207]: Accepted publickey for root from 192.168.122.11 port 37002 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:30 standalone sshd[266207]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:30 standalone sudo[266211]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_rsyslog.service
Dec  2 15:05:30 standalone sudo[266211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:31 standalone sudo[266211]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:31 standalone sshd[266210]: Received disconnect from 192.168.122.11 port 37002:11: disconnected by user
Dec  2 15:05:31 standalone sshd[266210]: Disconnected from user root 192.168.122.11 port 37002
Dec  2 15:05:31 standalone sshd[266207]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:31 standalone sshd[266275]: Accepted publickey for root from 192.168.122.11 port 37016 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:31 standalone sshd[266275]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:31 standalone sudo[266279]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_driver_agent.service
Dec  2 15:05:31 standalone sudo[266279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:31 standalone sudo[266279]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:31 standalone sshd[266278]: Received disconnect from 192.168.122.11 port 37016:11: disconnected by user
Dec  2 15:05:31 standalone sshd[266278]: Disconnected from user root 192.168.122.11 port 37016
Dec  2 15:05:31 standalone sshd[266275]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:31 standalone sshd[266294]: Accepted publickey for root from 192.168.122.11 port 37028 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:31 standalone sshd[266294]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:31 standalone sudo[266306]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_driver_agent.service
Dec  2 15:05:32 standalone sudo[266306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:32 standalone runuser[266341]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:33 standalone sudo[266306]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:33 standalone sshd[266305]: Received disconnect from 192.168.122.11 port 37028:11: disconnected by user
Dec  2 15:05:33 standalone sshd[266305]: Disconnected from user root 192.168.122.11 port 37028
Dec  2 15:05:33 standalone sshd[266294]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:33 standalone sshd[266419]: Accepted publickey for root from 192.168.122.11 port 37040 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:33 standalone sshd[266419]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:33 standalone sudo[266423]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_housekeeping.service
Dec  2 15:05:33 standalone sudo[266423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:33 standalone sudo[266423]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:33 standalone sshd[266422]: Received disconnect from 192.168.122.11 port 37040:11: disconnected by user
Dec  2 15:05:33 standalone sshd[266422]: Disconnected from user root 192.168.122.11 port 37040
Dec  2 15:05:33 standalone sshd[266419]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:33 standalone runuser[266341]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:33 standalone sshd[266443]: Accepted publickey for root from 192.168.122.11 port 37048 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:33 standalone sshd[266443]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:33 standalone runuser[266470]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:33 standalone sudo[266488]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_housekeeping.service
Dec  2 15:05:33 standalone sudo[266488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:34 standalone sshd[265740]: Invalid user sftp_user from 185.246.128.170 port 24979
Dec  2 15:05:34 standalone sudo[266488]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:34 standalone sshd[266457]: Received disconnect from 192.168.122.11 port 37048:11: disconnected by user
Dec  2 15:05:34 standalone sshd[266457]: Disconnected from user root 192.168.122.11 port 37048
Dec  2 15:05:34 standalone sshd[266443]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:34 standalone runuser[266470]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:34 standalone sshd[266618]: Accepted publickey for root from 192.168.122.11 port 37064 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:34 standalone runuser[266630]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:34 standalone sshd[266618]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:34 standalone sudo[266678]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_octavia_worker.service
Dec  2 15:05:34 standalone sudo[266678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:34 standalone sudo[266678]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:34 standalone sshd[266649]: Received disconnect from 192.168.122.11 port 37064:11: disconnected by user
Dec  2 15:05:34 standalone sshd[266649]: Disconnected from user root 192.168.122.11 port 37064
Dec  2 15:05:34 standalone sshd[266618]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:34 standalone sshd[266693]: Accepted publickey for root from 192.168.122.11 port 37078 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:34 standalone sshd[266693]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:34 standalone sudo[266697]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_octavia_worker.service
Dec  2 15:05:34 standalone sudo[266697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:35 standalone runuser[266630]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:35 standalone sshd[265740]: Disconnecting invalid user sftp_user 185.246.128.170 port 24979: Change of username or service not allowed: (sftp_user,ssh-connection) -> (ts,ssh-connection) [preauth]
Dec  2 15:05:45 standalone runuser[268211]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:46 standalone runuser[268211]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:46 standalone runuser[268280]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:47 standalone runuser[268280]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:47 standalone runuser[268342]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:48 standalone runuser[268342]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:49 standalone sudo[266697]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:49 standalone sshd[266696]: Received disconnect from 192.168.122.11 port 37078:11: disconnected by user
Dec  2 15:05:49 standalone sshd[266696]: Disconnected from user root 192.168.122.11 port 37078
Dec  2 15:05:49 standalone sshd[266693]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:49 standalone sshd[268611]: Accepted publickey for root from 192.168.122.11 port 40712 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:49 standalone sshd[268611]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:49 standalone sudo[268617]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_horizon.service
Dec  2 15:05:49 standalone sudo[268617]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:49 standalone sudo[268617]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:49 standalone sshd[268614]: Received disconnect from 192.168.122.11 port 40712:11: disconnected by user
Dec  2 15:05:49 standalone sshd[268614]: Disconnected from user root 192.168.122.11 port 40712
Dec  2 15:05:49 standalone sshd[268611]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:49 standalone sshd[268692]: Accepted publickey for root from 192.168.122.11 port 40724 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:49 standalone sshd[268692]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:50 standalone sudo[268746]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_horizon.service
Dec  2 15:05:50 standalone sudo[268746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:51 standalone sshd[267026]: Invalid user ts from 185.246.128.170 port 49218
Dec  2 15:05:53 standalone sshd[267026]: Disconnecting invalid user ts 185.246.128.170 port 49218: Change of username or service not allowed: (ts,ssh-connection) -> (secret,ssh-connection) [preauth]
Dec  2 15:05:53 standalone sudo[268746]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:53 standalone sshd[268736]: Received disconnect from 192.168.122.11 port 40724:11: disconnected by user
Dec  2 15:05:53 standalone sshd[268736]: Disconnected from user root 192.168.122.11 port 40724
Dec  2 15:05:53 standalone sshd[268692]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:53 standalone sshd[268866]: Accepted publickey for root from 192.168.122.11 port 40726 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:53 standalone sshd[268866]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:53 standalone sudo[268882]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_keystone.service
Dec  2 15:05:53 standalone sudo[268882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:53 standalone sudo[268882]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:53 standalone sshd[268869]: Received disconnect from 192.168.122.11 port 40726:11: disconnected by user
Dec  2 15:05:53 standalone sshd[268869]: Disconnected from user root 192.168.122.11 port 40726
Dec  2 15:05:53 standalone sshd[268866]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:53 standalone sshd[268938]: Accepted publickey for root from 192.168.122.11 port 40740 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:53 standalone sshd[268938]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:54 standalone sudo[268942]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_keystone.service
Dec  2 15:05:54 standalone sudo[268942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:57 standalone sudo[268942]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:57 standalone sshd[268941]: Received disconnect from 192.168.122.11 port 40740:11: disconnected by user
Dec  2 15:05:57 standalone sshd[268941]: Disconnected from user root 192.168.122.11 port 40740
Dec  2 15:05:57 standalone sshd[268938]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:57 standalone sshd[269160]: Accepted publickey for root from 192.168.122.11 port 55216 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:57 standalone sshd[269160]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:57 standalone sudo[269185]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_api.service
Dec  2 15:05:57 standalone sudo[269185]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:57 standalone sudo[269185]: pam_unix(sudo:session): session closed for user root
Dec  2 15:05:57 standalone sshd[269184]: Received disconnect from 192.168.122.11 port 55216:11: disconnected by user
Dec  2 15:05:57 standalone sshd[269184]: Disconnected from user root 192.168.122.11 port 55216
Dec  2 15:05:57 standalone sshd[269160]: pam_unix(sshd:session): session closed for user root
Dec  2 15:05:58 standalone sshd[269212]: Accepted publickey for root from 192.168.122.11 port 55228 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:05:58 standalone sshd[269212]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:58 standalone sudo[269283]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_barbican_api.service
Dec  2 15:05:58 standalone sudo[269283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:05:58 standalone runuser[269394]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:05:59 standalone runuser[269394]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:05:59 standalone runuser[269545]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:00 standalone runuser[269545]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:00 standalone runuser[269599]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:01 standalone runuser[269599]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:01 standalone sudo[269283]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:01 standalone sshd[269267]: Received disconnect from 192.168.122.11 port 55228:11: disconnected by user
Dec  2 15:06:01 standalone sshd[269267]: Disconnected from user root 192.168.122.11 port 55228
Dec  2 15:06:01 standalone sshd[269212]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:02 standalone sshd[269702]: Accepted publickey for root from 192.168.122.11 port 55242 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:02 standalone sshd[269702]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:02 standalone sudo[269708]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_worker.service
Dec  2 15:06:02 standalone sudo[269708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:02 standalone sudo[269708]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:02 standalone sshd[269707]: Received disconnect from 192.168.122.11 port 55242:11: disconnected by user
Dec  2 15:06:02 standalone sshd[269707]: Disconnected from user root 192.168.122.11 port 55242
Dec  2 15:06:02 standalone sshd[269702]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:02 standalone sshd[269723]: Accepted publickey for root from 192.168.122.11 port 55254 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:02 standalone sshd[269723]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:02 standalone sudo[269727]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_barbican_worker.service
Dec  2 15:06:02 standalone sudo[269727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:04 standalone sudo[269825]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:06:04 standalone sudo[269825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:04 standalone sudo[269825]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:04 standalone sudo[269840]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:06:04 standalone sudo[269840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:05 standalone sudo[269840]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:05 standalone sudo[269941]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:06:05 standalone sudo[269941]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:05 standalone sudo[269941]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:05 standalone sudo[269956]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:06:05 standalone sudo[269956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:07 standalone sudo[269956]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:07 standalone sudo[270163]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:06:07 standalone sudo[270163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:07 standalone sudo[270163]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:07 standalone sudo[270178]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:06:07 standalone sudo[270178]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:07 standalone sudo[270178]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:07 standalone sshd[269654]: Invalid user secret from 185.246.128.170 port 33129
Dec  2 15:06:08 standalone sshd[269654]: Disconnecting invalid user secret 185.246.128.170 port 33129: Change of username or service not allowed: (secret,ssh-connection) -> (mc1,ssh-connection) [preauth]
Dec  2 15:06:08 standalone sudo[270315]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:06:08 standalone sudo[270315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:06:08 standalone sudo[270315]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:11 standalone runuser[271281]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:12 standalone runuser[271281]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:12 standalone runuser[271372]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:13 standalone runuser[271372]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:13 standalone runuser[271435]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:14 standalone runuser[271435]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:17 standalone sudo[269727]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:17 standalone sshd[269726]: Received disconnect from 192.168.122.11 port 55254:11: disconnected by user
Dec  2 15:06:17 standalone sshd[269726]: Disconnected from user root 192.168.122.11 port 55254
Dec  2 15:06:17 standalone sshd[269723]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:17 standalone sshd[271615]: Accepted publickey for root from 192.168.122.11 port 35982 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:17 standalone sshd[271615]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:17 standalone sudo[271629]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_barbican_keystone_listener.service
Dec  2 15:06:17 standalone sudo[271629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:17 standalone sudo[271629]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:17 standalone sshd[271628]: Received disconnect from 192.168.122.11 port 35982:11: disconnected by user
Dec  2 15:06:17 standalone sshd[271628]: Disconnected from user root 192.168.122.11 port 35982
Dec  2 15:06:17 standalone sshd[271615]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:17 standalone sshd[271308]: Invalid user mc1 from 185.246.128.170 port 40421
Dec  2 15:06:17 standalone sshd[271644]: Accepted publickey for root from 192.168.122.11 port 35992 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:17 standalone sshd[271644]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:17 standalone sudo[271649]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_barbican_keystone_listener.service
Dec  2 15:06:17 standalone sudo[271649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:18 standalone sshd[271308]: Disconnecting invalid user mc1 185.246.128.170 port 40421: Change of username or service not allowed: (mc1,ssh-connection) -> (tester,ssh-connection) [preauth]
Dec  2 15:06:23 standalone sshd[272040]: Invalid user tester from 185.246.128.170 port 23387
Dec  2 15:06:23 standalone sshd[272040]: Disconnecting invalid user tester 185.246.128.170 port 23387: Change of username or service not allowed: (tester,ssh-connection) -> (nginx,ssh-connection) [preauth]
Dec  2 15:06:25 standalone runuser[272178]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:25 standalone runuser[272178]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:25 standalone runuser[272254]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:26 standalone runuser[272254]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:26 standalone runuser[272317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:27 standalone sshd[272122]: Invalid user nginx from 185.246.128.170 port 13447
Dec  2 15:06:27 standalone runuser[272317]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:30 standalone sshd[272122]: Disconnecting invalid user nginx 185.246.128.170 port 13447: Change of username or service not allowed: (nginx,ssh-connection) -> (ahmed,ssh-connection) [preauth]
Dec  2 15:06:36 standalone sshd[272731]: Invalid user ahmed from 185.246.128.170 port 25363
Dec  2 15:06:37 standalone sshd[272731]: Disconnecting invalid user ahmed 185.246.128.170 port 25363: Change of username or service not allowed: (ahmed,ssh-connection) -> (odoo,ssh-connection) [preauth]
Dec  2 15:06:37 standalone sshd[272918]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:06:38 standalone runuser[273078]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:38 standalone runuser[273078]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:39 standalone runuser[273228]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:39 standalone runuser[273228]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:39 standalone runuser[273571]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:40 standalone runuser[273571]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:46 standalone sudo[271649]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:46 standalone sshd[271648]: Received disconnect from 192.168.122.11 port 35992:11: disconnected by user
Dec  2 15:06:46 standalone sshd[271648]: Disconnected from user root 192.168.122.11 port 35992
Dec  2 15:06:46 standalone sshd[271644]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:46 standalone sshd[274410]: Accepted publickey for root from 192.168.122.11 port 50236 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:46 standalone sshd[274410]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:46 standalone sudo[274418]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_api.service
Dec  2 15:06:46 standalone sudo[274418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:46 standalone sudo[274418]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:46 standalone sshd[274416]: Received disconnect from 192.168.122.11 port 50236:11: disconnected by user
Dec  2 15:06:46 standalone sshd[274416]: Disconnected from user root 192.168.122.11 port 50236
Dec  2 15:06:46 standalone sshd[274410]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:46 standalone sshd[274435]: Accepted publickey for root from 192.168.122.11 port 50242 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:46 standalone sshd[274435]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:47 standalone sudo[274449]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_api.service
Dec  2 15:06:47 standalone sudo[274449]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:50 standalone sshd[273713]: Invalid user odoo from 185.246.128.170 port 18293
Dec  2 15:06:50 standalone sudo[274449]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:50 standalone sshd[274441]: Received disconnect from 192.168.122.11 port 50242:11: disconnected by user
Dec  2 15:06:50 standalone sshd[274441]: Disconnected from user root 192.168.122.11 port 50242
Dec  2 15:06:50 standalone sshd[274435]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:50 standalone sshd[274735]: Accepted publickey for root from 192.168.122.11 port 50244 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:50 standalone sshd[274735]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:50 standalone sudo[274774]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_api_cron.service
Dec  2 15:06:50 standalone sudo[274774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:50 standalone sudo[274774]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:50 standalone sshd[274757]: Received disconnect from 192.168.122.11 port 50244:11: disconnected by user
Dec  2 15:06:50 standalone sshd[274757]: Disconnected from user root 192.168.122.11 port 50244
Dec  2 15:06:50 standalone sshd[274735]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:51 standalone sshd[274808]: Accepted publickey for root from 192.168.122.11 port 50260 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:51 standalone sshd[273713]: Disconnecting invalid user odoo 185.246.128.170 port 18293: Change of username or service not allowed: (odoo,ssh-connection) -> (debian,ssh-connection) [preauth]
Dec  2 15:06:51 standalone sshd[274808]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:51 standalone sudo[274830]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_api_cron.service
Dec  2 15:06:51 standalone sudo[274830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:51 standalone runuser[274858]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:51 standalone sudo[274830]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:51 standalone sshd[274829]: Received disconnect from 192.168.122.11 port 50260:11: disconnected by user
Dec  2 15:06:51 standalone sshd[274829]: Disconnected from user root 192.168.122.11 port 50260
Dec  2 15:06:51 standalone sshd[274808]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:51 standalone sshd[274942]: Accepted publickey for root from 192.168.122.11 port 50264 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:51 standalone sshd[274942]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:51 standalone sudo[274946]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_scheduler.service
Dec  2 15:06:51 standalone sudo[274946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:51 standalone sudo[274946]: pam_unix(sudo:session): session closed for user root
Dec  2 15:06:51 standalone sshd[274945]: Received disconnect from 192.168.122.11 port 50264:11: disconnected by user
Dec  2 15:06:51 standalone sshd[274945]: Disconnected from user root 192.168.122.11 port 50264
Dec  2 15:06:51 standalone sshd[274942]: pam_unix(sshd:session): session closed for user root
Dec  2 15:06:52 standalone sshd[274961]: Accepted publickey for root from 192.168.122.11 port 50274 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:06:52 standalone runuser[274858]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:52 standalone sshd[274961]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:52 standalone sudo[274983]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_cinder_scheduler.service
Dec  2 15:06:52 standalone sudo[274983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:06:52 standalone runuser[275008]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:52 standalone runuser[275008]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:52 standalone runuser[275072]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:06:53 standalone runuser[275072]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:06:59 standalone sshd[275250]: Invalid user debian from 185.246.128.170 port 34611
Dec  2 15:07:00 standalone sshd[275250]: Disconnecting invalid user debian 185.246.128.170 port 34611: Change of username or service not allowed: (debian,ssh-connection) -> (itadmin,ssh-connection) [preauth]
Dec  2 15:07:04 standalone runuser[275656]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:04 standalone runuser[275656]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:05 standalone runuser[275778]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:05 standalone runuser[275778]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:05 standalone runuser[275898]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:06 standalone runuser[275898]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:07 standalone sshd[275632]: Invalid user itadmin from 185.246.128.170 port 52144
Dec  2 15:07:08 standalone sudo[275972]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:07:08 standalone sudo[275972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:07:08 standalone sudo[275972]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:08 standalone sudo[276099]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:07:08 standalone sudo[276099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:07:08 standalone sudo[274983]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:08 standalone sshd[274974]: Received disconnect from 192.168.122.11 port 50274:11: disconnected by user
Dec  2 15:07:08 standalone sshd[274974]: Disconnected from user root 192.168.122.11 port 50274
Dec  2 15:07:08 standalone sshd[274961]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:08 standalone sshd[276169]: Accepted publickey for root from 192.168.122.11 port 36498 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:08 standalone sshd[276169]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:08 standalone sudo[276099]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sudo[276262]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_volume.service
Dec  2 15:07:09 standalone sudo[276262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276262]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276258]: Received disconnect from 192.168.122.11 port 36498:11: disconnected by user
Dec  2 15:07:09 standalone sshd[276258]: Disconnected from user root 192.168.122.11 port 36498
Dec  2 15:07:09 standalone sshd[276169]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:09 standalone sudo[276275]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:07:09 standalone sudo[276275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:07:09 standalone sudo[276275]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276291]: Accepted publickey for root from 192.168.122.11 port 36506 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:09 standalone sshd[276291]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276297]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_cinder_backup.service
Dec  2 15:07:09 standalone sudo[276297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276297]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276296]: Received disconnect from 192.168.122.11 port 36506:11: disconnected by user
Dec  2 15:07:09 standalone sshd[276296]: Disconnected from user root 192.168.122.11 port 36506
Dec  2 15:07:09 standalone sshd[276291]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276312]: Accepted publickey for root from 192.168.122.11 port 36516 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:09 standalone sshd[276312]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276357]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_collectd.service
Dec  2 15:07:09 standalone sudo[276357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276357]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276356]: Received disconnect from 192.168.122.11 port 36516:11: disconnected by user
Dec  2 15:07:09 standalone sshd[276356]: Disconnected from user root 192.168.122.11 port 36516
Dec  2 15:07:09 standalone sshd[276312]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276376]: Accepted publickey for root from 192.168.122.11 port 36528 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:09 standalone sshd[276376]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276384]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_glance_api.service
Dec  2 15:07:09 standalone sudo[276384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:09 standalone sudo[276384]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:09 standalone sshd[276383]: Received disconnect from 192.168.122.11 port 36528:11: disconnected by user
Dec  2 15:07:09 standalone sshd[276383]: Disconnected from user root 192.168.122.11 port 36528
Dec  2 15:07:09 standalone sshd[276376]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:10 standalone sshd[276399]: Accepted publickey for root from 192.168.122.11 port 36536 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:10 standalone sshd[276399]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:10 standalone sudo[276438]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_glance_api.service
Dec  2 15:07:10 standalone sudo[276438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:11 standalone sudo[276438]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:11 standalone sshd[276422]: Received disconnect from 192.168.122.11 port 36536:11: disconnected by user
Dec  2 15:07:11 standalone sshd[276422]: Disconnected from user root 192.168.122.11 port 36536
Dec  2 15:07:11 standalone sshd[276399]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:11 standalone sshd[276827]: Accepted publickey for root from 192.168.122.11 port 36552 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:11 standalone sshd[276827]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:11 standalone sudo[276832]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_api.service
Dec  2 15:07:11 standalone sudo[276832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:11 standalone sudo[276832]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:11 standalone sshd[276831]: Received disconnect from 192.168.122.11 port 36552:11: disconnected by user
Dec  2 15:07:11 standalone sshd[276831]: Disconnected from user root 192.168.122.11 port 36552
Dec  2 15:07:11 standalone sshd[276827]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:11 standalone sshd[276847]: Accepted publickey for root from 192.168.122.11 port 36560 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:11 standalone sshd[276847]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:11 standalone sudo[276851]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_gnocchi_api.service
Dec  2 15:07:11 standalone sudo[276851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:11 standalone sshd[275632]: Disconnecting invalid user itadmin 185.246.128.170 port 52144: Change of username or service not allowed: (itadmin,ssh-connection) -> (user03,ssh-connection) [preauth]
Dec  2 15:07:15 standalone sudo[276851]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:15 standalone sshd[276850]: Received disconnect from 192.168.122.11 port 36560:11: disconnected by user
Dec  2 15:07:15 standalone sshd[276850]: Disconnected from user root 192.168.122.11 port 36560
Dec  2 15:07:15 standalone sshd[276847]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:15 standalone sshd[277340]: Accepted publickey for root from 192.168.122.11 port 39450 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:15 standalone sshd[277340]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:15 standalone sudo[277344]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_metricd.service
Dec  2 15:07:15 standalone sudo[277344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:15 standalone sudo[277344]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:15 standalone sshd[277343]: Received disconnect from 192.168.122.11 port 39450:11: disconnected by user
Dec  2 15:07:15 standalone sshd[277343]: Disconnected from user root 192.168.122.11 port 39450
Dec  2 15:07:15 standalone sshd[277340]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:15 standalone sshd[277359]: Accepted publickey for root from 192.168.122.11 port 39462 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:15 standalone sshd[277359]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:15 standalone sudo[277363]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_gnocchi_metricd.service
Dec  2 15:07:15 standalone sudo[277363]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:16 standalone sudo[277363]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:16 standalone sshd[277362]: Received disconnect from 192.168.122.11 port 39462:11: disconnected by user
Dec  2 15:07:16 standalone sshd[277362]: Disconnected from user root 192.168.122.11 port 39462
Dec  2 15:07:16 standalone sshd[277359]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:16 standalone sshd[277431]: Accepted publickey for root from 192.168.122.11 port 39468 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:16 standalone sshd[277431]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:17 standalone sudo[277443]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_gnocchi_statsd.service
Dec  2 15:07:17 standalone sudo[277443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:17 standalone sudo[277443]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:17 standalone sshd[277434]: Received disconnect from 192.168.122.11 port 39468:11: disconnected by user
Dec  2 15:07:17 standalone sshd[277434]: Disconnected from user root 192.168.122.11 port 39468
Dec  2 15:07:17 standalone sshd[277431]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:17 standalone sshd[277458]: Accepted publickey for root from 192.168.122.11 port 39472 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:17 standalone sshd[277458]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:17 standalone sudo[277462]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_gnocchi_statsd.service
Dec  2 15:07:17 standalone sudo[277462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:17 standalone runuser[277495]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:17 standalone sudo[277462]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:17 standalone sshd[277461]: Received disconnect from 192.168.122.11 port 39472:11: disconnected by user
Dec  2 15:07:17 standalone sshd[277461]: Disconnected from user root 192.168.122.11 port 39472
Dec  2 15:07:17 standalone sshd[277458]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:17 standalone sshd[277569]: Accepted publickey for root from 192.168.122.11 port 39480 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:18 standalone sshd[277569]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:18 standalone sudo[277582]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_api.service
Dec  2 15:07:18 standalone sudo[277582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:18 standalone sudo[277582]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:18 standalone sshd[277580]: Received disconnect from 192.168.122.11 port 39480:11: disconnected by user
Dec  2 15:07:18 standalone sshd[277580]: Disconnected from user root 192.168.122.11 port 39480
Dec  2 15:07:18 standalone sshd[277569]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:18 standalone runuser[277495]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:18 standalone sshd[277604]: Accepted publickey for root from 192.168.122.11 port 39482 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:18 standalone sshd[277604]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:18 standalone runuser[277685]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:18 standalone sudo[277712]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_api.service
Dec  2 15:07:18 standalone sudo[277712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:19 standalone runuser[277685]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:19 standalone runuser[277857]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:20 standalone runuser[277857]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:21 standalone sudo[277712]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:21 standalone sshd[277681]: Received disconnect from 192.168.122.11 port 39482:11: disconnected by user
Dec  2 15:07:21 standalone sshd[277681]: Disconnected from user root 192.168.122.11 port 39482
Dec  2 15:07:21 standalone sshd[277604]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:22 standalone sshd[278093]: Accepted publickey for root from 192.168.122.11 port 39488 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:22 standalone sshd[278093]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:22 standalone sudo[278107]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_api_cron.service
Dec  2 15:07:22 standalone sudo[278107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:22 standalone sudo[278107]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:22 standalone sshd[278104]: Received disconnect from 192.168.122.11 port 39488:11: disconnected by user
Dec  2 15:07:22 standalone sshd[278104]: Disconnected from user root 192.168.122.11 port 39488
Dec  2 15:07:22 standalone sshd[278093]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:22 standalone sshd[278122]: Accepted publickey for root from 192.168.122.11 port 39490 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:22 standalone sshd[278122]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:22 standalone sudo[278126]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_api_cron.service
Dec  2 15:07:22 standalone sudo[278126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:22 standalone sudo[278126]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:22 standalone sshd[278125]: Received disconnect from 192.168.122.11 port 39490:11: disconnected by user
Dec  2 15:07:22 standalone sshd[278125]: Disconnected from user root 192.168.122.11 port 39490
Dec  2 15:07:22 standalone sshd[278122]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:23 standalone sshd[278181]: Accepted publickey for root from 192.168.122.11 port 39504 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:23 standalone sshd[278181]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:23 standalone sudo[278193]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_manila_scheduler.service
Dec  2 15:07:23 standalone sudo[278193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:23 standalone sudo[278193]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:23 standalone sshd[278192]: Received disconnect from 192.168.122.11 port 39504:11: disconnected by user
Dec  2 15:07:23 standalone sshd[278192]: Disconnected from user root 192.168.122.11 port 39504
Dec  2 15:07:23 standalone sshd[278181]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:23 standalone sshd[278208]: Accepted publickey for root from 192.168.122.11 port 39518 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:23 standalone sshd[278208]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:23 standalone sudo[278212]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_manila_scheduler.service
Dec  2 15:07:23 standalone sudo[278212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:23 standalone sshd[277568]: Invalid user user03 from 185.246.128.170 port 56848
Dec  2 15:07:28 standalone sshd[277568]: Disconnecting invalid user user03 185.246.128.170 port 56848: Change of username or service not allowed: (user03,ssh-connection) -> (vali,ssh-connection) [preauth]
Dec  2 15:07:30 standalone runuser[278692]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:31 standalone runuser[278692]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:31 standalone runuser[278762]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:32 standalone runuser[278762]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:32 standalone runuser[278820]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:33 standalone runuser[278820]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:34 standalone sshd[278474]: Invalid user vali from 185.246.128.170 port 39813
Dec  2 15:07:36 standalone sshd[278474]: Disconnecting invalid user vali 185.246.128.170 port 39813: Change of username or service not allowed: (vali,ssh-connection) -> (clouduser,ssh-connection) [preauth]
Dec  2 15:07:43 standalone runuser[280067]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:44 standalone runuser[280067]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:44 standalone runuser[280139]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:45 standalone runuser[280139]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:45 standalone runuser[280254]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:46 standalone runuser[280254]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:48 standalone sudo[278212]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:48 standalone sshd[278211]: Received disconnect from 192.168.122.11 port 39518:11: disconnected by user
Dec  2 15:07:48 standalone sshd[278211]: Disconnected from user root 192.168.122.11 port 39518
Dec  2 15:07:48 standalone sshd[278208]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:48 standalone sshd[280423]: Accepted publickey for root from 192.168.122.11 port 58244 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:48 standalone sshd[280423]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:48 standalone sshd[280386]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:07:48 standalone sudo[280427]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_neutron_api.service
Dec  2 15:07:48 standalone sudo[280427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:48 standalone sudo[280427]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:48 standalone sshd[280426]: Received disconnect from 192.168.122.11 port 58244:11: disconnected by user
Dec  2 15:07:48 standalone sshd[280426]: Disconnected from user root 192.168.122.11 port 58244
Dec  2 15:07:48 standalone sshd[280423]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:48 standalone sshd[280442]: Accepted publickey for root from 192.168.122.11 port 58250 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:48 standalone sshd[280442]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:48 standalone sudo[280528]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_neutron_api.service
Dec  2 15:07:48 standalone sudo[280528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:52 standalone sudo[280528]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:52 standalone sshd[280503]: Received disconnect from 192.168.122.11 port 58250:11: disconnected by user
Dec  2 15:07:52 standalone sshd[280503]: Disconnected from user root 192.168.122.11 port 58250
Dec  2 15:07:52 standalone sshd[280442]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:52 standalone sshd[280762]: Accepted publickey for root from 192.168.122.11 port 58252 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:52 standalone sshd[280762]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:53 standalone sudo[280766]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_placement_api.service
Dec  2 15:07:53 standalone sudo[280766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:53 standalone sudo[280766]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:53 standalone sshd[280765]: Received disconnect from 192.168.122.11 port 58252:11: disconnected by user
Dec  2 15:07:53 standalone sshd[280765]: Disconnected from user root 192.168.122.11 port 58252
Dec  2 15:07:53 standalone sshd[280762]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:53 standalone sshd[280789]: Accepted publickey for root from 192.168.122.11 port 58268 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:53 standalone sshd[280789]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:53 standalone sudo[280793]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_placement_api.service
Dec  2 15:07:53 standalone sudo[280793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:54 standalone sshd[279236]: Invalid user clouduser from 185.246.128.170 port 33006
Dec  2 15:07:55 standalone sshd[279236]: Disconnecting invalid user clouduser 185.246.128.170 port 33006: Change of username or service not allowed: (clouduser,ssh-connection) -> (client,ssh-connection) [preauth]
Dec  2 15:07:56 standalone runuser[280937]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:57 standalone sudo[280793]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:57 standalone sshd[280792]: Received disconnect from 192.168.122.11 port 58268:11: disconnected by user
Dec  2 15:07:57 standalone sshd[280792]: Disconnected from user root 192.168.122.11 port 58268
Dec  2 15:07:57 standalone sshd[280789]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:57 standalone sshd[281045]: Accepted publickey for root from 192.168.122.11 port 51674 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:57 standalone sshd[281045]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:57 standalone sudo[281057]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_api_cron.service
Dec  2 15:07:57 standalone sudo[281057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:57 standalone sudo[281057]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:57 standalone sshd[281056]: Received disconnect from 192.168.122.11 port 51674:11: disconnected by user
Dec  2 15:07:57 standalone sshd[281056]: Disconnected from user root 192.168.122.11 port 51674
Dec  2 15:07:57 standalone sshd[281045]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:57 standalone runuser[280937]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:57 standalone sshd[281074]: Accepted publickey for root from 192.168.122.11 port 51678 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:57 standalone sshd[281074]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:57 standalone sudo[281093]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_api_cron.service
Dec  2 15:07:57 standalone runuser[281106]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:57 standalone sudo[281093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:58 standalone sudo[281093]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:58 standalone sshd[281091]: Received disconnect from 192.168.122.11 port 51678:11: disconnected by user
Dec  2 15:07:58 standalone sshd[281091]: Disconnected from user root 192.168.122.11 port 51678
Dec  2 15:07:58 standalone sshd[281074]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:58 standalone sshd[281195]: Accepted publickey for root from 192.168.122.11 port 51686 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:58 standalone sshd[281195]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:58 standalone sudo[281207]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_api.service
Dec  2 15:07:58 standalone sudo[281207]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:58 standalone sudo[281207]: pam_unix(sudo:session): session closed for user root
Dec  2 15:07:58 standalone sshd[281205]: Received disconnect from 192.168.122.11 port 51686:11: disconnected by user
Dec  2 15:07:58 standalone sshd[281205]: Disconnected from user root 192.168.122.11 port 51686
Dec  2 15:07:58 standalone sshd[281195]: pam_unix(sshd:session): session closed for user root
Dec  2 15:07:58 standalone runuser[281106]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:07:58 standalone runuser[281233]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:07:58 standalone sshd[281223]: Accepted publickey for root from 192.168.122.11 port 51702 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:07:58 standalone sshd[281223]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:58 standalone sudo[281254]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_api.service
Dec  2 15:07:58 standalone sudo[281254]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:07:59 standalone runuser[281233]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:01 standalone sshd[280932]: Invalid user client from 185.246.128.170 port 12894
Dec  2 15:08:02 standalone sudo[281254]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:02 standalone sshd[281253]: Received disconnect from 192.168.122.11 port 51702:11: disconnected by user
Dec  2 15:08:02 standalone sshd[281253]: Disconnected from user root 192.168.122.11 port 51702
Dec  2 15:08:02 standalone sshd[281223]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:02 standalone sshd[281656]: Accepted publickey for root from 192.168.122.11 port 51706 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:02 standalone sshd[281656]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:02 standalone sudo[281669]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_conductor.service
Dec  2 15:08:02 standalone sudo[281669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:02 standalone sudo[281669]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:02 standalone sshd[281668]: Received disconnect from 192.168.122.11 port 51706:11: disconnected by user
Dec  2 15:08:02 standalone sshd[281668]: Disconnected from user root 192.168.122.11 port 51706
Dec  2 15:08:02 standalone sshd[281656]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:02 standalone sshd[281684]: Accepted publickey for root from 192.168.122.11 port 51708 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:02 standalone sshd[281684]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:02 standalone sudo[281688]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_conductor.service
Dec  2 15:08:02 standalone sudo[281688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:04 standalone sudo[281688]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:04 standalone sshd[281687]: Received disconnect from 192.168.122.11 port 51708:11: disconnected by user
Dec  2 15:08:04 standalone sshd[281687]: Disconnected from user root 192.168.122.11 port 51708
Dec  2 15:08:04 standalone sshd[281684]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:04 standalone sshd[281759]: Accepted publickey for root from 192.168.122.11 port 51710 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:05 standalone sshd[281759]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:05 standalone sudo[281763]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_metadata.service
Dec  2 15:08:05 standalone sudo[281763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:05 standalone sudo[281763]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:05 standalone sshd[281762]: Received disconnect from 192.168.122.11 port 51710:11: disconnected by user
Dec  2 15:08:05 standalone sshd[281762]: Disconnected from user root 192.168.122.11 port 51710
Dec  2 15:08:05 standalone sshd[281759]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:05 standalone sshd[281778]: Accepted publickey for root from 192.168.122.11 port 53854 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:05 standalone sshd[281778]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:05 standalone sudo[281835]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_metadata.service
Dec  2 15:08:05 standalone sudo[281835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:07 standalone sshd[280932]: Disconnecting invalid user client 185.246.128.170 port 12894: Change of username or service not allowed: (client,ssh-connection) -> (ftp1,ssh-connection) [preauth]
Dec  2 15:08:09 standalone sudo[281835]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:09 standalone sshd[281818]: Received disconnect from 192.168.122.11 port 53854:11: disconnected by user
Dec  2 15:08:09 standalone sshd[281818]: Disconnected from user root 192.168.122.11 port 53854
Dec  2 15:08:09 standalone sshd[281778]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:09 standalone sudo[282096]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:08:09 standalone sshd[282094]: Accepted publickey for root from 192.168.122.11 port 53862 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:09 standalone sudo[282096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:08:09 standalone sudo[282096]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:09 standalone sshd[282094]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:09 standalone sudo[282112]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:08:09 standalone sudo[282112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:08:09 standalone sudo[282127]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_scheduler.service
Dec  2 15:08:09 standalone sudo[282127]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:09 standalone sudo[282127]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:09 standalone sshd[282118]: Received disconnect from 192.168.122.11 port 53862:11: disconnected by user
Dec  2 15:08:09 standalone sshd[282118]: Disconnected from user root 192.168.122.11 port 53862
Dec  2 15:08:09 standalone sshd[282094]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:09 standalone sshd[282172]: Accepted publickey for root from 192.168.122.11 port 53866 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:09 standalone sshd[282172]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:09 standalone sudo[282203]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_scheduler.service
Dec  2 15:08:09 standalone sudo[282203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:10 standalone runuser[282333]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:10 standalone sudo[282112]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:10 standalone sudo[282384]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:08:10 standalone sudo[282384]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:08:10 standalone sudo[282384]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:10 standalone runuser[282333]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:11 standalone runuser[282466]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:11 standalone runuser[282466]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:11 standalone runuser[282678]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:11 standalone sshd[282399]: Invalid user ftp1 from 185.246.128.170 port 29176
Dec  2 15:08:12 standalone sshd[282399]: Disconnecting invalid user ftp1 185.246.128.170 port 29176: Change of username or service not allowed: (ftp1,ssh-connection) -> (sshd,ssh-connection) [preauth]
Dec  2 15:08:12 standalone runuser[282678]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:21 standalone sudo[282203]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:21 standalone sshd[282195]: Received disconnect from 192.168.122.11 port 53866:11: disconnected by user
Dec  2 15:08:21 standalone sshd[282195]: Disconnected from user root 192.168.122.11 port 53866
Dec  2 15:08:21 standalone sshd[282172]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:21 standalone sshd[283441]: Accepted publickey for root from 192.168.122.11 port 35414 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:21 standalone sshd[283441]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:21 standalone sudo[283445]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_nova_vnc_proxy.service
Dec  2 15:08:21 standalone sudo[283445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:21 standalone sudo[283445]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:21 standalone sshd[283444]: Received disconnect from 192.168.122.11 port 35414:11: disconnected by user
Dec  2 15:08:21 standalone sshd[283444]: Disconnected from user root 192.168.122.11 port 35414
Dec  2 15:08:21 standalone sshd[283441]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:21 standalone sshd[283466]: Accepted publickey for root from 192.168.122.11 port 35420 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:21 standalone sshd[283466]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:21 standalone sudo[283483]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_nova_vnc_proxy.service
Dec  2 15:08:21 standalone sudo[283483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:22 standalone sudo[283483]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:22 standalone sshd[283482]: Received disconnect from 192.168.122.11 port 35420:11: disconnected by user
Dec  2 15:08:22 standalone sshd[283482]: Disconnected from user root 192.168.122.11 port 35420
Dec  2 15:08:22 standalone sshd[283466]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:22 standalone sshd[283548]: Accepted publickey for root from 192.168.122.11 port 35428 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:22 standalone sshd[283548]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:22 standalone sshd[283070]: Disconnecting authenticating user sshd 185.246.128.170 port 16023: Change of username or service not allowed: (sshd,ssh-connection) -> (weewx,ssh-connection) [preauth]
Dec  2 15:08:22 standalone sudo[283552]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api.service
Dec  2 15:08:22 standalone sudo[283552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:22 standalone sudo[283552]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:22 standalone sshd[283551]: Received disconnect from 192.168.122.11 port 35428:11: disconnected by user
Dec  2 15:08:22 standalone sshd[283551]: Disconnected from user root 192.168.122.11 port 35428
Dec  2 15:08:22 standalone sshd[283548]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:23 standalone sshd[283567]: Accepted publickey for root from 192.168.122.11 port 35440 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:23 standalone sshd[283567]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283579]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_api_cron.service
Dec  2 15:08:23 standalone sudo[283579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283579]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:23 standalone sshd[283578]: Received disconnect from 192.168.122.11 port 35440:11: disconnected by user
Dec  2 15:08:23 standalone sshd[283578]: Disconnected from user root 192.168.122.11 port 35440
Dec  2 15:08:23 standalone sshd[283567]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:23 standalone runuser[283600]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:23 standalone sshd[283594]: Accepted publickey for root from 192.168.122.11 port 35444 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:23 standalone sshd[283594]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283647]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_evaluator.service
Dec  2 15:08:23 standalone sudo[283647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283647]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:23 standalone sshd[283646]: Received disconnect from 192.168.122.11 port 35444:11: disconnected by user
Dec  2 15:08:23 standalone sshd[283646]: Disconnected from user root 192.168.122.11 port 35444
Dec  2 15:08:23 standalone sshd[283594]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:23 standalone sshd[283662]: Accepted publickey for root from 192.168.122.11 port 35460 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:23 standalone sshd[283662]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283666]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_listener.service
Dec  2 15:08:23 standalone sudo[283666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:23 standalone sudo[283666]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:23 standalone sshd[283665]: Received disconnect from 192.168.122.11 port 35460:11: disconnected by user
Dec  2 15:08:23 standalone sshd[283665]: Disconnected from user root 192.168.122.11 port 35460
Dec  2 15:08:23 standalone sshd[283662]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283681]: Accepted publickey for root from 192.168.122.11 port 35464 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:24 standalone sshd[283681]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone runuser[283600]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:24 standalone sudo[283699]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_aodh_notifier.service
Dec  2 15:08:24 standalone sudo[283699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone sudo[283699]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283688]: Received disconnect from 192.168.122.11 port 35464:11: disconnected by user
Dec  2 15:08:24 standalone sshd[283688]: Disconnected from user root 192.168.122.11 port 35464
Dec  2 15:08:24 standalone sshd[283681]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:24 standalone runuser[283726]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:24 standalone sshd[283724]: Accepted publickey for root from 192.168.122.11 port 35468 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:24 standalone sshd[283724]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone sudo[283773]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_central.service
Dec  2 15:08:24 standalone sudo[283773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone sudo[283773]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283744]: Received disconnect from 192.168.122.11 port 35468:11: disconnected by user
Dec  2 15:08:24 standalone sshd[283744]: Disconnected from user root 192.168.122.11 port 35468
Dec  2 15:08:24 standalone sshd[283724]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283788]: Accepted publickey for root from 192.168.122.11 port 35472 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:24 standalone sshd[283788]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone sudo[283792]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_compute.service
Dec  2 15:08:24 standalone sudo[283792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:24 standalone sudo[283792]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283791]: Received disconnect from 192.168.122.11 port 35472:11: disconnected by user
Dec  2 15:08:24 standalone sshd[283791]: Disconnected from user root 192.168.122.11 port 35472
Dec  2 15:08:24 standalone sshd[283788]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:24 standalone sshd[283807]: Accepted publickey for root from 192.168.122.11 port 35482 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:24 standalone sshd[283807]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:25 standalone sudo[283813]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ceilometer_agent_compute.service
Dec  2 15:08:25 standalone sudo[283813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:25 standalone runuser[283726]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:25 standalone runuser[283850]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:25 standalone sudo[283813]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:25 standalone sshd[283810]: Received disconnect from 192.168.122.11 port 35482:11: disconnected by user
Dec  2 15:08:25 standalone sshd[283810]: Disconnected from user root 192.168.122.11 port 35482
Dec  2 15:08:25 standalone sshd[283807]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:25 standalone sshd[283984]: Accepted publickey for root from 192.168.122.11 port 44404 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:25 standalone sshd[283984]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[283993]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_ipmi.service
Dec  2 15:08:26 standalone sudo[283993]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[283993]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:26 standalone sshd[283992]: Received disconnect from 192.168.122.11 port 44404:11: disconnected by user
Dec  2 15:08:26 standalone sshd[283992]: Disconnected from user root 192.168.122.11 port 44404
Dec  2 15:08:26 standalone sshd[283984]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:26 standalone runuser[283850]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:26 standalone sshd[284012]: Accepted publickey for root from 192.168.122.11 port 44420 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:26 standalone sshd[284012]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[284025]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ceilometer_agent_notification.service
Dec  2 15:08:26 standalone sudo[284025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[284025]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:26 standalone sshd[284024]: Received disconnect from 192.168.122.11 port 44420:11: disconnected by user
Dec  2 15:08:26 standalone sshd[284024]: Disconnected from user root 192.168.122.11 port 44420
Dec  2 15:08:26 standalone sshd[284012]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:26 standalone sshd[284041]: Accepted publickey for root from 192.168.122.11 port 44430 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:26 standalone sshd[284041]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[284046]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_northd.service
Dec  2 15:08:26 standalone sudo[284046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:26 standalone sudo[284046]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:26 standalone sshd[284045]: Received disconnect from 192.168.122.11 port 44430:11: disconnected by user
Dec  2 15:08:26 standalone sshd[284045]: Disconnected from user root 192.168.122.11 port 44430
Dec  2 15:08:26 standalone sshd[284041]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:26 standalone sshd[284061]: Accepted publickey for root from 192.168.122.11 port 44446 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:26 standalone sshd[284061]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:27 standalone sudo[284082]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_northd.service
Dec  2 15:08:27 standalone sudo[284082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:27 standalone sudo[284082]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:27 standalone sshd[284064]: Received disconnect from 192.168.122.11 port 44446:11: disconnected by user
Dec  2 15:08:27 standalone sshd[284064]: Disconnected from user root 192.168.122.11 port 44446
Dec  2 15:08:27 standalone sshd[284061]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:27 standalone sshd[284188]: Accepted publickey for root from 192.168.122.11 port 44448 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:27 standalone sshd[284188]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:27 standalone sudo[284192]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_neutron_agent.service
Dec  2 15:08:27 standalone sudo[284192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:27 standalone sudo[284192]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:27 standalone sshd[284191]: Received disconnect from 192.168.122.11 port 44448:11: disconnected by user
Dec  2 15:08:27 standalone sshd[284191]: Disconnected from user root 192.168.122.11 port 44448
Dec  2 15:08:27 standalone sshd[284188]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:27 standalone sshd[284207]: Accepted publickey for root from 192.168.122.11 port 44454 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:27 standalone sshd[284207]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284211]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_api.service
Dec  2 15:08:28 standalone sudo[284211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284211]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284210]: Received disconnect from 192.168.122.11 port 44454:11: disconnected by user
Dec  2 15:08:28 standalone sshd[284210]: Disconnected from user root 192.168.122.11 port 44454
Dec  2 15:08:28 standalone sshd[284207]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284226]: Accepted publickey for root from 192.168.122.11 port 44462 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:28 standalone sshd[284226]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284238]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_inspector.service
Dec  2 15:08:28 standalone sudo[284238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284238]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284237]: Received disconnect from 192.168.122.11 port 44462:11: disconnected by user
Dec  2 15:08:28 standalone sshd[284237]: Disconnected from user root 192.168.122.11 port 44462
Dec  2 15:08:28 standalone sshd[284226]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284253]: Accepted publickey for root from 192.168.122.11 port 44478 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:28 standalone sshd[284253]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284257]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_conductor.service
Dec  2 15:08:28 standalone sudo[284257]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:28 standalone sudo[284257]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284256]: Received disconnect from 192.168.122.11 port 44478:11: disconnected by user
Dec  2 15:08:28 standalone sshd[284256]: Disconnected from user root 192.168.122.11 port 44478
Dec  2 15:08:28 standalone sshd[284253]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:28 standalone sshd[284272]: Accepted publickey for root from 192.168.122.11 port 44492 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:28 standalone sshd[284272]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284319]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_inspector_dnsmasq.service
Dec  2 15:08:29 standalone sudo[284319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284319]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284279]: Received disconnect from 192.168.122.11 port 44492:11: disconnected by user
Dec  2 15:08:29 standalone sshd[284279]: Disconnected from user root 192.168.122.11 port 44492
Dec  2 15:08:29 standalone sshd[284272]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284373]: Accepted publickey for root from 192.168.122.11 port 44498 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:29 standalone sshd[284373]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284377]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_pxe_http.service
Dec  2 15:08:29 standalone sudo[284377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284377]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284376]: Received disconnect from 192.168.122.11 port 44498:11: disconnected by user
Dec  2 15:08:29 standalone sshd[284376]: Disconnected from user root 192.168.122.11 port 44498
Dec  2 15:08:29 standalone sshd[284373]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284400]: Accepted publickey for root from 192.168.122.11 port 44510 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:29 standalone sshd[284400]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284430]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ironic_pxe_tftp.service
Dec  2 15:08:29 standalone sudo[284430]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sudo[284430]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284405]: Received disconnect from 192.168.122.11 port 44510:11: disconnected by user
Dec  2 15:08:29 standalone sshd[284405]: Disconnected from user root 192.168.122.11 port 44510
Dec  2 15:08:29 standalone sshd[284400]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:29 standalone sshd[284460]: Accepted publickey for root from 192.168.122.11 port 44514 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:29 standalone sshd[284460]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:29 standalone sshd[284464]: Received disconnect from 192.168.122.11 port 44514:11: disconnected by user
Dec  2 15:08:29 standalone sshd[284464]: Disconnected from user root 192.168.122.11 port 44514
Dec  2 15:08:29 standalone sshd[284460]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:30 standalone sshd[284495]: Accepted publickey for root from 192.168.122.11 port 44516 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:30 standalone sshd[284495]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:30 standalone sshd[284533]: Received disconnect from 192.168.122.11 port 44516:11: disconnected by user
Dec  2 15:08:30 standalone sshd[284533]: Disconnected from user root 192.168.122.11 port 44516
Dec  2 15:08:30 standalone sshd[284495]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:30 standalone sshd[284581]: Accepted publickey for root from 192.168.122.11 port 44518 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:30 standalone sshd[284581]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:30 standalone sshd[284593]: Received disconnect from 192.168.122.11 port 44518:11: disconnected by user
Dec  2 15:08:30 standalone sshd[284593]: Disconnected from user root 192.168.122.11 port 44518
Dec  2 15:08:30 standalone sshd[284581]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:30 standalone sshd[284607]: Accepted publickey for root from 192.168.122.11 port 44534 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:30 standalone sshd[284607]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:30 standalone sshd[284610]: Received disconnect from 192.168.122.11 port 44534:11: disconnected by user
Dec  2 15:08:30 standalone sshd[284610]: Disconnected from user root 192.168.122.11 port 44534
Dec  2 15:08:30 standalone sshd[284607]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:30 standalone sshd[284624]: Accepted publickey for root from 192.168.122.11 port 44544 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:31 standalone sshd[284624]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:31 standalone sshd[284668]: Received disconnect from 192.168.122.11 port 44544:11: disconnected by user
Dec  2 15:08:31 standalone sshd[284668]: Disconnected from user root 192.168.122.11 port 44544
Dec  2 15:08:31 standalone sshd[284624]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:31 standalone sshd[284690]: Accepted publickey for root from 192.168.122.11 port 44554 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:31 standalone sshd[284690]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:31 standalone sshd[284693]: Received disconnect from 192.168.122.11 port 44554:11: disconnected by user
Dec  2 15:08:31 standalone sshd[284693]: Disconnected from user root 192.168.122.11 port 44554
Dec  2 15:08:31 standalone sshd[284690]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:32 standalone sshd[284707]: Accepted publickey for root from 192.168.122.11 port 44562 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:32 standalone sshd[284707]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:32 standalone sshd[284710]: Received disconnect from 192.168.122.11 port 44562:11: disconnected by user
Dec  2 15:08:32 standalone sshd[284710]: Disconnected from user root 192.168.122.11 port 44562
Dec  2 15:08:32 standalone sshd[284707]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:32 standalone sshd[284726]: Accepted publickey for root from 192.168.122.11 port 44572 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:32 standalone sshd[284726]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:32 standalone sshd[284737]: Received disconnect from 192.168.122.11 port 44572:11: disconnected by user
Dec  2 15:08:32 standalone sshd[284737]: Disconnected from user root 192.168.122.11 port 44572
Dec  2 15:08:32 standalone sshd[284726]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:32 standalone sshd[284751]: Accepted publickey for root from 192.168.122.11 port 44576 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:32 standalone sshd[284751]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:32 standalone sshd[284754]: Received disconnect from 192.168.122.11 port 44576:11: disconnected by user
Dec  2 15:08:32 standalone sshd[284754]: Disconnected from user root 192.168.122.11 port 44576
Dec  2 15:08:32 standalone sshd[284751]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:32 standalone sshd[284768]: Accepted publickey for root from 192.168.122.11 port 44584 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:33 standalone sshd[284768]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:33 standalone sshd[284771]: Received disconnect from 192.168.122.11 port 44584:11: disconnected by user
Dec  2 15:08:33 standalone sshd[284771]: Disconnected from user root 192.168.122.11 port 44584
Dec  2 15:08:33 standalone sshd[284768]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:33 standalone sshd[284785]: Accepted publickey for root from 192.168.122.11 port 44600 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:33 standalone sshd[284785]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:33 standalone sshd[284788]: Received disconnect from 192.168.122.11 port 44600:11: disconnected by user
Dec  2 15:08:33 standalone sshd[284788]: Disconnected from user root 192.168.122.11 port 44600
Dec  2 15:08:33 standalone sshd[284785]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:33 standalone sshd[284810]: Accepted publickey for root from 192.168.122.11 port 44602 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:33 standalone sshd[284810]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:33 standalone sshd[284813]: Received disconnect from 192.168.122.11 port 44602:11: disconnected by user
Dec  2 15:08:33 standalone sshd[284813]: Disconnected from user root 192.168.122.11 port 44602
Dec  2 15:08:33 standalone sshd[284810]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:33 standalone sshd[284827]: Accepted publickey for root from 192.168.122.11 port 44618 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:33 standalone sshd[284827]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:33 standalone sshd[284830]: Received disconnect from 192.168.122.11 port 44618:11: disconnected by user
Dec  2 15:08:33 standalone sshd[284830]: Disconnected from user root 192.168.122.11 port 44618
Dec  2 15:08:33 standalone sshd[284827]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:34 standalone sshd[284844]: Accepted publickey for root from 192.168.122.11 port 44624 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:34 standalone sshd[284844]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:34 standalone sshd[284847]: Received disconnect from 192.168.122.11 port 44624:11: disconnected by user
Dec  2 15:08:34 standalone sshd[284847]: Disconnected from user root 192.168.122.11 port 44624
Dec  2 15:08:34 standalone sshd[284844]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:34 standalone sshd[284861]: Accepted publickey for root from 192.168.122.11 port 44638 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:34 standalone sshd[284861]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:34 standalone sshd[284864]: Received disconnect from 192.168.122.11 port 44638:11: disconnected by user
Dec  2 15:08:34 standalone sshd[284864]: Disconnected from user root 192.168.122.11 port 44638
Dec  2 15:08:34 standalone sshd[284861]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:34 standalone sshd[284886]: Accepted publickey for root from 192.168.122.11 port 44648 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:34 standalone sshd[284886]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:34 standalone sshd[284889]: Received disconnect from 192.168.122.11 port 44648:11: disconnected by user
Dec  2 15:08:34 standalone sshd[284889]: Disconnected from user root 192.168.122.11 port 44648
Dec  2 15:08:34 standalone sshd[284886]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:34 standalone sshd[284903]: Accepted publickey for root from 192.168.122.11 port 44664 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:35 standalone sshd[284903]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:35 standalone sshd[284906]: Received disconnect from 192.168.122.11 port 44664:11: disconnected by user
Dec  2 15:08:35 standalone sshd[284906]: Disconnected from user root 192.168.122.11 port 44664
Dec  2 15:08:35 standalone sshd[284903]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:35 standalone sshd[284043]: Invalid user weewx from 185.246.128.170 port 10394
Dec  2 15:08:35 standalone sshd[284920]: Accepted publickey for root from 192.168.122.11 port 55260 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:35 standalone sshd[284920]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:35 standalone sshd[284923]: Received disconnect from 192.168.122.11 port 55260:11: disconnected by user
Dec  2 15:08:35 standalone sshd[284923]: Disconnected from user root 192.168.122.11 port 55260
Dec  2 15:08:35 standalone sshd[284920]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:35 standalone sshd[284937]: Accepted publickey for root from 192.168.122.11 port 55262 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:35 standalone sshd[284937]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:35 standalone sshd[284948]: Received disconnect from 192.168.122.11 port 55262:11: disconnected by user
Dec  2 15:08:35 standalone sshd[284948]: Disconnected from user root 192.168.122.11 port 55262
Dec  2 15:08:35 standalone sshd[284937]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:35 standalone sshd[284967]: Accepted publickey for root from 192.168.122.11 port 55264 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:35 standalone sshd[284967]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:35 standalone sshd[285018]: Received disconnect from 192.168.122.11 port 55264:11: disconnected by user
Dec  2 15:08:35 standalone sshd[285018]: Disconnected from user root 192.168.122.11 port 55264
Dec  2 15:08:35 standalone sshd[284043]: Disconnecting invalid user weewx 185.246.128.170 port 10394: Change of username or service not allowed: (weewx,ssh-connection) -> (azure,ssh-connection) [preauth]
Dec  2 15:08:35 standalone sshd[284967]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:36 standalone sshd[285032]: Accepted publickey for root from 192.168.122.11 port 55270 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:36 standalone sshd[285032]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:36 standalone sshd[285035]: Received disconnect from 192.168.122.11 port 55270:11: disconnected by user
Dec  2 15:08:36 standalone sshd[285035]: Disconnected from user root 192.168.122.11 port 55270
Dec  2 15:08:36 standalone sshd[285032]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:36 standalone sshd[285049]: Accepted publickey for root from 192.168.122.11 port 55280 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:36 standalone sshd[285049]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:36 standalone sshd[285061]: Received disconnect from 192.168.122.11 port 55280:11: disconnected by user
Dec  2 15:08:36 standalone sshd[285061]: Disconnected from user root 192.168.122.11 port 55280
Dec  2 15:08:36 standalone sshd[285049]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:36 standalone sshd[285100]: Accepted publickey for root from 192.168.122.11 port 55292 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:36 standalone sshd[285100]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:36 standalone sshd[285112]: Received disconnect from 192.168.122.11 port 55292:11: disconnected by user
Dec  2 15:08:36 standalone sshd[285112]: Disconnected from user root 192.168.122.11 port 55292
Dec  2 15:08:36 standalone runuser[285128]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:36 standalone sshd[285100]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:36 standalone sshd[285143]: Accepted publickey for root from 192.168.122.11 port 55304 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:36 standalone sshd[285143]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:37 standalone sshd[285178]: Received disconnect from 192.168.122.11 port 55304:11: disconnected by user
Dec  2 15:08:37 standalone sshd[285178]: Disconnected from user root 192.168.122.11 port 55304
Dec  2 15:08:37 standalone sshd[285143]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:37 standalone sshd[285206]: Accepted publickey for root from 192.168.122.11 port 55312 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:37 standalone sshd[285206]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:37 standalone sshd[285242]: Received disconnect from 192.168.122.11 port 55312:11: disconnected by user
Dec  2 15:08:37 standalone sshd[285242]: Disconnected from user root 192.168.122.11 port 55312
Dec  2 15:08:37 standalone sshd[285206]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:37 standalone runuser[285128]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:37 standalone sshd[285278]: Accepted publickey for root from 192.168.122.11 port 55324 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:37 standalone sshd[285278]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:37 standalone runuser[285317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:37 standalone sshd[285305]: Received disconnect from 192.168.122.11 port 55324:11: disconnected by user
Dec  2 15:08:37 standalone sshd[285305]: Disconnected from user root 192.168.122.11 port 55324
Dec  2 15:08:37 standalone sshd[285278]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:37 standalone sshd[285353]: Accepted publickey for root from 192.168.122.11 port 55338 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:37 standalone sshd[285353]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:37 standalone sshd[285397]: Received disconnect from 192.168.122.11 port 55338:11: disconnected by user
Dec  2 15:08:37 standalone sshd[285397]: Disconnected from user root 192.168.122.11 port 55338
Dec  2 15:08:37 standalone sshd[285353]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:38 standalone sshd[285411]: Accepted publickey for root from 192.168.122.11 port 55352 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:38 standalone sshd[285411]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:38 standalone runuser[285317]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:38 standalone sshd[285417]: Received disconnect from 192.168.122.11 port 55352:11: disconnected by user
Dec  2 15:08:38 standalone sshd[285417]: Disconnected from user root 192.168.122.11 port 55352
Dec  2 15:08:38 standalone sshd[285411]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:38 standalone runuser[285438]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:38 standalone sshd[285453]: Accepted publickey for root from 192.168.122.11 port 55362 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:38 standalone sshd[285453]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:38 standalone sshd[285488]: Received disconnect from 192.168.122.11 port 55362:11: disconnected by user
Dec  2 15:08:38 standalone sshd[285488]: Disconnected from user root 192.168.122.11 port 55362
Dec  2 15:08:38 standalone sshd[285453]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:38 standalone sshd[285515]: Accepted publickey for root from 192.168.122.11 port 55378 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:38 standalone sshd[285515]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:38 standalone sshd[285545]: Received disconnect from 192.168.122.11 port 55378:11: disconnected by user
Dec  2 15:08:38 standalone sshd[285545]: Disconnected from user root 192.168.122.11 port 55378
Dec  2 15:08:38 standalone sshd[285515]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:38 standalone sshd[285564]: Accepted publickey for root from 192.168.122.11 port 55386 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:38 standalone sshd[285564]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:39 standalone runuser[285438]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:39 standalone sshd[285571]: Received disconnect from 192.168.122.11 port 55386:11: disconnected by user
Dec  2 15:08:39 standalone sshd[285571]: Disconnected from user root 192.168.122.11 port 55386
Dec  2 15:08:39 standalone sshd[285564]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:39 standalone sshd[285649]: Accepted publickey for root from 192.168.122.11 port 55402 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:39 standalone sshd[285649]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:39 standalone sshd[285671]: Received disconnect from 192.168.122.11 port 55402:11: disconnected by user
Dec  2 15:08:39 standalone sshd[285671]: Disconnected from user root 192.168.122.11 port 55402
Dec  2 15:08:39 standalone sshd[285649]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:39 standalone sshd[285686]: Accepted publickey for root from 192.168.122.11 port 55406 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:39 standalone sshd[285686]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:39 standalone sshd[285689]: Received disconnect from 192.168.122.11 port 55406:11: disconnected by user
Dec  2 15:08:39 standalone sshd[285689]: Disconnected from user root 192.168.122.11 port 55406
Dec  2 15:08:39 standalone sshd[285686]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:39 standalone sshd[285715]: Accepted publickey for root from 192.168.122.11 port 55416 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:39 standalone sshd[285715]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:39 standalone sshd[285755]: Received disconnect from 192.168.122.11 port 55416:11: disconnected by user
Dec  2 15:08:39 standalone sshd[285755]: Disconnected from user root 192.168.122.11 port 55416
Dec  2 15:08:39 standalone sshd[285243]: Invalid user azure from 185.246.128.170 port 2075
Dec  2 15:08:39 standalone sshd[285715]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:40 standalone sshd[285769]: Accepted publickey for root from 192.168.122.11 port 55426 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:40 standalone sshd[285243]: Disconnecting invalid user azure 185.246.128.170 port 2075: Change of username or service not allowed: (azure,ssh-connection) -> (mary,ssh-connection) [preauth]
Dec  2 15:08:40 standalone sshd[285769]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:40 standalone sshd[285784]: Received disconnect from 192.168.122.11 port 55426:11: disconnected by user
Dec  2 15:08:40 standalone sshd[285784]: Disconnected from user root 192.168.122.11 port 55426
Dec  2 15:08:40 standalone sshd[285769]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:40 standalone sshd[285824]: Accepted publickey for root from 192.168.122.11 port 55440 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:40 standalone sshd[285824]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:40 standalone sshd[285867]: Received disconnect from 192.168.122.11 port 55440:11: disconnected by user
Dec  2 15:08:40 standalone sshd[285867]: Disconnected from user root 192.168.122.11 port 55440
Dec  2 15:08:40 standalone sshd[285824]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:40 standalone sshd[285881]: Accepted publickey for root from 192.168.122.11 port 55454 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:40 standalone sshd[285881]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:40 standalone sshd[285892]: Received disconnect from 192.168.122.11 port 55454:11: disconnected by user
Dec  2 15:08:40 standalone sshd[285892]: Disconnected from user root 192.168.122.11 port 55454
Dec  2 15:08:40 standalone sshd[285881]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:40 standalone sshd[285906]: Accepted publickey for root from 192.168.122.11 port 55464 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:40 standalone sshd[285906]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:41 standalone sshd[285909]: Received disconnect from 192.168.122.11 port 55464:11: disconnected by user
Dec  2 15:08:41 standalone sshd[285909]: Disconnected from user root 192.168.122.11 port 55464
Dec  2 15:08:41 standalone sshd[285906]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:41 standalone sshd[285964]: Accepted publickey for root from 192.168.122.11 port 55472 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:41 standalone sshd[285964]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:41 standalone sshd[285967]: Received disconnect from 192.168.122.11 port 55472:11: disconnected by user
Dec  2 15:08:41 standalone sshd[285967]: Disconnected from user root 192.168.122.11 port 55472
Dec  2 15:08:41 standalone sshd[285964]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:41 standalone sshd[285981]: Accepted publickey for root from 192.168.122.11 port 55482 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:41 standalone sshd[285981]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:41 standalone sshd[285984]: Received disconnect from 192.168.122.11 port 55482:11: disconnected by user
Dec  2 15:08:41 standalone sshd[285984]: Disconnected from user root 192.168.122.11 port 55482
Dec  2 15:08:41 standalone sshd[285981]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:41 standalone sshd[285999]: Accepted publickey for root from 192.168.122.11 port 55494 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:41 standalone sshd[285999]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:41 standalone sshd[286011]: Received disconnect from 192.168.122.11 port 55494:11: disconnected by user
Dec  2 15:08:41 standalone sshd[286011]: Disconnected from user root 192.168.122.11 port 55494
Dec  2 15:08:41 standalone sshd[285999]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:41 standalone sshd[286025]: Accepted publickey for root from 192.168.122.11 port 55504 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:42 standalone sshd[286025]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:42 standalone sshd[286038]: Received disconnect from 192.168.122.11 port 55504:11: disconnected by user
Dec  2 15:08:42 standalone sshd[286038]: Disconnected from user root 192.168.122.11 port 55504
Dec  2 15:08:42 standalone sshd[286025]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:42 standalone sshd[286099]: Accepted publickey for root from 192.168.122.11 port 55512 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:42 standalone sshd[286099]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:42 standalone sshd[286184]: Received disconnect from 192.168.122.11 port 55512:11: disconnected by user
Dec  2 15:08:42 standalone sshd[286184]: Disconnected from user root 192.168.122.11 port 55512
Dec  2 15:08:42 standalone sshd[286099]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:42 standalone sshd[285998]: Invalid user mary from 185.246.128.170 port 42910
Dec  2 15:08:42 standalone sshd[286216]: Accepted publickey for root from 192.168.122.11 port 55516 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:42 standalone sshd[286216]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:42 standalone sshd[286227]: Received disconnect from 192.168.122.11 port 55516:11: disconnected by user
Dec  2 15:08:42 standalone sshd[286227]: Disconnected from user root 192.168.122.11 port 55516
Dec  2 15:08:42 standalone sshd[286216]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:42 standalone sshd[286241]: Accepted publickey for root from 192.168.122.11 port 55528 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:42 standalone sshd[286241]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:42 standalone sshd[285998]: Disconnecting invalid user mary 185.246.128.170 port 42910: Change of username or service not allowed: (mary,ssh-connection) -> (engineer,ssh-connection) [preauth]
Dec  2 15:08:42 standalone sshd[286251]: Received disconnect from 192.168.122.11 port 55528:11: disconnected by user
Dec  2 15:08:42 standalone sshd[286251]: Disconnected from user root 192.168.122.11 port 55528
Dec  2 15:08:42 standalone sshd[286241]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:43 standalone sshd[286266]: Accepted publickey for root from 192.168.122.11 port 55540 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:43 standalone sshd[286266]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:43 standalone sshd[286269]: Received disconnect from 192.168.122.11 port 55540:11: disconnected by user
Dec  2 15:08:43 standalone sshd[286269]: Disconnected from user root 192.168.122.11 port 55540
Dec  2 15:08:43 standalone sshd[286266]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:43 standalone sshd[286283]: Accepted publickey for root from 192.168.122.11 port 55542 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:43 standalone sshd[286283]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:43 standalone sshd[286287]: Received disconnect from 192.168.122.11 port 55542:11: disconnected by user
Dec  2 15:08:43 standalone sshd[286287]: Disconnected from user root 192.168.122.11 port 55542
Dec  2 15:08:43 standalone sshd[286283]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:43 standalone sshd[286302]: Accepted publickey for root from 192.168.122.11 port 55552 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:43 standalone sshd[286302]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:43 standalone sshd[286305]: Received disconnect from 192.168.122.11 port 55552:11: disconnected by user
Dec  2 15:08:43 standalone sshd[286305]: Disconnected from user root 192.168.122.11 port 55552
Dec  2 15:08:43 standalone sshd[286302]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:43 standalone sshd[286319]: Accepted publickey for root from 192.168.122.11 port 55556 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:43 standalone sshd[286319]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:44 standalone sshd[286330]: Received disconnect from 192.168.122.11 port 55556:11: disconnected by user
Dec  2 15:08:44 standalone sshd[286330]: Disconnected from user root 192.168.122.11 port 55556
Dec  2 15:08:44 standalone sshd[286319]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:44 standalone sshd[286384]: Accepted publickey for root from 192.168.122.11 port 55570 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:44 standalone sshd[286384]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:44 standalone sshd[286494]: Received disconnect from 192.168.122.11 port 55570:11: disconnected by user
Dec  2 15:08:44 standalone sshd[286494]: Disconnected from user root 192.168.122.11 port 55570
Dec  2 15:08:44 standalone sshd[286384]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:44 standalone sshd[286549]: Accepted publickey for root from 192.168.122.11 port 55580 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:44 standalone sshd[286549]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:44 standalone sshd[286572]: Received disconnect from 192.168.122.11 port 55580:11: disconnected by user
Dec  2 15:08:44 standalone sshd[286572]: Disconnected from user root 192.168.122.11 port 55580
Dec  2 15:08:44 standalone sshd[286549]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:44 standalone sshd[286595]: Accepted publickey for root from 192.168.122.11 port 55588 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:44 standalone sshd[286595]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:44 standalone sshd[286622]: Received disconnect from 192.168.122.11 port 55588:11: disconnected by user
Dec  2 15:08:44 standalone sshd[286622]: Disconnected from user root 192.168.122.11 port 55588
Dec  2 15:08:44 standalone sshd[286595]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:45 standalone sshd[286637]: Accepted publickey for root from 192.168.122.11 port 55600 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:45 standalone sshd[286637]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:45 standalone sshd[286640]: Received disconnect from 192.168.122.11 port 55600:11: disconnected by user
Dec  2 15:08:45 standalone sshd[286640]: Disconnected from user root 192.168.122.11 port 55600
Dec  2 15:08:45 standalone sshd[286637]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:45 standalone sshd[286654]: Accepted publickey for root from 192.168.122.11 port 48168 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:45 standalone sshd[286654]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:45 standalone sshd[286657]: Received disconnect from 192.168.122.11 port 48168:11: disconnected by user
Dec  2 15:08:45 standalone sshd[286657]: Disconnected from user root 192.168.122.11 port 48168
Dec  2 15:08:45 standalone sshd[286654]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:45 standalone sshd[286671]: Accepted publickey for root from 192.168.122.11 port 48172 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:45 standalone sshd[286671]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:45 standalone sshd[286682]: Received disconnect from 192.168.122.11 port 48172:11: disconnected by user
Dec  2 15:08:45 standalone sshd[286682]: Disconnected from user root 192.168.122.11 port 48172
Dec  2 15:08:45 standalone sshd[286671]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:46 standalone sshd[286749]: Accepted publickey for root from 192.168.122.11 port 48176 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:46 standalone sshd[286749]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:46 standalone sshd[286752]: Received disconnect from 192.168.122.11 port 48176:11: disconnected by user
Dec  2 15:08:46 standalone sshd[286752]: Disconnected from user root 192.168.122.11 port 48176
Dec  2 15:08:46 standalone sshd[286749]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:46 standalone sshd[286766]: Accepted publickey for root from 192.168.122.11 port 48182 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:46 standalone sshd[286766]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:46 standalone sudo[286770]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-cinder-volume
Dec  2 15:08:46 standalone sudo[286770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:47 standalone sudo[286770]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:47 standalone sshd[286769]: Received disconnect from 192.168.122.11 port 48182:11: disconnected by user
Dec  2 15:08:47 standalone sshd[286769]: Disconnected from user root 192.168.122.11 port 48182
Dec  2 15:08:47 standalone sshd[286766]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:47 standalone sshd[286794]: Accepted publickey for root from 192.168.122.11 port 48190 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:47 standalone sshd[286794]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:47 standalone sudo[286798]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable openstack-cinder-volume
Dec  2 15:08:47 standalone sudo[286798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:48 standalone sudo[286798]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:48 standalone sshd[286797]: Received disconnect from 192.168.122.11 port 48190:11: disconnected by user
Dec  2 15:08:48 standalone sshd[286797]: Disconnected from user root 192.168.122.11 port 48190
Dec  2 15:08:48 standalone sshd[286794]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:48 standalone sshd[286889]: Accepted publickey for root from 192.168.122.11 port 48206 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:48 standalone sshd[286889]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:48 standalone sudo[286936]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-cinder-backup
Dec  2 15:08:48 standalone sudo[286936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:48 standalone sshd[286285]: Invalid user engineer from 185.246.128.170 port 15394
Dec  2 15:08:48 standalone sshd[286285]: Disconnecting invalid user engineer 185.246.128.170 port 15394: Change of username or service not allowed: (engineer,ssh-connection) -> (sync,ssh-connection) [preauth]
Dec  2 15:08:48 standalone sudo[286936]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:48 standalone sshd[286919]: Received disconnect from 192.168.122.11 port 48206:11: disconnected by user
Dec  2 15:08:48 standalone sshd[286919]: Disconnected from user root 192.168.122.11 port 48206
Dec  2 15:08:48 standalone sshd[286889]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:49 standalone sshd[286953]: Accepted publickey for root from 192.168.122.11 port 48214 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:49 standalone sshd[286953]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:49 standalone sudo[286995]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable openstack-cinder-backup
Dec  2 15:08:49 standalone sudo[286995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:49 standalone runuser[287066]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:49 standalone sudo[286995]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:49 standalone sshd[286964]: Received disconnect from 192.168.122.11 port 48214:11: disconnected by user
Dec  2 15:08:49 standalone sshd[286964]: Disconnected from user root 192.168.122.11 port 48214
Dec  2 15:08:49 standalone sshd[286953]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:49 standalone sshd[287158]: Accepted publickey for root from 192.168.122.11 port 48228 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:50 standalone sshd[287158]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:50 standalone sudo[287169]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-manila-share
Dec  2 15:08:50 standalone sudo[287169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:50 standalone runuser[287066]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:50 standalone runuser[287242]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:50 standalone sudo[287169]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:50 standalone sshd[287161]: Received disconnect from 192.168.122.11 port 48228:11: disconnected by user
Dec  2 15:08:50 standalone sshd[287161]: Disconnected from user root 192.168.122.11 port 48228
Dec  2 15:08:50 standalone sshd[287158]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:50 standalone sshd[287288]: Accepted publickey for root from 192.168.122.11 port 48234 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:50 standalone sshd[287288]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:50 standalone sudo[287293]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable openstack-manila-share
Dec  2 15:08:50 standalone sudo[287293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:51 standalone runuser[287242]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:51 standalone runuser[287357]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:08:51 standalone sudo[287293]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:51 standalone sshd[287292]: Received disconnect from 192.168.122.11 port 48234:11: disconnected by user
Dec  2 15:08:51 standalone sshd[287292]: Disconnected from user root 192.168.122.11 port 48234
Dec  2 15:08:51 standalone sshd[287288]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:51 standalone sshd[287420]: Accepted publickey for root from 192.168.122.11 port 48248 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:51 standalone sshd[287420]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:51 standalone sudo[287431]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-cinder-volume
Dec  2 15:08:51 standalone sudo[287431]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:51 standalone runuser[287357]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:08:52 standalone sudo[287431]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:52 standalone sshd[287428]: Received disconnect from 192.168.122.11 port 48248:11: disconnected by user
Dec  2 15:08:52 standalone sshd[287428]: Disconnected from user root 192.168.122.11 port 48248
Dec  2 15:08:52 standalone sshd[287420]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:52 standalone sshd[287480]: Accepted publickey for root from 192.168.122.11 port 48254 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:52 standalone sshd[287480]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:52 standalone sudo[287484]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource status openstack-cinder-volume
Dec  2 15:08:52 standalone sudo[287484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:53 standalone sudo[287484]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:53 standalone sshd[287483]: Received disconnect from 192.168.122.11 port 48254:11: disconnected by user
Dec  2 15:08:53 standalone sshd[287483]: Disconnected from user root 192.168.122.11 port 48254
Dec  2 15:08:53 standalone sshd[287480]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:53 standalone sshd[287508]: Accepted publickey for root from 192.168.122.11 port 48260 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:53 standalone sshd[287508]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:53 standalone sudo[287512]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-cinder-backup
Dec  2 15:08:53 standalone sudo[287512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:53 standalone sudo[287512]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:53 standalone sshd[287511]: Received disconnect from 192.168.122.11 port 48260:11: disconnected by user
Dec  2 15:08:53 standalone sshd[287511]: Disconnected from user root 192.168.122.11 port 48260
Dec  2 15:08:53 standalone sshd[287508]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:54 standalone sshd[287528]: Accepted publickey for root from 192.168.122.11 port 48272 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:54 standalone sshd[287528]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:54 standalone sudo[287532]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource status openstack-cinder-backup
Dec  2 15:08:54 standalone sudo[287532]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:54 standalone sudo[287532]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:54 standalone sshd[287531]: Received disconnect from 192.168.122.11 port 48272:11: disconnected by user
Dec  2 15:08:54 standalone sshd[287531]: Disconnected from user root 192.168.122.11 port 48272
Dec  2 15:08:54 standalone sshd[287528]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:54 standalone sshd[287556]: Accepted publickey for root from 192.168.122.11 port 48282 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:54 standalone sshd[287556]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:54 standalone sudo[287560]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config openstack-manila-share
Dec  2 15:08:54 standalone sudo[287560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:55 standalone sudo[287560]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:55 standalone sshd[287559]: Received disconnect from 192.168.122.11 port 48282:11: disconnected by user
Dec  2 15:08:55 standalone sshd[287559]: Disconnected from user root 192.168.122.11 port 48282
Dec  2 15:08:55 standalone sshd[287556]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:55 standalone sshd[287584]: Accepted publickey for root from 192.168.122.11 port 59462 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:08:55 standalone sshd[287584]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:55 standalone sudo[287588]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource status openstack-manila-share
Dec  2 15:08:55 standalone sudo[287588]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:08:56 standalone sudo[287588]: pam_unix(sudo:session): session closed for user root
Dec  2 15:08:56 standalone sshd[287587]: Received disconnect from 192.168.122.11 port 59462:11: disconnected by user
Dec  2 15:08:56 standalone sshd[287587]: Disconnected from user root 192.168.122.11 port 59462
Dec  2 15:08:56 standalone sshd[287584]: pam_unix(sshd:session): session closed for user root
Dec  2 15:08:56 standalone sshd[287290]: Disconnecting authenticating user sync 185.246.128.170 port 14738: Change of username or service not allowed: (sync,ssh-connection) -> (t128,ssh-connection) [preauth]
Dec  2 15:09:02 standalone runuser[288008]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:03 standalone sshd[287717]: Invalid user t128 from 185.246.128.170 port 50281
Dec  2 15:09:03 standalone sshd[288053]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:09:03 standalone runuser[288008]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:03 standalone sshd[287717]: Disconnecting invalid user t128 185.246.128.170 port 50281: Change of username or service not allowed: (t128,ssh-connection) -> (helpdesk,ssh-connection) [preauth]
Dec  2 15:09:03 standalone runuser[288079]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:04 standalone runuser[288079]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:04 standalone runuser[288133]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:05 standalone runuser[288133]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:10 standalone sudo[288637]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:09:10 standalone sudo[288637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:09:10 standalone sudo[288637]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:10 standalone sudo[288658]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:09:10 standalone sudo[288658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:09:10 standalone sudo[288658]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:11 standalone sudo[288785]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:09:11 standalone sudo[288785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:09:11 standalone sudo[288785]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:14 standalone sshd[288268]: Invalid user helpdesk from 185.246.128.170 port 46807
Dec  2 15:09:14 standalone sshd[288268]: Disconnecting invalid user helpdesk 185.246.128.170 port 46807: Change of username or service not allowed: (helpdesk,ssh-connection) -> (squid,ssh-connection) [preauth]
Dec  2 15:09:15 standalone runuser[289343]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:16 standalone runuser[289343]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:16 standalone runuser[289464]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:17 standalone runuser[289464]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:17 standalone runuser[289519]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:18 standalone runuser[289519]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:19 standalone sshd[289089]: Invalid user squid from 185.246.128.170 port 44757
Dec  2 15:09:19 standalone sshd[289089]: Disconnecting invalid user squid 185.246.128.170 port 44757: Change of username or service not allowed: (squid,ssh-connection) -> (teste,ssh-connection) [preauth]
Dec  2 15:09:21 standalone sshd[289724]: Invalid user teste from 185.246.128.170 port 2818
Dec  2 15:09:21 standalone sshd[289724]: Disconnecting invalid user teste 185.246.128.170 port 2818: Change of username or service not allowed: (teste,ssh-connection) -> (Test,ssh-connection) [preauth]
Dec  2 15:09:28 standalone runuser[290011]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:29 standalone sshd[289854]: Invalid user Test from 185.246.128.170 port 20584
Dec  2 15:09:29 standalone runuser[290011]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:29 standalone runuser[290162]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:30 standalone sshd[289854]: Disconnecting invalid user Test 185.246.128.170 port 20584: Change of username or service not allowed: (Test,ssh-connection) -> (administrator,ssh-connection) [preauth]
Dec  2 15:09:30 standalone runuser[290162]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:30 standalone runuser[290265]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:31 standalone runuser[290265]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:33 standalone sshd[290312]: Invalid user administrator from 185.246.128.170 port 42291
Dec  2 15:09:33 standalone sshd[290312]: Disconnecting invalid user administrator 185.246.128.170 port 42291: Change of username or service not allowed: (administrator,ssh-connection) -> (btf,ssh-connection) [preauth]
Dec  2 15:09:41 standalone runuser[291046]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:42 standalone sshd[290729]: Invalid user btf from 185.246.128.170 port 44579
Dec  2 15:09:42 standalone runuser[291046]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:42 standalone runuser[291109]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:43 standalone sshd[290729]: Disconnecting invalid user btf 185.246.128.170 port 44579: Change of username or service not allowed: (btf,ssh-connection) -> (liuj,ssh-connection) [preauth]
Dec  2 15:09:43 standalone runuser[291109]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:43 standalone runuser[291296]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:44 standalone runuser[291296]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:52 standalone sshd[291603]: Invalid user liuj from 185.246.128.170 port 60240
Dec  2 15:09:53 standalone sshd[292025]: Accepted publickey for root from 192.168.122.11 port 34822 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:09:53 standalone sshd[292025]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:53 standalone sudo[292062]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_northd.service
Dec  2 15:09:53 standalone sudo[292062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:53 standalone sudo[292062]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:53 standalone sshd[292034]: Received disconnect from 192.168.122.11 port 34822:11: disconnected by user
Dec  2 15:09:53 standalone sshd[292034]: Disconnected from user root 192.168.122.11 port 34822
Dec  2 15:09:53 standalone sshd[292025]: pam_unix(sshd:session): session closed for user root
Dec  2 15:09:53 standalone sshd[292066]: Accepted publickey for root from 192.168.122.11 port 34824 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:09:53 standalone sshd[292066]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:54 standalone sudo[292070]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/nft add rule inet filter INPUT ip saddr 172.17.1.0/24 tcp dport 6641 ct state new counter accept
Dec  2 15:09:54 standalone sudo[292070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:54 standalone sudo[292070]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:54 standalone sshd[292069]: Received disconnect from 192.168.122.11 port 34824:11: disconnected by user
Dec  2 15:09:54 standalone sshd[292069]: Disconnected from user root 192.168.122.11 port 34824
Dec  2 15:09:54 standalone sshd[292066]: pam_unix(sshd:session): session closed for user root
Dec  2 15:09:54 standalone sshd[292093]: Accepted publickey for root from 192.168.122.11 port 34840 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:09:54 standalone sshd[292093]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:54 standalone sudo[292097]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/nft add rule inet filter INPUT ip saddr 172.17.1.0/24 tcp dport 6642 ct state new counter accept
Dec  2 15:09:54 standalone sudo[292097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:09:54 standalone sudo[292097]: pam_unix(sudo:session): session closed for user root
Dec  2 15:09:54 standalone sshd[292096]: Received disconnect from 192.168.122.11 port 34840:11: disconnected by user
Dec  2 15:09:54 standalone sshd[292096]: Disconnected from user root 192.168.122.11 port 34840
Dec  2 15:09:54 standalone sshd[292093]: pam_unix(sshd:session): session closed for user root
Dec  2 15:09:54 standalone runuser[292116]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:55 standalone runuser[292116]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:55 standalone runuser[292185]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:56 standalone runuser[292185]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:56 standalone runuser[292247]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:09:57 standalone runuser[292247]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:09:57 standalone sshd[291603]: Disconnecting invalid user liuj 185.246.128.170 port 60240: Change of username or service not allowed: (liuj,ssh-connection) -> (manish,ssh-connection) [preauth]
Dec  2 15:09:59 standalone sshd[292500]: Accepted publickey for root from 192.168.122.11 port 41918 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:00 standalone sshd[292500]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:00 standalone sudo[292517]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_north_db_server.service
Dec  2 15:10:00 standalone sudo[292517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:00 standalone sudo[292517]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:00 standalone sudo[292526]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_north_db_server.service
Dec  2 15:10:00 standalone sudo[292526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:00 standalone sudo[292526]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:00 standalone sshd[292503]: Received disconnect from 192.168.122.11 port 41918:11: disconnected by user
Dec  2 15:10:00 standalone sshd[292503]: Disconnected from user root 192.168.122.11 port 41918
Dec  2 15:10:00 standalone sshd[292500]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:00 standalone sshd[292614]: Accepted publickey for root from 192.168.122.11 port 41924 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:00 standalone sshd[292614]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:00 standalone sudo[292667]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl is-active tripleo_ovn_cluster_south_db_server.service
Dec  2 15:10:00 standalone sudo[292667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:00 standalone sudo[292667]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:00 standalone sudo[292675]:    root : PWD=/root ; USER=root ; COMMAND=/bin/systemctl stop tripleo_ovn_cluster_south_db_server.service
Dec  2 15:10:00 standalone sudo[292675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:01 standalone sudo[292675]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:01 standalone sshd[292617]: Received disconnect from 192.168.122.11 port 41924:11: disconnected by user
Dec  2 15:10:01 standalone sshd[292617]: Disconnected from user root 192.168.122.11 port 41924
Dec  2 15:10:01 standalone sshd[292614]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:01 standalone sshd[292727]: Accepted publickey for root from 192.168.122.11 port 41940 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:01 standalone sshd[292727]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:01 standalone sudo[292772]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cat /var/lib/config-data/puppet-generated/keystone/etc/keystone/credential-keys/0
Dec  2 15:10:01 standalone sudo[292772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:01 standalone sudo[292772]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:01 standalone sshd[292771]: Received disconnect from 192.168.122.11 port 41940:11: disconnected by user
Dec  2 15:10:01 standalone sshd[292771]: Disconnected from user root 192.168.122.11 port 41940
Dec  2 15:10:01 standalone sshd[292727]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:01 standalone sshd[292788]: Accepted publickey for root from 192.168.122.11 port 41954 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:02 standalone sshd[292788]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292823]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cat /var/lib/config-data/puppet-generated/keystone/etc/keystone/credential-keys/1
Dec  2 15:10:02 standalone sudo[292823]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292823]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:02 standalone sshd[292820]: Received disconnect from 192.168.122.11 port 41954:11: disconnected by user
Dec  2 15:10:02 standalone sshd[292820]: Disconnected from user root 192.168.122.11 port 41954
Dec  2 15:10:02 standalone sshd[292788]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:02 standalone sshd[292852]: Accepted publickey for root from 192.168.122.11 port 41956 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:02 standalone sshd[292852]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292866]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cat /var/lib/config-data/puppet-generated/keystone/etc/keystone/fernet-keys/0
Dec  2 15:10:02 standalone sudo[292866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292866]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:02 standalone sshd[292864]: Received disconnect from 192.168.122.11 port 41956:11: disconnected by user
Dec  2 15:10:02 standalone sshd[292864]: Disconnected from user root 192.168.122.11 port 41956
Dec  2 15:10:02 standalone sshd[292852]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:02 standalone sshd[292881]: Accepted publickey for root from 192.168.122.11 port 41970 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:10:02 standalone sshd[292881]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292885]:    root : PWD=/root ; USER=root ; COMMAND=/bin/cat /var/lib/config-data/puppet-generated/keystone/etc/keystone/fernet-keys/1
Dec  2 15:10:02 standalone sudo[292885]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:10:02 standalone sudo[292885]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:02 standalone sshd[292884]: Received disconnect from 192.168.122.11 port 41970:11: disconnected by user
Dec  2 15:10:02 standalone sshd[292884]: Disconnected from user root 192.168.122.11 port 41970
Dec  2 15:10:02 standalone sshd[292881]: pam_unix(sshd:session): session closed for user root
Dec  2 15:10:05 standalone sshd[292527]: Invalid user manish from 185.246.128.170 port 12049
Dec  2 15:10:07 standalone sshd[292527]: Disconnecting invalid user manish 185.246.128.170 port 12049: Change of username or service not allowed: (manish,ssh-connection) -> (default,ssh-connection) [preauth]
Dec  2 15:10:07 standalone runuser[293000]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:08 standalone runuser[293000]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:08 standalone runuser[293069]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:09 standalone runuser[293069]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:09 standalone runuser[293181]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:10 standalone runuser[293181]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:10 standalone sshd[292986]: Invalid user default from 185.246.128.170 port 40915
Dec  2 15:10:11 standalone sudo[293419]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:10:11 standalone sudo[293419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:10:11 standalone sudo[293419]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:11 standalone sudo[293435]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:10:11 standalone sudo[293435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:10:12 standalone sudo[293435]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:12 standalone sudo[293570]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:10:12 standalone sudo[293570]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:10:12 standalone sudo[293570]: pam_unix(sudo:session): session closed for user root
Dec  2 15:10:13 standalone sshd[292986]: Disconnecting invalid user default 185.246.128.170 port 40915: Change of username or service not allowed: (default,ssh-connection) -> (zabbix,ssh-connection) [preauth]
Dec  2 15:10:17 standalone sshd[293775]: Invalid user zabbix from 185.246.128.170 port 59333
Dec  2 15:10:17 standalone sshd[293775]: Disconnecting invalid user zabbix 185.246.128.170 port 59333: Change of username or service not allowed: (zabbix,ssh-connection) -> (qaz,ssh-connection) [preauth]
Dec  2 15:10:20 standalone runuser[294241]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:21 standalone sshd[294236]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:10:21 standalone runuser[294241]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:21 standalone runuser[294352]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:22 standalone runuser[294352]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:22 standalone runuser[294456]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:23 standalone runuser[294456]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:29 standalone sshd[294381]: Invalid user qaz from 185.246.128.170 port 16494
Dec  2 15:10:30 standalone sshd[294381]: Disconnecting invalid user qaz 185.246.128.170 port 16494: Change of username or service not allowed: (qaz,ssh-connection) -> (,ssh-connection) [preauth]
Dec  2 15:10:33 standalone runuser[294993]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:34 standalone runuser[294993]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:34 standalone runuser[295062]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:35 standalone runuser[295062]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:35 standalone runuser[295117]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:35 standalone runuser[295117]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:39 standalone sshd[295107]: Invalid user  from 185.246.128.170 port 62445
Dec  2 15:10:40 standalone sshd[295107]: Disconnecting invalid user  185.246.128.170 port 62445: Change of username or service not allowed: (,ssh-connection) -> (storage,ssh-connection) [preauth]
Dec  2 15:10:46 standalone runuser[295866]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:47 standalone sshd[295663]: Invalid user storage from 185.246.128.170 port 15579
Dec  2 15:10:47 standalone runuser[295866]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:47 standalone sshd[295663]: Disconnecting invalid user storage 185.246.128.170 port 15579: Change of username or service not allowed: (storage,ssh-connection) -> (smb,ssh-connection) [preauth]
Dec  2 15:10:47 standalone runuser[296099]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:47 standalone runuser[296099]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:47 standalone runuser[296282]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:48 standalone runuser[296282]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:10:51 standalone sshd[296224]: Invalid user smb from 185.246.128.170 port 63116
Dec  2 15:10:54 standalone sshd[296224]: Disconnecting invalid user smb 185.246.128.170 port 63116: Change of username or service not allowed: (smb,ssh-connection) -> (super,ssh-connection) [preauth]
Dec  2 15:10:59 standalone sshd[296688]: Invalid user super from 185.246.128.170 port 33647
Dec  2 15:10:59 standalone runuser[296807]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:10:59 standalone sshd[296688]: Disconnecting invalid user super 185.246.128.170 port 33647: Change of username or service not allowed: (super,ssh-connection) -> (webapp,ssh-connection) [preauth]
Dec  2 15:11:00 standalone runuser[296807]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:00 standalone runuser[296958]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:01 standalone runuser[296958]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:01 standalone runuser[297074]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:02 standalone runuser[297074]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:05 standalone sshd[297044]: Invalid user webapp from 185.246.128.170 port 23820
Dec  2 15:11:05 standalone sshd[297044]: Disconnecting invalid user webapp 185.246.128.170 port 23820: Change of username or service not allowed: (webapp,ssh-connection) -> (xiaoxiao,ssh-connection) [preauth]
Dec  2 15:11:12 standalone sudo[297653]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:11:12 standalone sudo[297653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:11:12 standalone sudo[297653]: pam_unix(sudo:session): session closed for user root
Dec  2 15:11:12 standalone sudo[297676]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:11:12 standalone sudo[297676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:11:12 standalone runuser[297735]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:13 standalone sudo[297676]: pam_unix(sudo:session): session closed for user root
Dec  2 15:11:13 standalone sudo[297812]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:11:13 standalone sudo[297812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:11:13 standalone sudo[297812]: pam_unix(sudo:session): session closed for user root
Dec  2 15:11:13 standalone runuser[297735]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:13 standalone runuser[297843]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:14 standalone runuser[297843]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:14 standalone runuser[297905]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:15 standalone sshd[297356]: Invalid user xiaoxiao from 185.246.128.170 port 18052
Dec  2 15:11:15 standalone sshd[297356]: Disconnecting invalid user xiaoxiao 185.246.128.170 port 18052: Change of username or service not allowed: (xiaoxiao,ssh-connection) -> (supervisor,ssh-connection) [preauth]
Dec  2 15:11:15 standalone runuser[297905]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:17 standalone sshd[298137]: Invalid user supervisor from 185.246.128.170 port 35428
Dec  2 15:11:17 standalone sshd[298137]: Disconnecting invalid user supervisor 185.246.128.170 port 35428: Change of username or service not allowed: (supervisor,ssh-connection) -> (qemu,ssh-connection) [preauth]
Dec  2 15:11:21 standalone sshd[298454]: Disconnecting authenticating user qemu 185.246.128.170 port 24263: Change of username or service not allowed: (qemu,ssh-connection) -> (admin,ssh-connection) [preauth]
Dec  2 15:11:25 standalone runuser[298735]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:26 standalone runuser[298735]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:27 standalone runuser[298813]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:27 standalone runuser[298813]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:27 standalone runuser[298920]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:28 standalone runuser[298920]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:29 standalone sshd[298687]: Invalid user admin from 185.246.128.170 port 9937
Dec  2 15:11:37 standalone sshd[298687]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 9937 ssh2 [preauth]
Dec  2 15:11:37 standalone sshd[298687]: Disconnecting invalid user admin 185.246.128.170 port 9937: Too many authentication failures [preauth]
Dec  2 15:11:39 standalone runuser[299589]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:40 standalone runuser[299589]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:40 standalone runuser[299740]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:41 standalone runuser[299740]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:41 standalone runuser[299835]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:42 standalone runuser[299835]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:45 standalone sshd[299541]: Invalid user admin from 185.246.128.170 port 1759
Dec  2 15:11:47 standalone sshd[300267]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:11:51 standalone sshd[299541]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 1759 ssh2 [preauth]
Dec  2 15:11:51 standalone sshd[299541]: Disconnecting invalid user admin 185.246.128.170 port 1759: Too many authentication failures [preauth]
Dec  2 15:11:52 standalone runuser[300884]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:53 standalone runuser[300884]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:53 standalone runuser[300945]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:54 standalone sshd[300827]: Invalid user admin from 185.246.128.170 port 3780
Dec  2 15:11:54 standalone runuser[300945]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:54 standalone runuser[301007]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:11:55 standalone runuser[301007]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:11:59 standalone sshd[300827]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 3780 ssh2 [preauth]
Dec  2 15:11:59 standalone sshd[300827]: Disconnecting invalid user admin 185.246.128.170 port 3780: Too many authentication failures [preauth]
Dec  2 15:12:02 standalone sshd[301304]: Invalid user admin from 185.246.128.170 port 48355
Dec  2 15:12:05 standalone runuser[301521]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:06 standalone runuser[301521]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:06 standalone runuser[301590]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:07 standalone runuser[301590]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:07 standalone runuser[301652]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:08 standalone runuser[301652]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:12 standalone sshd[301304]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 48355 ssh2 [preauth]
Dec  2 15:12:12 standalone sshd[301304]: Disconnecting invalid user admin 185.246.128.170 port 48355: Too many authentication failures [preauth]
Dec  2 15:12:13 standalone sudo[302068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:12:13 standalone sudo[302068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:12:13 standalone sudo[302068]: pam_unix(sudo:session): session closed for user root
Dec  2 15:12:13 standalone sudo[302097]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:12:13 standalone sudo[302097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:12:14 standalone sudo[302097]: pam_unix(sudo:session): session closed for user root
Dec  2 15:12:14 standalone sudo[302176]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:12:14 standalone sudo[302176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:12:14 standalone sudo[302176]: pam_unix(sudo:session): session closed for user root
Dec  2 15:12:16 standalone sshd[302203]: Invalid user admin from 185.246.128.170 port 18640
Dec  2 15:12:18 standalone runuser[302462]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:19 standalone runuser[302462]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:19 standalone runuser[302652]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:20 standalone runuser[302652]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:20 standalone runuser[302813]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:20 standalone sshd[302203]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 18640 ssh2 [preauth]
Dec  2 15:12:20 standalone sshd[302203]: Disconnecting invalid user admin 185.246.128.170 port 18640: Too many authentication failures [preauth]
Dec  2 15:12:21 standalone runuser[302813]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:22 standalone sshd[303001]: Invalid user admin from 185.246.128.170 port 10188
Dec  2 15:12:29 standalone sshd[303001]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 10188 ssh2 [preauth]
Dec  2 15:12:29 standalone sshd[303001]: Disconnecting invalid user admin 185.246.128.170 port 10188: Too many authentication failures [preauth]
Dec  2 15:12:31 standalone runuser[303425]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:32 standalone runuser[303425]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:32 standalone runuser[303542]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:33 standalone runuser[303542]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:33 standalone runuser[303640]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:34 standalone runuser[303640]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:39 standalone sshd[303714]: Invalid user admin from 185.246.128.170 port 29269
Dec  2 15:12:41 standalone sshd[304126]: Accepted publickey for root from 192.168.122.11 port 56724 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:12:42 standalone sshd[304126]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:12:42 standalone sudo[304171]:    root : PWD=/root ; USER=root ; COMMAND=/bin/python3 -c import configparser; c = configparser.ConfigParser(); c.read('/var/lib/config-data/puppet-generated/barbican/etc/barbican/barbican.conf'); print(c['simple_crypto_plugin']['kek'])
Dec  2 15:12:42 standalone sudo[304171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:12:42 standalone sudo[304171]: pam_unix(sudo:session): session closed for user root
Dec  2 15:12:42 standalone sshd[304170]: Received disconnect from 192.168.122.11 port 56724:11: disconnected by user
Dec  2 15:12:42 standalone sshd[304170]: Disconnected from user root 192.168.122.11 port 56724
Dec  2 15:12:42 standalone sshd[304126]: pam_unix(sshd:session): session closed for user root
Dec  2 15:12:44 standalone runuser[304296]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:45 standalone runuser[304296]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:45 standalone runuser[304365]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:45 standalone sshd[303714]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 29269 ssh2 [preauth]
Dec  2 15:12:45 standalone sshd[303714]: Disconnecting invalid user admin 185.246.128.170 port 29269: Too many authentication failures [preauth]
Dec  2 15:12:46 standalone runuser[304365]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:46 standalone runuser[304539]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:47 standalone runuser[304539]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:53 standalone sshd[305251]: Connection closed by authenticating user root 172.182.195.135 port 61497 [preauth]
Dec  2 15:12:57 standalone sshd[304729]: Invalid user admin from 185.246.128.170 port 35215
Dec  2 15:12:57 standalone runuser[305317]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:58 standalone runuser[305317]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:58 standalone runuser[305414]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:12:59 standalone runuser[305414]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:12:59 standalone runuser[305529]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:00 standalone runuser[305529]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:05 standalone sshd[304729]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 35215 ssh2 [preauth]
Dec  2 15:13:05 standalone sshd[304729]: Disconnecting invalid user admin 185.246.128.170 port 35215: Too many authentication failures [preauth]
Dec  2 15:13:09 standalone sshd[305850]: Invalid user admin from 185.246.128.170 port 15729
Dec  2 15:13:10 standalone runuser[305987]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:11 standalone runuser[305987]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:11 standalone runuser[306179]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:12 standalone runuser[306179]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:12 standalone runuser[306340]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:13 standalone runuser[306340]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:14 standalone sudo[306457]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:13:14 standalone sudo[306457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:13:14 standalone sudo[306457]: pam_unix(sudo:session): session closed for user root
Dec  2 15:13:14 standalone sudo[306475]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:13:14 standalone sudo[306475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:13:15 standalone sudo[306475]: pam_unix(sudo:session): session closed for user root
Dec  2 15:13:15 standalone sudo[306559]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:13:15 standalone sudo[306559]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:13:15 standalone sudo[306559]: pam_unix(sudo:session): session closed for user root
Dec  2 15:13:22 standalone sshd[305850]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 15729 ssh2 [preauth]
Dec  2 15:13:22 standalone sshd[305850]: Disconnecting invalid user admin 185.246.128.170 port 15729: Too many authentication failures [preauth]
Dec  2 15:13:23 standalone runuser[307310]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:24 standalone runuser[307310]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:24 standalone runuser[307375]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:25 standalone runuser[307375]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:25 standalone runuser[307434]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:26 standalone runuser[307434]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:31 standalone sshd[307355]: Invalid user admin from 185.246.128.170 port 20830
Dec  2 15:13:36 standalone runuser[307923]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:37 standalone runuser[307923]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:37 standalone runuser[308025]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:38 standalone runuser[308025]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:38 standalone runuser[308195]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:39 standalone runuser[308195]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:41 standalone sshd[307355]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 20830 ssh2 [preauth]
Dec  2 15:13:41 standalone sshd[307355]: Disconnecting invalid user admin 185.246.128.170 port 20830: Too many authentication failures [preauth]
Dec  2 15:13:48 standalone sshd[308589]: Invalid user admin from 185.246.128.170 port 17117
Dec  2 15:13:49 standalone runuser[308896]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:50 standalone runuser[308896]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:50 standalone runuser[308974]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:51 standalone runuser[308974]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:51 standalone runuser[309118]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:13:52 standalone runuser[309118]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:13:53 standalone sshd[308589]: error: maximum authentication attempts exceeded for invalid user admin from 185.246.128.170 port 17117 ssh2 [preauth]
Dec  2 15:13:53 standalone sshd[308589]: Disconnecting invalid user admin 185.246.128.170 port 17117: Too many authentication failures [preauth]
Dec  2 15:14:00 standalone sshd[309629]: Invalid user admin from 185.246.128.170 port 19067
Dec  2 15:14:03 standalone runuser[309957]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:03 standalone runuser[309957]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:04 standalone runuser[310067]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:04 standalone runuser[310067]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:04 standalone runuser[310128]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:05 standalone runuser[310128]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:06 standalone sshd[309629]: Disconnecting invalid user admin 185.246.128.170 port 19067: Change of username or service not allowed: (admin,ssh-connection) -> (Cisco,ssh-connection) [preauth]
Dec  2 15:14:09 standalone sshd[310227]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:14:13 standalone sshd[310269]: Invalid user Cisco from 185.246.128.170 port 3962
Dec  2 15:14:13 standalone sshd[310269]: Disconnecting invalid user Cisco 185.246.128.170 port 3962: Change of username or service not allowed: (Cisco,ssh-connection) -> (john,ssh-connection) [preauth]
Dec  2 15:14:15 standalone sudo[310637]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:14:15 standalone sudo[310637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:14:15 standalone sudo[310637]: pam_unix(sudo:session): session closed for user root
Dec  2 15:14:15 standalone sudo[310654]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:14:15 standalone sudo[310654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:14:16 standalone runuser[310747]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:16 standalone sudo[310654]: pam_unix(sudo:session): session closed for user root
Dec  2 15:14:16 standalone sudo[310792]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:14:16 standalone sudo[310792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:14:16 standalone sudo[310792]: pam_unix(sudo:session): session closed for user root
Dec  2 15:14:16 standalone runuser[310747]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:17 standalone runuser[310830]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:17 standalone runuser[310830]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:17 standalone runuser[310886]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:18 standalone runuser[310886]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:21 standalone sshd[310877]: Invalid user john from 185.246.128.170 port 28037
Dec  2 15:14:25 standalone sshd[310877]: Disconnecting invalid user john 185.246.128.170 port 28037: Change of username or service not allowed: (john,ssh-connection) -> (ftpuser,ssh-connection) [preauth]
Dec  2 15:14:29 standalone runuser[311704]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:30 standalone runuser[311704]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:30 standalone sshd[311682]: Invalid user ftpuser from 185.246.128.170 port 22238
Dec  2 15:14:30 standalone runuser[311845]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:31 standalone runuser[311845]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:31 standalone runuser[311907]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:31 standalone runuser[311907]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:36 standalone sshd[311682]: Disconnecting invalid user ftpuser 185.246.128.170 port 22238: Change of username or service not allowed: (ftpuser,ssh-connection) -> (aaa,ssh-connection) [preauth]
Dec  2 15:14:42 standalone runuser[312680]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:43 standalone runuser[312680]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:43 standalone runuser[312792]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:44 standalone runuser[312792]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:44 standalone runuser[312895]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:44 standalone sshd[312398]: Invalid user aaa from 185.246.128.170 port 33938
Dec  2 15:14:44 standalone runuser[312895]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:47 standalone sshd[312398]: Disconnecting invalid user aaa 185.246.128.170 port 33938: Change of username or service not allowed: (aaa,ssh-connection) -> (user1,ssh-connection) [preauth]
Dec  2 15:14:52 standalone sshd[313031]: Invalid user user1 from 185.246.128.170 port 49927
Dec  2 15:14:54 standalone sshd[313031]: Disconnecting invalid user user1 185.246.128.170 port 49927: Change of username or service not allowed: (user1,ssh-connection) -> (zxcloudsetup,ssh-connection) [preauth]
Dec  2 15:14:55 standalone runuser[313802]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:56 standalone runuser[313802]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:56 standalone runuser[313874]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:57 standalone runuser[313874]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:57 standalone runuser[313928]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:14:57 standalone runuser[313928]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:14:59 standalone sshd[313855]: Invalid user zxcloudsetup from 185.246.128.170 port 38261
Dec  2 15:15:01 standalone sshd[313855]: Disconnecting invalid user zxcloudsetup 185.246.128.170 port 38261: Change of username or service not allowed: (zxcloudsetup,ssh-connection) -> (123456,ssh-connection) [preauth]
Dec  2 15:15:07 standalone sshd[314357]: Invalid user 123456 from 185.246.128.170 port 47817
Dec  2 15:15:08 standalone runuser[314395]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:09 standalone runuser[314395]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:09 standalone runuser[314464]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:10 standalone runuser[314464]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:10 standalone runuser[314526]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:10 standalone sshd[314357]: Disconnecting invalid user 123456 185.246.128.170 port 47817: Change of username or service not allowed: (123456,ssh-connection) -> (adsl,ssh-connection) [preauth]
Dec  2 15:15:10 standalone runuser[314526]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:16 standalone sudo[314998]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:15:16 standalone sudo[314998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:15:16 standalone sudo[314998]: pam_unix(sudo:session): session closed for user root
Dec  2 15:15:16 standalone sudo[315015]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:15:16 standalone sudo[315015]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:15:16 standalone sshd[314873]: Invalid user adsl from 185.246.128.170 port 25479
Dec  2 15:15:17 standalone sudo[315015]: pam_unix(sudo:session): session closed for user root
Dec  2 15:15:17 standalone sudo[315105]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:15:17 standalone sudo[315105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:15:17 standalone sudo[315105]: pam_unix(sudo:session): session closed for user root
Dec  2 15:15:17 standalone sudo[315120]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks
Dec  2 15:15:17 standalone sudo[315120]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:15:17 standalone sshd[314873]: Disconnecting invalid user adsl 185.246.128.170 port 25479: Change of username or service not allowed: (adsl,ssh-connection) -> (oracle,ssh-connection) [preauth]
Dec  2 15:15:17 standalone sudo[315120]: pam_unix(sudo:session): session closed for user root
Dec  2 15:15:17 standalone sudo[315153]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:15:17 standalone sudo[315153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:15:17 standalone sudo[315153]: pam_unix(sudo:session): session closed for user root
Dec  2 15:15:21 standalone runuser[315371]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:22 standalone runuser[315371]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:22 standalone runuser[315523]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:23 standalone runuser[315523]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:23 standalone runuser[315727]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:23 standalone runuser[315727]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:25 standalone sshd[315826]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:15:25 standalone sshd[315366]: Invalid user oracle from 185.246.128.170 port 64872
Dec  2 15:15:26 standalone sshd[315366]: error: maximum authentication attempts exceeded for invalid user oracle from 185.246.128.170 port 64872 ssh2 [preauth]
Dec  2 15:15:26 standalone sshd[315366]: Disconnecting invalid user oracle 185.246.128.170 port 64872: Too many authentication failures [preauth]
Dec  2 15:15:34 standalone sshd[316092]: Invalid user oracle from 185.246.128.170 port 36507
Dec  2 15:15:34 standalone runuser[316493]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:35 standalone runuser[316493]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:35 standalone runuser[316555]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:35 standalone runuser[316555]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:35 standalone runuser[316617]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:36 standalone sshd[316092]: Disconnecting invalid user oracle 185.246.128.170 port 36507: Change of username or service not allowed: (oracle,ssh-connection) -> (dock,ssh-connection) [preauth]
Dec  2 15:15:36 standalone runuser[316617]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:38 standalone sshd[316664]: Invalid user dock from 185.246.128.170 port 32722
Dec  2 15:15:38 standalone sshd[316664]: Disconnecting invalid user dock 185.246.128.170 port 32722: Change of username or service not allowed: (dock,ssh-connection) -> (devops,ssh-connection) [preauth]
Dec  2 15:15:41 standalone sshd[316803]: Invalid user devops from 185.246.128.170 port 56005
Dec  2 15:15:43 standalone sshd[316803]: Disconnecting invalid user devops 185.246.128.170 port 56005: Change of username or service not allowed: (devops,ssh-connection) -> (nc,ssh-connection) [preauth]
Dec  2 15:15:47 standalone runuser[317215]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:48 standalone runuser[317215]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:48 standalone runuser[317321]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:48 standalone runuser[317321]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:48 standalone runuser[317381]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:15:49 standalone runuser[317381]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:15:54 standalone sshd[317366]: Invalid user nc from 185.246.128.170 port 58010
Dec  2 15:15:56 standalone sshd[317366]: Disconnecting invalid user nc 185.246.128.170 port 58010: Change of username or service not allowed: (nc,ssh-connection) -> (odoo16,ssh-connection) [preauth]
Dec  2 15:16:00 standalone runuser[318275]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:00 standalone sshd[318193]: Invalid user odoo16 from 185.246.128.170 port 44590
Dec  2 15:16:01 standalone runuser[318275]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:01 standalone runuser[318397]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:01 standalone runuser[318397]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:01 standalone runuser[318461]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:02 standalone runuser[318461]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:02 standalone sshd[318193]: Disconnecting invalid user odoo16 185.246.128.170 port 44590: Change of username or service not allowed: (odoo16,ssh-connection) -> (zhongwen,ssh-connection) [preauth]
Dec  2 15:16:09 standalone sshd[318762]: Invalid user zhongwen from 185.246.128.170 port 37377
Dec  2 15:16:11 standalone sshd[318762]: Disconnecting invalid user zhongwen 185.246.128.170 port 37377: Change of username or service not allowed: (zhongwen,ssh-connection) -> (pi,ssh-connection) [preauth]
Dec  2 15:16:13 standalone runuser[319102]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:14 standalone runuser[319102]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:14 standalone runuser[319212]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:14 standalone runuser[319212]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:14 standalone runuser[319327]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:15 standalone runuser[319327]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:17 standalone sudo[319416]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:16:18 standalone sudo[319416]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:18 standalone sudo[319416]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:18 standalone sudo[319433]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:16:18 standalone sudo[319433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:18 standalone sudo[319433]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:18 standalone sudo[319501]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:16:18 standalone sudo[319501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:18 standalone sudo[319501]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:18 standalone sudo[319516]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:16:18 standalone sudo[319516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:20 standalone sudo[319516]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:20 standalone sudo[319725]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:16:20 standalone sudo[319725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:20 standalone sudo[319725]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:20 standalone sudo[319740]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:16:20 standalone sudo[319740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:21 standalone sudo[319740]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:21 standalone sudo[319848]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:16:21 standalone sudo[319848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:21 standalone sudo[319848]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:21 standalone sudo[319863]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 15:16:21 standalone sudo[319863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:23 standalone sshd[319379]: Invalid user pi from 185.246.128.170 port 37620
Dec  2 15:16:24 standalone sudo[319863]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:25 standalone sudo[322601]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:16:25 standalone sudo[322601]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:16:25 standalone sudo[322601]: pam_unix(sudo:session): session closed for user root
Dec  2 15:16:26 standalone runuser[322629]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:27 standalone runuser[322629]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:27 standalone runuser[322698]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:27 standalone runuser[322698]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:27 standalone runuser[322942]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:28 standalone runuser[322942]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:36 standalone sshd[319379]: Disconnecting invalid user pi 185.246.128.170 port 37620: Change of username or service not allowed: (pi,ssh-connection) -> (monitor,ssh-connection) [preauth]
Dec  2 15:16:38 standalone sshd[323478]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:16:39 standalone runuser[323577]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:40 standalone runuser[323577]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:40 standalone runuser[323682]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:41 standalone runuser[323682]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:41 standalone runuser[323744]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:42 standalone runuser[323744]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:47 standalone sshd[324095]: Invalid user monitor from 185.246.128.170 port 6251
Dec  2 15:16:50 standalone sshd[324095]: Disconnecting invalid user monitor 185.246.128.170 port 6251: Change of username or service not allowed: (monitor,ssh-connection) -> (postgres,ssh-connection) [preauth]
Dec  2 15:16:52 standalone runuser[324344]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:53 standalone runuser[324344]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:53 standalone runuser[324538]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:53 standalone sshd[324277]: Invalid user postgres from 185.246.128.170 port 25122
Dec  2 15:16:54 standalone runuser[324538]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:54 standalone runuser[324753]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:16:54 standalone runuser[324753]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:16:55 standalone sshd[324277]: Disconnecting invalid user postgres 185.246.128.170 port 25122: Change of username or service not allowed: (postgres,ssh-connection) -> (admin2,ssh-connection) [preauth]
Dec  2 15:17:01 standalone sshd[324978]: Invalid user admin2 from 185.246.128.170 port 55486
Dec  2 15:17:03 standalone sshd[324978]: Disconnecting invalid user admin2 185.246.128.170 port 55486: Change of username or service not allowed: (admin2,ssh-connection) -> (onlime_r,ssh-connection) [preauth]
Dec  2 15:17:05 standalone runuser[325602]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:06 standalone runuser[325602]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:06 standalone runuser[325673]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:07 standalone runuser[325673]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:07 standalone runuser[325735]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:08 standalone runuser[325735]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:11 standalone sshd[325655]: Invalid user onlime_r from 185.246.128.170 port 51107
Dec  2 15:17:12 standalone sshd[325655]: Disconnecting invalid user onlime_r 185.246.128.170 port 51107: Change of username or service not allowed: (onlime_r,ssh-connection) -> (demo,ssh-connection) [preauth]
Dec  2 15:17:15 standalone sshd[326168]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 15:17:18 standalone runuser[326256]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:19 standalone runuser[326256]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:19 standalone runuser[326318]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:20 standalone sshd[326158]: Invalid user demo from 185.246.128.170 port 19351
Dec  2 15:17:20 standalone runuser[326318]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:20 standalone runuser[326416]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:20 standalone sshd[326158]: Disconnecting invalid user demo 185.246.128.170 port 19351: Change of username or service not allowed: (demo,ssh-connection) -> (redmine,ssh-connection) [preauth]
Dec  2 15:17:21 standalone runuser[326416]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:24 standalone sshd[326481]: Invalid user redmine from 185.246.128.170 port 64222
Dec  2 15:17:24 standalone sshd[326481]: Disconnecting invalid user redmine 185.246.128.170 port 64222: Change of username or service not allowed: (redmine,ssh-connection) -> (testuser,ssh-connection) [preauth]
Dec  2 15:17:25 standalone sudo[326888]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:17:25 standalone sudo[326888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:17:25 standalone sudo[326888]: pam_unix(sudo:session): session closed for user root
Dec  2 15:17:25 standalone sudo[326903]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:17:25 standalone sudo[326903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:17:25 standalone sudo[326903]: pam_unix(sudo:session): session closed for user root
Dec  2 15:17:26 standalone sudo[327005]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:17:26 standalone sudo[327005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:17:26 standalone sudo[327005]: pam_unix(sudo:session): session closed for user root
Dec  2 15:17:31 standalone sshd[326918]: Invalid user testuser from 185.246.128.170 port 43970
Dec  2 15:17:31 standalone runuser[327303]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:32 standalone runuser[327303]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:32 standalone runuser[327425]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:33 standalone runuser[327425]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:33 standalone runuser[327612]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:34 standalone runuser[327612]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:37 standalone sshd[326918]: Disconnecting invalid user testuser 185.246.128.170 port 43970: Change of username or service not allowed: (testuser,ssh-connection) -> (fa,ssh-connection) [preauth]
Dec  2 15:17:44 standalone runuser[328319]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:45 standalone runuser[328319]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:46 standalone runuser[328434]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:46 standalone runuser[328434]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:46 standalone runuser[328496]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:47 standalone runuser[328496]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:58 standalone sshd[328091]: Invalid user fa from 185.246.128.170 port 52243
Dec  2 15:17:58 standalone sshd[329167]: Accepted publickey for root from 192.168.122.11 port 59554 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:17:58 standalone sshd[329167]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:17:58 standalone runuser[329174]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:58 standalone sudo[329188]:    root : PWD=/root ; USER=root ; COMMAND=/bin/python3 -c import configparser; c = configparser.ConfigParser(); c.read('/var/lib/config-data/puppet-generated/cinder/etc/cinder/cinder.conf'); print(c['DEFAULT']['default_volume_type'])
Dec  2 15:17:58 standalone sudo[329188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:17:58 standalone sudo[329188]: pam_unix(sudo:session): session closed for user root
Dec  2 15:17:58 standalone sshd[329176]: Received disconnect from 192.168.122.11 port 59554:11: disconnected by user
Dec  2 15:17:58 standalone sshd[329176]: Disconnected from user root 192.168.122.11 port 59554
Dec  2 15:17:58 standalone sshd[329167]: pam_unix(sshd:session): session closed for user root
Dec  2 15:17:59 standalone runuser[329174]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:59 standalone runuser[329295]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:17:59 standalone sshd[328091]: Disconnecting invalid user fa 185.246.128.170 port 52243: Change of username or service not allowed: (fa,ssh-connection) -> (kali,ssh-connection) [preauth]
Dec  2 15:17:59 standalone runuser[329295]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:17:59 standalone runuser[329357]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:00 standalone runuser[329357]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:11 standalone sshd[329656]: Invalid user kali from 185.246.128.170 port 37136
Dec  2 15:18:11 standalone sshd[329656]: Disconnecting invalid user kali 185.246.128.170 port 37136: Change of username or service not allowed: (kali,ssh-connection) -> (download,ssh-connection) [preauth]
Dec  2 15:18:11 standalone runuser[330013]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:12 standalone runuser[330013]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:12 standalone runuser[330084]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:13 standalone runuser[330084]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:13 standalone runuser[330201]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:13 standalone sshd[330058]: Invalid user download from 185.246.128.170 port 40707
Dec  2 15:18:14 standalone runuser[330201]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:14 standalone sshd[330058]: Disconnecting invalid user download 185.246.128.170 port 40707: Change of username or service not allowed: (download,ssh-connection) -> (victor,ssh-connection) [preauth]
Dec  2 15:18:14 standalone sshd[330432]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:18:15 standalone sshd[330435]: Invalid user victor from 185.246.128.170 port 1935
Dec  2 15:18:16 standalone sshd[330435]: Disconnecting invalid user victor 185.246.128.170 port 1935: Change of username or service not allowed: (victor,ssh-connection) -> (mongod,ssh-connection) [preauth]
Dec  2 15:18:24 standalone runuser[330926]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:25 standalone runuser[330926]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:25 standalone runuser[331090]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:26 standalone sudo[331196]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:18:26 standalone sudo[331196]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:18:26 standalone sudo[331196]: pam_unix(sudo:session): session closed for user root
Dec  2 15:18:26 standalone sudo[331211]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:18:26 standalone sudo[331211]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:18:26 standalone runuser[331090]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:26 standalone runuser[331254]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:27 standalone sudo[331211]: pam_unix(sudo:session): session closed for user root
Dec  2 15:18:27 standalone sudo[331323]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:18:27 standalone sudo[331323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:18:27 standalone sudo[331323]: pam_unix(sudo:session): session closed for user root
Dec  2 15:18:27 standalone runuser[331254]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:35 standalone sshd[330606]: Invalid user mongod from 185.246.128.170 port 7614
Dec  2 15:18:37 standalone sshd[330606]: Disconnecting invalid user mongod 185.246.128.170 port 7614: Change of username or service not allowed: (mongod,ssh-connection) -> (ddd,ssh-connection) [preauth]
Dec  2 15:18:38 standalone runuser[332069]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:38 standalone runuser[332069]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:39 standalone runuser[332219]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:39 standalone runuser[332219]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:39 standalone runuser[332292]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:40 standalone runuser[332292]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:46 standalone sshd[332409]: Invalid user ddd from 185.246.128.170 port 43577
Dec  2 15:18:48 standalone sshd[332409]: Disconnecting invalid user ddd 185.246.128.170 port 43577: Change of username or service not allowed: (ddd,ssh-connection) -> (vyos,ssh-connection) [preauth]
Dec  2 15:18:51 standalone runuser[332783]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:51 standalone runuser[332783]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:51 standalone runuser[332852]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:52 standalone runuser[332852]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:18:52 standalone runuser[332942]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:18:53 standalone runuser[332942]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:02 standalone sshd[333196]: Invalid user vyos from 185.246.128.170 port 45062
Dec  2 15:19:03 standalone sshd[333196]: Disconnecting invalid user vyos 185.246.128.170 port 45062: Change of username or service not allowed: (vyos,ssh-connection) -> (odoo18,ssh-connection) [preauth]
Dec  2 15:19:04 standalone runuser[334038]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:04 standalone runuser[334038]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:04 standalone runuser[334148]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:05 standalone runuser[334148]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:05 standalone runuser[334243]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:06 standalone runuser[334243]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:11 standalone sshd[334363]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:19:14 standalone sshd[334317]: Invalid user odoo18 from 185.246.128.170 port 2042
Dec  2 15:19:15 standalone sshd[334317]: Disconnecting invalid user odoo18 185.246.128.170 port 2042: Change of username or service not allowed: (odoo18,ssh-connection) -> (admin1,ssh-connection) [preauth]
Dec  2 15:19:16 standalone runuser[334723]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:17 standalone runuser[334723]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:17 standalone runuser[334792]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:18 standalone runuser[334792]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:18 standalone runuser[334912]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:19 standalone runuser[334912]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:26 standalone sshd[334959]: Invalid user admin1 from 185.246.128.170 port 46173
Dec  2 15:19:27 standalone sudo[335336]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:19:27 standalone sudo[335336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:19:27 standalone sudo[335336]: pam_unix(sudo:session): session closed for user root
Dec  2 15:19:27 standalone sudo[335354]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:19:27 standalone sudo[335354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:19:28 standalone sudo[335354]: pam_unix(sudo:session): session closed for user root
Dec  2 15:19:28 standalone sudo[335518]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:19:28 standalone sudo[335518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:19:28 standalone sudo[335518]: pam_unix(sudo:session): session closed for user root
Dec  2 15:19:29 standalone runuser[335608]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:30 standalone runuser[335608]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:30 standalone runuser[335677]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:31 standalone runuser[335677]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:31 standalone runuser[335731]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:32 standalone runuser[335731]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:34 standalone sshd[334959]: error: maximum authentication attempts exceeded for invalid user admin1 from 185.246.128.170 port 46173 ssh2 [preauth]
Dec  2 15:19:34 standalone sshd[334959]: Disconnecting invalid user admin1 185.246.128.170 port 46173: Too many authentication failures [preauth]
Dec  2 15:19:38 standalone sshd[336314]: Invalid user admin1 from 185.246.128.170 port 63967
Dec  2 15:19:42 standalone runuser[336583]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:43 standalone runuser[336583]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:43 standalone runuser[336707]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:44 standalone runuser[336707]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:44 standalone runuser[336892]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:45 standalone runuser[336892]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:52 standalone sshd[336314]: Disconnecting invalid user admin1 185.246.128.170 port 63967: Change of username or service not allowed: (admin1,ssh-connection) -> (wang,ssh-connection) [preauth]
Dec  2 15:19:53 standalone sshd[337206]: Accepted publickey for root from 192.168.122.11 port 41298 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:54 standalone sshd[337206]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:54 standalone sshd[337223]: Received disconnect from 192.168.122.11 port 41298:11: disconnected by user
Dec  2 15:19:54 standalone sshd[337223]: Disconnected from user root 192.168.122.11 port 41298
Dec  2 15:19:54 standalone sshd[337206]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:54 standalone sshd[337334]: Accepted publickey for root from 192.168.122.11 port 41308 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:54 standalone sshd[337334]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:54 standalone sshd[337356]: Received disconnect from 192.168.122.11 port 41308:11: disconnected by user
Dec  2 15:19:54 standalone sshd[337356]: Disconnected from user root 192.168.122.11 port 41308
Dec  2 15:19:54 standalone sshd[337334]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:54 standalone sshd[337409]: Accepted publickey for root from 192.168.122.11 port 41316 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:54 standalone sshd[337409]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:54 standalone sshd[337412]: Received disconnect from 192.168.122.11 port 41316:11: disconnected by user
Dec  2 15:19:54 standalone sshd[337412]: Disconnected from user root 192.168.122.11 port 41316
Dec  2 15:19:54 standalone sshd[337409]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:54 standalone sshd[337426]: Accepted publickey for root from 192.168.122.11 port 41324 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:54 standalone sshd[337426]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:55 standalone sshd[337429]: Received disconnect from 192.168.122.11 port 41324:11: disconnected by user
Dec  2 15:19:55 standalone sshd[337429]: Disconnected from user root 192.168.122.11 port 41324
Dec  2 15:19:55 standalone sshd[337426]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:55 standalone sshd[337484]: Accepted publickey for root from 192.168.122.11 port 41340 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:55 standalone sshd[337484]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:55 standalone sshd[337487]: Received disconnect from 192.168.122.11 port 41340:11: disconnected by user
Dec  2 15:19:55 standalone sshd[337487]: Disconnected from user root 192.168.122.11 port 41340
Dec  2 15:19:55 standalone sshd[337484]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:55 standalone sshd[337509]: Accepted publickey for root from 192.168.122.11 port 33956 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:55 standalone sshd[337509]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:55 standalone sshd[337512]: Received disconnect from 192.168.122.11 port 33956:11: disconnected by user
Dec  2 15:19:55 standalone sshd[337512]: Disconnected from user root 192.168.122.11 port 33956
Dec  2 15:19:55 standalone sshd[337509]: pam_unix(sshd:session): session closed for user root
Dec  2 15:19:55 standalone runuser[337571]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:56 standalone runuser[337571]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:56 standalone runuser[337640]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:57 standalone runuser[337640]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:57 standalone runuser[337702]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:19:58 standalone runuser[337702]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:19:58 standalone sshd[337879]: Accepted publickey for root from 192.168.122.11 port 33964 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:19:58 standalone sshd[337879]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:19:58 standalone sshd[337887]: Received disconnect from 192.168.122.11 port 33964:11: disconnected by user
Dec  2 15:19:58 standalone sshd[337887]: Disconnected from user root 192.168.122.11 port 33964
Dec  2 15:19:58 standalone sshd[337879]: pam_unix(sshd:session): session closed for user root
Dec  2 15:20:08 standalone runuser[338620]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:09 standalone runuser[338620]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:09 standalone runuser[338703]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:10 standalone runuser[338703]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:10 standalone runuser[338770]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:11 standalone runuser[338770]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:11 standalone sshd[338060]: Invalid user wang from 185.246.128.170 port 49289
Dec  2 15:20:11 standalone sshd[338060]: Disconnecting invalid user wang 185.246.128.170 port 49289: Change of username or service not allowed: (wang,ssh-connection) -> (ubuntu,ssh-connection) [preauth]
Dec  2 15:20:17 standalone sshd[338854]: Invalid user ubuntu from 185.246.128.170 port 37811
Dec  2 15:20:21 standalone runuser[339287]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:22 standalone runuser[339287]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:22 standalone runuser[339356]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:23 standalone runuser[339356]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:23 standalone runuser[339412]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:23 standalone sshd[338854]: Disconnecting invalid user ubuntu 185.246.128.170 port 37811: Change of username or service not allowed: (ubuntu,ssh-connection) -> (ali,ssh-connection) [preauth]
Dec  2 15:20:24 standalone runuser[339412]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:27 standalone sshd[339799]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:20:28 standalone sudo[339810]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:20:28 standalone sudo[339810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:20:28 standalone sudo[339810]: pam_unix(sudo:session): session closed for user root
Dec  2 15:20:28 standalone sudo[339834]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:20:28 standalone sudo[339834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:20:29 standalone sudo[339834]: pam_unix(sudo:session): session closed for user root
Dec  2 15:20:29 standalone sudo[339991]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:20:29 standalone sudo[339991]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:20:29 standalone sudo[339991]: pam_unix(sudo:session): session closed for user root
Dec  2 15:20:30 standalone sshd[339741]: Invalid user ali from 185.246.128.170 port 29539
Dec  2 15:20:33 standalone sshd[339741]: Disconnecting invalid user ali 185.246.128.170 port 29539: Change of username or service not allowed: (ali,ssh-connection) -> (sshadmin,ssh-connection) [preauth]
Dec  2 15:20:34 standalone runuser[340284]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:35 standalone runuser[340284]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:35 standalone runuser[340464]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:36 standalone runuser[340464]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:36 standalone runuser[340719]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:37 standalone runuser[340719]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:39 standalone sshd[340803]: Invalid user sshadmin from 185.246.128.170 port 33341
Dec  2 15:20:41 standalone sshd[340803]: Disconnecting invalid user sshadmin 185.246.128.170 port 33341: Change of username or service not allowed: (sshadmin,ssh-connection) -> (mysql,ssh-connection) [preauth]
Dec  2 15:20:43 standalone sshd[341033]: Invalid user mysql from 185.246.128.170 port 1731
Dec  2 15:20:47 standalone sshd[341033]: Disconnecting invalid user mysql 185.246.128.170 port 1731: Change of username or service not allowed: (mysql,ssh-connection) -> (tmax,ssh-connection) [preauth]
Dec  2 15:20:47 standalone runuser[341347]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:48 standalone runuser[341347]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:48 standalone runuser[341416]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:49 standalone runuser[341416]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:49 standalone runuser[341516]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:20:50 standalone runuser[341516]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:20:56 standalone sshd[341571]: Invalid user tmax from 185.246.128.170 port 17985
Dec  2 15:20:56 standalone sshd[341571]: Disconnecting invalid user tmax 185.246.128.170 port 17985: Change of username or service not allowed: (tmax,ssh-connection) -> (nexus,ssh-connection) [preauth]
Dec  2 15:20:59 standalone sshd[341947]: Invalid user nexus from 185.246.128.170 port 30265
Dec  2 15:20:59 standalone sshd[341947]: Disconnecting invalid user nexus 185.246.128.170 port 30265: Change of username or service not allowed: (nexus,ssh-connection) -> (note,ssh-connection) [preauth]
Dec  2 15:21:00 standalone runuser[342242]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:01 standalone runuser[342242]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:01 standalone runuser[342303]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:01 standalone sshd[342221]: Invalid user note from 185.246.128.170 port 8805
Dec  2 15:21:02 standalone sshd[342221]: Disconnecting invalid user note 185.246.128.170 port 8805: Change of username or service not allowed: (note,ssh-connection) -> (wss,ssh-connection) [preauth]
Dec  2 15:21:02 standalone runuser[342303]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:02 standalone runuser[342365]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:03 standalone runuser[342365]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:10 standalone sshd[342441]: Invalid user wss from 185.246.128.170 port 33993
Dec  2 15:21:11 standalone sshd[342441]: Connection closed by invalid user wss 185.246.128.170 port 33993 [preauth]
Dec  2 15:21:13 standalone runuser[343033]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:14 standalone runuser[343033]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:14 standalone runuser[343127]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:15 standalone runuser[343127]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:15 standalone runuser[343340]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:16 standalone runuser[343340]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:26 standalone runuser[343973]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:27 standalone runuser[343973]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:27 standalone runuser[344042]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:28 standalone runuser[344042]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:28 standalone runuser[344098]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:28 standalone sshd[344089]: Accepted publickey for root from 192.168.122.11 port 48374 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:21:28 standalone sshd[344089]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:21:28 standalone sudo[344155]:    root : PWD=/root ; USER=root ; COMMAND=/bin/sed -i /^ONBOOT=/c\ONBOOT=no /etc/sysconfig/network-scripts/ifcfg-o-hm0
Dec  2 15:21:28 standalone sudo[344155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:21:28 standalone sudo[344155]: pam_unix(sudo:session): session closed for user root
Dec  2 15:21:28 standalone sshd[344118]: Received disconnect from 192.168.122.11 port 48374:11: disconnected by user
Dec  2 15:21:28 standalone sshd[344118]: Disconnected from user root 192.168.122.11 port 48374
Dec  2 15:21:28 standalone sshd[344089]: pam_unix(sshd:session): session closed for user root
Dec  2 15:21:29 standalone sudo[344175]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:21:29 standalone sudo[344175]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:21:29 standalone sudo[344175]: pam_unix(sudo:session): session closed for user root
Dec  2 15:21:29 standalone sudo[344194]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:21:29 standalone sudo[344194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:21:29 standalone runuser[344098]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:30 standalone sudo[344194]: pam_unix(sudo:session): session closed for user root
Dec  2 15:21:30 standalone sudo[344358]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:21:30 standalone sudo[344358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:21:30 standalone sudo[344358]: pam_unix(sudo:session): session closed for user root
Dec  2 15:21:40 standalone runuser[345104]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:40 standalone runuser[345104]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:41 standalone runuser[345247]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:41 standalone runuser[345247]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:41 standalone runuser[345336]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:42 standalone runuser[345336]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:42 standalone sshd[345391]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:21:53 standalone runuser[345845]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:53 standalone runuser[345845]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:54 standalone runuser[345916]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:54 standalone runuser[345916]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:21:54 standalone runuser[345978]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:21:55 standalone runuser[345978]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:06 standalone runuser[346904]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:06 standalone runuser[346904]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:07 standalone runuser[347014]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:07 standalone runuser[347014]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:07 standalone runuser[347259]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:08 standalone runuser[347259]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:19 standalone runuser[347731]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:20 standalone runuser[347731]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:20 standalone runuser[347800]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:20 standalone runuser[347800]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:20 standalone runuser[347854]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:21 standalone runuser[347854]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:30 standalone sudo[348387]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:22:30 standalone sudo[348387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:22:30 standalone sudo[348387]: pam_unix(sudo:session): session closed for user root
Dec  2 15:22:30 standalone sudo[348411]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:22:30 standalone sudo[348411]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:22:31 standalone sudo[348411]: pam_unix(sudo:session): session closed for user root
Dec  2 15:22:31 standalone sudo[348567]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:22:31 standalone sudo[348567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:22:31 standalone sudo[348567]: pam_unix(sudo:session): session closed for user root
Dec  2 15:22:32 standalone runuser[348659]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:33 standalone runuser[348659]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:33 standalone runuser[348722]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:34 standalone runuser[348722]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:34 standalone runuser[348784]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:34 standalone runuser[348784]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:45 standalone runuser[349722]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:46 standalone runuser[349722]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:46 standalone runuser[349926]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:47 standalone runuser[349926]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:47 standalone runuser[350029]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:48 standalone runuser[350029]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:58 standalone runuser[350519]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:22:59 standalone runuser[350519]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:22:59 standalone runuser[350591]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:00 standalone runuser[350591]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:00 standalone runuser[350689]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:00 standalone sshd[350736]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:23:01 standalone runuser[350689]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:11 standalone runuser[351555]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:12 standalone runuser[351555]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:12 standalone runuser[351616]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:13 standalone runuser[351616]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:13 standalone runuser[351678]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:14 standalone runuser[351678]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:24 standalone runuser[352213]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:25 standalone runuser[352213]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:25 standalone runuser[352282]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:26 standalone runuser[352282]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:26 standalone runuser[352520]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:27 standalone runuser[352520]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:31 standalone sudo[352741]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:23:31 standalone sudo[352741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:23:31 standalone sudo[352741]: pam_unix(sudo:session): session closed for user root
Dec  2 15:23:31 standalone sudo[352763]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:23:31 standalone sudo[352763]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:23:32 standalone sudo[352763]: pam_unix(sudo:session): session closed for user root
Dec  2 15:23:32 standalone sudo[352922]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:23:32 standalone sudo[352922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:23:32 standalone sudo[352922]: pam_unix(sudo:session): session closed for user root
Dec  2 15:23:37 standalone runuser[353297]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:38 standalone runuser[353297]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:38 standalone runuser[353366]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:39 standalone runuser[353366]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:39 standalone runuser[353420]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:39 standalone runuser[353420]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:50 standalone runuser[354274]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:51 standalone runuser[354274]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:51 standalone runuser[354343]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:52 standalone runuser[354343]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:23:52 standalone runuser[354405]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:23:52 standalone runuser[354405]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:03 standalone runuser[355168]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:04 standalone runuser[355168]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:04 standalone runuser[355237]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:04 standalone runuser[355237]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:05 standalone runuser[355291]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:05 standalone runuser[355291]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:17 standalone runuser[356173]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:17 standalone runuser[356173]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:17 standalone runuser[356283]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:18 standalone runuser[356283]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:18 standalone runuser[356345]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:19 standalone runuser[356345]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:30 standalone runuser[356860]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:30 standalone sshd[356854]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:24:30 standalone runuser[356860]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:30 standalone runuser[356929]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:31 standalone runuser[356929]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:31 standalone runuser[356995]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:32 standalone sudo[357105]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:24:32 standalone sudo[357105]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:24:32 standalone sudo[357105]: pam_unix(sudo:session): session closed for user root
Dec  2 15:24:32 standalone sudo[357139]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:24:32 standalone sudo[357139]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:24:32 standalone runuser[356995]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:33 standalone sudo[357139]: pam_unix(sudo:session): session closed for user root
Dec  2 15:24:33 standalone sudo[357267]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:24:33 standalone sudo[357267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:24:33 standalone sudo[357267]: pam_unix(sudo:session): session closed for user root
Dec  2 15:24:43 standalone runuser[358034]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:43 standalone runuser[358034]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:43 standalone runuser[358163]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:44 standalone runuser[358163]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:44 standalone runuser[358225]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:45 standalone runuser[358225]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:56 standalone runuser[358654]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:56 standalone runuser[358654]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:56 standalone runuser[358893]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:57 standalone runuser[358893]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:24:57 standalone runuser[359050]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:24:58 standalone runuser[359050]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:09 standalone runuser[359796]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:09 standalone runuser[359796]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:10 standalone runuser[359865]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:10 standalone runuser[359865]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:10 standalone runuser[359919]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:11 standalone runuser[359919]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:22 standalone runuser[360575]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:22 standalone runuser[360575]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:23 standalone runuser[360644]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:23 standalone runuser[360644]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:23 standalone runuser[360708]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:24 standalone runuser[360708]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:33 standalone sudo[361202]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:25:33 standalone sudo[361202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:25:33 standalone sudo[361202]: pam_unix(sudo:session): session closed for user root
Dec  2 15:25:33 standalone sudo[361220]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:25:33 standalone sudo[361220]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:25:34 standalone sudo[361220]: pam_unix(sudo:session): session closed for user root
Dec  2 15:25:34 standalone sudo[361419]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:25:34 standalone sudo[361419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:25:34 standalone sudo[361419]: pam_unix(sudo:session): session closed for user root
Dec  2 15:25:35 standalone runuser[361446]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:35 standalone runuser[361446]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:36 standalone runuser[361571]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:36 standalone runuser[361571]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:36 standalone runuser[361748]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:37 standalone runuser[361748]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:39 standalone sshd[361810]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:25:48 standalone runuser[362747]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:48 standalone runuser[362747]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:49 standalone runuser[362809]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:49 standalone runuser[362809]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:25:49 standalone runuser[362871]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:25:50 standalone runuser[362871]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:00 standalone runuser[363364]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:01 standalone runuser[363364]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:01 standalone runuser[363433]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:02 standalone runuser[363433]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:02 standalone runuser[363495]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:03 standalone runuser[363495]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:14 standalone runuser[364167]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:14 standalone runuser[364167]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:15 standalone runuser[364446]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:15 standalone runuser[364446]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:15 standalone runuser[364513]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:16 standalone runuser[364513]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:27 standalone runuser[365121]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:27 standalone runuser[365121]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:28 standalone runuser[365231]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:28 standalone runuser[365231]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:28 standalone runuser[365431]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:29 standalone runuser[365431]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:34 standalone sudo[365531]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:26:34 standalone sudo[365531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:34 standalone sudo[365531]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:34 standalone sudo[365546]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:26:34 standalone sudo[365546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:35 standalone sudo[365546]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:35 standalone sudo[365662]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:26:35 standalone sudo[365662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:35 standalone sudo[365662]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:35 standalone sudo[365699]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:26:35 standalone sudo[365699]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:36 standalone sudo[365699]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:37 standalone sudo[366009]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:26:37 standalone sudo[366009]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:37 standalone sudo[366009]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:37 standalone sudo[366098]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:26:37 standalone sudo[366098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:37 standalone sudo[366098]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:37 standalone sudo[366206]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:26:37 standalone sudo[366206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:26:37 standalone sudo[366206]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:40 standalone runuser[366408]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:40 standalone runuser[366408]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:41 standalone runuser[366547]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:41 standalone runuser[366547]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:41 standalone runuser[366611]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:42 standalone runuser[366611]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:49 standalone sshd[367355]: Accepted publickey for root from 192.168.122.11 port 42694 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:49 standalone sshd[367355]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:49 standalone sudo[367370]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config galera-bundle
Dec  2 15:26:49 standalone sudo[367370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:49 standalone sudo[367370]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:49 standalone sshd[367364]: Received disconnect from 192.168.122.11 port 42694:11: disconnected by user
Dec  2 15:26:49 standalone sshd[367364]: Disconnected from user root 192.168.122.11 port 42694
Dec  2 15:26:49 standalone sshd[367355]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:50 standalone sshd[367394]: Accepted publickey for root from 192.168.122.11 port 42700 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:50 standalone sshd[367394]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:50 standalone sudo[367406]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable galera-bundle
Dec  2 15:26:50 standalone sudo[367406]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:50 standalone sudo[367406]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:50 standalone sshd[367405]: Received disconnect from 192.168.122.11 port 42700:11: disconnected by user
Dec  2 15:26:50 standalone sshd[367405]: Disconnected from user root 192.168.122.11 port 42700
Dec  2 15:26:50 standalone sshd[367394]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:51 standalone sshd[367427]: Accepted publickey for root from 192.168.122.11 port 42712 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:51 standalone sshd[367427]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:51 standalone sudo[367486]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config haproxy-bundle
Dec  2 15:26:51 standalone sudo[367486]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:51 standalone sudo[367486]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:51 standalone sshd[367485]: Received disconnect from 192.168.122.11 port 42712:11: disconnected by user
Dec  2 15:26:51 standalone sshd[367485]: Disconnected from user root 192.168.122.11 port 42712
Dec  2 15:26:51 standalone sshd[367427]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:51 standalone sshd[367514]: Accepted publickey for root from 192.168.122.11 port 42716 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:51 standalone sshd[367514]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:52 standalone sudo[367518]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable haproxy-bundle
Dec  2 15:26:52 standalone sudo[367518]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:52 standalone sudo[367518]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:52 standalone sshd[367517]: Received disconnect from 192.168.122.11 port 42716:11: disconnected by user
Dec  2 15:26:52 standalone sshd[367517]: Disconnected from user root 192.168.122.11 port 42716
Dec  2 15:26:52 standalone sshd[367514]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:52 standalone sshd[367549]: Accepted publickey for root from 192.168.122.11 port 42726 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:52 standalone sshd[367549]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:52 standalone sudo[367553]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource config rabbitmq-bundle
Dec  2 15:26:52 standalone sudo[367553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:53 standalone runuser[367574]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:53 standalone runuser[75864]: pam_unix(runuser-l:session): session closed for user mysql
Dec  2 15:26:53 standalone sudo[367553]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:53 standalone sshd[367552]: Received disconnect from 192.168.122.11 port 42726:11: disconnected by user
Dec  2 15:26:53 standalone sshd[367552]: Disconnected from user root 192.168.122.11 port 42726
Dec  2 15:26:53 standalone sshd[367549]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:53 standalone sshd[367634]: Accepted publickey for root from 192.168.122.11 port 42730 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:26:53 standalone sshd[367634]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:53 standalone sudo[367640]:    root : PWD=/root ; USER=root ; COMMAND=/sbin/pcs resource disable rabbitmq-bundle
Dec  2 15:26:53 standalone sudo[367640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:26:53 standalone runuser[367574]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:53 standalone runuser[367671]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:54 standalone sudo[367640]: pam_unix(sudo:session): session closed for user root
Dec  2 15:26:54 standalone sshd[367639]: Received disconnect from 192.168.122.11 port 42730:11: disconnected by user
Dec  2 15:26:54 standalone sshd[367639]: Disconnected from user root 192.168.122.11 port 42730
Dec  2 15:26:54 standalone sshd[367634]: pam_unix(sshd:session): session closed for user root
Dec  2 15:26:54 standalone runuser[367671]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:54 standalone runuser[367747]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:55 standalone runuser[367747]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:56 standalone runuser[367972]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:57 standalone runuser[367972]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:57 standalone runuser[368066]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:57 standalone runuser[368066]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:57 standalone runuser[368244]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:57 standalone sshd[368235]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:26:58 standalone runuser[368244]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:58 standalone runuser[368379]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0)
Dec  2 15:26:59 standalone runuser[368379]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:26:59 standalone runuser[77923]: pam_unix(runuser:session): session closed for user rabbitmq
Dec  2 15:27:10 standalone sshd[369202]: Accepted publickey for root from 192.168.122.11 port 36868 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:10 standalone sshd[369202]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:10 standalone sshd[369205]: Received disconnect from 192.168.122.11 port 36868:11: disconnected by user
Dec  2 15:27:10 standalone sshd[369205]: Disconnected from user root 192.168.122.11 port 36868
Dec  2 15:27:10 standalone sshd[369202]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:10 standalone sshd[369219]: Accepted publickey for root from 192.168.122.11 port 36874 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:10 standalone sshd[369219]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:10 standalone sshd[369222]: Received disconnect from 192.168.122.11 port 36874:11: disconnected by user
Dec  2 15:27:10 standalone sshd[369222]: Disconnected from user root 192.168.122.11 port 36874
Dec  2 15:27:10 standalone sshd[369219]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:10 standalone sshd[369248]: Accepted publickey for root from 192.168.122.11 port 36888 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:10 standalone sshd[369248]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:11 standalone sshd[369251]: Received disconnect from 192.168.122.11 port 36888:11: disconnected by user
Dec  2 15:27:11 standalone sshd[369251]: Disconnected from user root 192.168.122.11 port 36888
Dec  2 15:27:11 standalone sshd[369248]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:11 standalone sshd[369265]: Accepted publickey for root from 192.168.122.11 port 36892 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:11 standalone sshd[369265]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:11 standalone sshd[369268]: Received disconnect from 192.168.122.11 port 36892:11: disconnected by user
Dec  2 15:27:11 standalone sshd[369268]: Disconnected from user root 192.168.122.11 port 36892
Dec  2 15:27:11 standalone sshd[369265]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:11 standalone sshd[369282]: Accepted publickey for root from 192.168.122.11 port 36896 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:11 standalone sshd[369282]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:11 standalone sshd[369285]: Received disconnect from 192.168.122.11 port 36896:11: disconnected by user
Dec  2 15:27:11 standalone sshd[369285]: Disconnected from user root 192.168.122.11 port 36896
Dec  2 15:27:11 standalone sshd[369282]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:11 standalone sshd[369299]: Accepted publickey for root from 192.168.122.11 port 36910 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:11 standalone sshd[369299]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:11 standalone sshd[369302]: Received disconnect from 192.168.122.11 port 36910:11: disconnected by user
Dec  2 15:27:11 standalone sshd[369302]: Disconnected from user root 192.168.122.11 port 36910
Dec  2 15:27:11 standalone sshd[369299]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:12 standalone sshd[369316]: Accepted publickey for root from 192.168.122.11 port 36926 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:12 standalone sshd[369316]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:12 standalone sshd[369319]: Received disconnect from 192.168.122.11 port 36926:11: disconnected by user
Dec  2 15:27:12 standalone sshd[369319]: Disconnected from user root 192.168.122.11 port 36926
Dec  2 15:27:12 standalone sshd[369316]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:12 standalone sshd[369333]: Accepted publickey for root from 192.168.122.11 port 36932 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:12 standalone sshd[369333]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:12 standalone sshd[369336]: Received disconnect from 192.168.122.11 port 36932:11: disconnected by user
Dec  2 15:27:12 standalone sshd[369336]: Disconnected from user root 192.168.122.11 port 36932
Dec  2 15:27:12 standalone sshd[369333]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:12 standalone sshd[369350]: Accepted publickey for root from 192.168.122.11 port 36942 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:12 standalone sshd[369350]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:12 standalone sshd[369353]: Received disconnect from 192.168.122.11 port 36942:11: disconnected by user
Dec  2 15:27:12 standalone sshd[369353]: Disconnected from user root 192.168.122.11 port 36942
Dec  2 15:27:12 standalone sshd[369350]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:12 standalone sshd[369367]: Accepted publickey for root from 192.168.122.11 port 36958 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:12 standalone sshd[369367]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:12 standalone sshd[369370]: Received disconnect from 192.168.122.11 port 36958:11: disconnected by user
Dec  2 15:27:12 standalone sshd[369370]: Disconnected from user root 192.168.122.11 port 36958
Dec  2 15:27:12 standalone sshd[369367]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:13 standalone sshd[369384]: Accepted publickey for root from 192.168.122.11 port 36968 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:13 standalone sshd[369384]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:13 standalone sshd[369387]: Received disconnect from 192.168.122.11 port 36968:11: disconnected by user
Dec  2 15:27:13 standalone sshd[369387]: Disconnected from user root 192.168.122.11 port 36968
Dec  2 15:27:13 standalone sshd[369384]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:13 standalone sshd[369401]: Accepted publickey for root from 192.168.122.11 port 36984 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:27:13 standalone sshd[369401]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:27:13 standalone sshd[369404]: Received disconnect from 192.168.122.11 port 36984:11: disconnected by user
Dec  2 15:27:13 standalone sshd[369404]: Disconnected from user root 192.168.122.11 port 36984
Dec  2 15:27:13 standalone sshd[369401]: pam_unix(sshd:session): session closed for user root
Dec  2 15:27:37 standalone sudo[369911]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:27:37 standalone sudo[369911]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:27:37 standalone sudo[369911]: pam_unix(sudo:session): session closed for user root
Dec  2 15:27:37 standalone sudo[369926]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:27:37 standalone sudo[369926]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:27:38 standalone sudo[369926]: pam_unix(sudo:session): session closed for user root
Dec  2 15:27:38 standalone sudo[369996]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:27:38 standalone sudo[369996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:27:38 standalone sudo[369996]: pam_unix(sudo:session): session closed for user root
Dec  2 15:28:06 standalone sshd[370421]: Accepted publickey for root from 192.168.122.30 port 40426 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:28:07 standalone sshd[370421]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:28:12 standalone sshd[371335]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:28:18 standalone sshd[370421]: pam_unix(sshd:session): session closed for user root
Dec  2 15:28:31 standalone sshd[371865]: Accepted publickey for root from 192.168.122.30 port 59002 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:28:31 standalone sshd[371865]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:28:38 standalone sudo[372526]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:28:38 standalone sudo[372526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:28:38 standalone sudo[372526]: pam_unix(sudo:session): session closed for user root
Dec  2 15:28:38 standalone sudo[372545]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:28:38 standalone sudo[372545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:28:39 standalone sudo[372545]: pam_unix(sudo:session): session closed for user root
Dec  2 15:28:39 standalone sudo[372663]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:28:39 standalone sudo[372663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:28:39 standalone sudo[372663]: pam_unix(sudo:session): session closed for user root
Dec  2 15:29:30 standalone sshd[377083]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:29:39 standalone sudo[377159]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:29:39 standalone sudo[377159]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:29:39 standalone sudo[377159]: pam_unix(sudo:session): session closed for user root
Dec  2 15:29:39 standalone sudo[377174]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:29:39 standalone sudo[377174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:29:40 standalone sudo[377174]: pam_unix(sudo:session): session closed for user root
Dec  2 15:29:40 standalone sudo[377249]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:29:40 standalone sudo[377249]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:29:40 standalone sudo[377249]: pam_unix(sudo:session): session closed for user root
Dec  2 15:30:40 standalone sudo[379513]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:30:40 standalone sudo[379513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:30:40 standalone sudo[379513]: pam_unix(sudo:session): session closed for user root
Dec  2 15:30:40 standalone sudo[379528]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:30:40 standalone sudo[379528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:30:41 standalone sudo[379528]: pam_unix(sudo:session): session closed for user root
Dec  2 15:30:41 standalone sudo[379652]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:30:41 standalone sudo[379652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:30:41 standalone sudo[379652]: pam_unix(sudo:session): session closed for user root
Dec  2 15:30:43 standalone sudo[186805]: pam_unix(sudo:session): session closed for user root
Dec  2 15:30:48 standalone sshd[379863]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:31:41 standalone sudo[380460]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:31:41 standalone sudo[380460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:31:41 standalone sudo[380460]: pam_unix(sudo:session): session closed for user root
Dec  2 15:31:41 standalone sudo[380475]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:31:41 standalone sudo[380475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:31:42 standalone sudo[380475]: pam_unix(sudo:session): session closed for user root
Dec  2 15:31:42 standalone sudo[380556]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:31:42 standalone sudo[380556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:31:42 standalone sudo[380556]: pam_unix(sudo:session): session closed for user root
Dec  2 15:32:42 standalone sudo[381255]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:32:42 standalone sudo[381255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:32:42 standalone sudo[381255]: pam_unix(sudo:session): session closed for user root
Dec  2 15:32:43 standalone sudo[381283]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:32:43 standalone sudo[381283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:32:43 standalone sudo[381283]: pam_unix(sudo:session): session closed for user root
Dec  2 15:32:43 standalone sudo[381331]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:32:43 standalone sudo[381331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:32:43 standalone sudo[381331]: pam_unix(sudo:session): session closed for user root
Dec  2 15:33:22 standalone sshd[382501]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:33:43 standalone sshd[6]: Received signal 15; terminating.
Dec  2 15:33:43 standalone sudo[383174]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:33:43 standalone sudo[383174]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:33:43 standalone sudo[383174]: pam_unix(sudo:session): session closed for user root
Dec  2 15:33:44 standalone sudo[383202]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:33:44 standalone sudo[383202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:33:44 standalone sudo[383202]: pam_unix(sudo:session): session closed for user root
Dec  2 15:33:44 standalone sudo[383328]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:33:45 standalone sudo[383328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:33:45 standalone sudo[383328]: pam_unix(sudo:session): session closed for user root
Dec  2 15:34:45 standalone sudo[384053]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:34:45 standalone sudo[384053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:34:45 standalone sudo[384053]: pam_unix(sudo:session): session closed for user root
Dec  2 15:34:45 standalone sudo[384068]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:34:45 standalone sudo[384068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:34:45 standalone sudo[384068]: pam_unix(sudo:session): session closed for user root
Dec  2 15:34:46 standalone sudo[384114]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:34:46 standalone sudo[384114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:34:46 standalone sudo[384114]: pam_unix(sudo:session): session closed for user root
Dec  2 15:34:48 standalone sshd[384184]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:35:46 standalone sudo[385172]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:35:46 standalone sudo[385172]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:35:46 standalone sudo[385172]: pam_unix(sudo:session): session closed for user root
Dec  2 15:35:46 standalone sudo[385187]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:35:46 standalone sudo[385187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:35:46 standalone sudo[385187]: pam_unix(sudo:session): session closed for user root
Dec  2 15:35:47 standalone sudo[385256]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:35:47 standalone sudo[385256]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:35:47 standalone sudo[385256]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:47 standalone sudo[386395]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:36:47 standalone sudo[386395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:47 standalone sudo[386395]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:47 standalone sudo[386410]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:36:47 standalone sudo[386410]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:47 standalone sudo[386410]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:47 standalone sudo[386501]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:36:47 standalone sudo[386501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:47 standalone sudo[386501]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:47 standalone sudo[386534]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:36:47 standalone sudo[386534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:49 standalone sudo[386534]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:50 standalone sudo[387053]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:36:50 standalone sudo[387053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:50 standalone sudo[387053]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:50 standalone sudo[387081]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:36:50 standalone sudo[387081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:50 standalone sudo[387081]: pam_unix(sudo:session): session closed for user root
Dec  2 15:36:50 standalone sudo[387198]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:36:50 standalone sudo[387198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:36:50 standalone sudo[387198]: pam_unix(sudo:session): session closed for user root
Dec  2 15:37:11 standalone sshd[389036]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:37:19 standalone sshd[390458]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 15:37:51 standalone sudo[395483]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:37:51 standalone sudo[395483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:37:51 standalone sudo[395483]: pam_unix(sudo:session): session closed for user root
Dec  2 15:37:51 standalone sudo[395512]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:37:51 standalone sudo[395512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:37:51 standalone sudo[395512]: pam_unix(sudo:session): session closed for user root
Dec  2 15:37:51 standalone sudo[395668]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:37:51 standalone sudo[395668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:37:51 standalone sudo[395668]: pam_unix(sudo:session): session closed for user root
Dec  2 15:38:52 standalone sudo[404546]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:38:52 standalone sudo[404546]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:38:52 standalone sudo[404546]: pam_unix(sudo:session): session closed for user root
Dec  2 15:38:52 standalone sudo[404575]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:38:52 standalone sudo[404575]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:38:52 standalone sudo[404575]: pam_unix(sudo:session): session closed for user root
Dec  2 15:38:52 standalone sudo[404762]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:38:52 standalone sudo[404762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:38:52 standalone sudo[404762]: pam_unix(sudo:session): session closed for user root
Dec  2 15:39:18 standalone sshd[371865]: pam_unix(sshd:session): session closed for user root
Dec  2 15:39:43 standalone sshd[408354]: Accepted publickey for root from 192.168.122.30 port 43236 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:39:43 standalone systemd[408358]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:39:43 standalone sshd[408354]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:39:49 standalone sshd[409050]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 15:39:53 standalone sudo[409448]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:39:53 standalone sudo[409448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:39:53 standalone sudo[409448]: pam_unix(sudo:session): session closed for user root
Dec  2 15:39:53 standalone sudo[409472]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:39:53 standalone sudo[409472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:39:53 standalone sudo[409472]: pam_unix(sudo:session): session closed for user root
Dec  2 15:39:53 standalone sudo[409596]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:39:53 standalone sudo[409596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:39:53 standalone sudo[409596]: pam_unix(sudo:session): session closed for user root
Dec  2 15:40:07 standalone sshd[55953]: Received signal 15; terminating.
Dec  2 15:40:07 standalone sshd[410072]: Server listening on 0.0.0.0 port 22.
Dec  2 15:40:07 standalone sshd[410072]: Server listening on :: port 22.
Dec  2 15:40:08 standalone sshd[410072]: Received signal 15; terminating.
Dec  2 15:40:08 standalone sshd[410243]: Server listening on 0.0.0.0 port 22.
Dec  2 15:40:08 standalone sshd[410243]: Server listening on :: port 22.
Dec  2 15:40:54 standalone sudo[410624]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:40:54 standalone sudo[410624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:40:54 standalone sudo[410624]: pam_unix(sudo:session): session closed for user root
Dec  2 15:40:54 standalone sudo[410645]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:40:54 standalone sudo[410645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:40:54 standalone sudo[410645]: pam_unix(sudo:session): session closed for user root
Dec  2 15:40:55 standalone sudo[410712]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:40:55 standalone sudo[410712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:40:55 standalone sudo[410712]: pam_unix(sudo:session): session closed for user root
Dec  2 15:41:08 standalone sshd[411009]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 15:41:41 standalone su[411967]: pam_unix(su:session): session opened for user redis(uid=42460) by (uid=0)
Dec  2 15:41:41 standalone su[411967]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory
Dec  2 15:41:41 standalone su[411967]: pam_unix(su:session): session closed for user redis
Dec  2 15:41:55 standalone sudo[412962]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:41:55 standalone sudo[412962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:41:55 standalone sudo[412962]: pam_unix(sudo:session): session closed for user root
Dec  2 15:41:55 standalone sudo[412996]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:41:55 standalone sudo[412996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:41:55 standalone sudo[412996]: pam_unix(sudo:session): session closed for user root
Dec  2 15:41:55 standalone sudo[413143]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:41:55 standalone sudo[413143]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:41:55 standalone sudo[413143]: pam_unix(sudo:session): session closed for user root
Dec  2 15:42:02 standalone groupmod[413815]: group changed in /etc/group (group hugetlbfs/985, new gid: 42477)
Dec  2 15:42:02 standalone groupmod[413815]: group changed in /etc/passwd (group hugetlbfs/985, new gid: 42477)
Dec  2 15:42:27 standalone sshd[415187]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:42:34 standalone sshd[408354]: pam_unix(sshd:session): session closed for user root
Dec  2 15:42:40 standalone sshd[415978]: Accepted publickey for root from 192.168.122.30 port 50220 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:42:40 standalone sshd[415978]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:42:55 standalone sudo[417201]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:42:55 standalone sudo[417201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:42:55 standalone sudo[417201]: pam_unix(sudo:session): session closed for user root
Dec  2 15:42:56 standalone sudo[417216]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:42:56 standalone sudo[417216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:42:56 standalone sudo[417216]: pam_unix(sudo:session): session closed for user root
Dec  2 15:42:56 standalone sudo[417383]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:42:56 standalone sudo[417383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:42:56 standalone sudo[417383]: pam_unix(sudo:session): session closed for user root
Dec  2 15:43:47 standalone sshd[419107]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:43:56 standalone sudo[419347]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:43:57 standalone sudo[419347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:43:57 standalone sudo[419347]: pam_unix(sudo:session): session closed for user root
Dec  2 15:43:57 standalone sudo[419365]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:43:57 standalone sudo[419365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:43:57 standalone sudo[419365]: pam_unix(sudo:session): session closed for user root
Dec  2 15:43:57 standalone sudo[419500]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:43:57 standalone sudo[419500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:43:57 standalone sudo[419500]: pam_unix(sudo:session): session closed for user root
Dec  2 15:44:11 standalone sshd[415978]: pam_unix(sshd:session): session closed for user root
Dec  2 15:44:18 standalone sshd[420464]: Accepted publickey for root from 192.168.122.30 port 60436 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:44:18 standalone sshd[420464]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:44:57 standalone sudo[422938]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:44:58 standalone sudo[422938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:44:58 standalone sudo[422938]: pam_unix(sudo:session): session closed for user root
Dec  2 15:44:58 standalone sudo[422982]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:44:58 standalone sudo[422982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:44:58 standalone sudo[422982]: pam_unix(sudo:session): session closed for user root
Dec  2 15:44:58 standalone sudo[423162]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:44:58 standalone sudo[423162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:44:58 standalone sudo[423162]: pam_unix(sudo:session): session closed for user root
Dec  2 15:45:13 standalone sshd[424852]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:45:15 standalone sshd[420464]: pam_unix(sshd:session): session closed for user root
Dec  2 15:45:36 standalone sshd[425620]: Accepted publickey for root from 192.168.122.30 port 44236 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:45:36 standalone sshd[425620]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:45:39 standalone sshd[425620]: pam_unix(sshd:session): session closed for user root
Dec  2 15:45:45 standalone sshd[426142]: Accepted publickey for root from 192.168.122.30 port 50994 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:45:45 standalone sshd[426142]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:45:49 standalone sshd[426142]: pam_unix(sshd:session): session closed for user root
Dec  2 15:45:54 standalone sshd[426556]: Accepted publickey for root from 192.168.122.30 port 47244 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:45:54 standalone sshd[426556]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:45:58 standalone sudo[426890]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:45:58 standalone sudo[426890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:45:58 standalone sudo[426890]: pam_unix(sudo:session): session closed for user root
Dec  2 15:45:59 standalone sudo[426906]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:45:59 standalone sudo[426906]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:45:59 standalone sudo[426906]: pam_unix(sudo:session): session closed for user root
Dec  2 15:45:59 standalone sudo[426983]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:45:59 standalone sudo[426983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:45:59 standalone sudo[426983]: pam_unix(sudo:session): session closed for user root
Dec  2 15:45:59 standalone sudo[426998]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks
Dec  2 15:45:59 standalone sudo[426998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:46:00 standalone sudo[426998]: pam_unix(sudo:session): session closed for user root
Dec  2 15:46:00 standalone sudo[427029]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:46:00 standalone sudo[427029]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:46:00 standalone sudo[427029]: pam_unix(sudo:session): session closed for user root
Dec  2 15:46:26 standalone sshd[428970]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:46:39 standalone sshd[426556]: pam_unix(sshd:session): session closed for user root
Dec  2 15:46:46 standalone sshd[429885]: Accepted publickey for root from 192.168.122.30 port 49956 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:46:46 standalone sshd[429885]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:47:00 standalone sudo[431748]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:47:00 standalone sudo[431748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:00 standalone sudo[431748]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:00 standalone sudo[431793]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:47:00 standalone sudo[431793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:01 standalone sudo[431793]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:01 standalone sudo[431927]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:47:01 standalone sudo[431927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:01 standalone sudo[431927]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:01 standalone sudo[431959]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:47:01 standalone sudo[431959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:03 standalone sudo[431959]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:03 standalone sudo[432316]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:47:03 standalone sudo[432316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:03 standalone sudo[432316]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:03 standalone sudo[432335]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:47:03 standalone sudo[432335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:04 standalone sudo[432335]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:04 standalone sudo[432418]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:47:04 standalone sudo[432418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:04 standalone sudo[432418]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:04 standalone sudo[432433]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 15:47:04 standalone sudo[432433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:06 standalone sudo[432433]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:07 standalone sudo[434222]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:47:07 standalone sudo[434222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:47:07 standalone sudo[434222]: pam_unix(sudo:session): session closed for user root
Dec  2 15:47:08 standalone sshd[410243]: Received SIGHUP; restarting.
Dec  2 15:47:08 standalone sshd[410243]: Server listening on 0.0.0.0 port 22.
Dec  2 15:47:08 standalone sshd[410243]: Server listening on :: port 22.
Dec  2 15:47:28 standalone sshd[429885]: pam_unix(sshd:session): session closed for user root
Dec  2 15:47:34 standalone sshd[437210]: Accepted publickey for root from 192.168.122.30 port 44038 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:47:34 standalone sshd[437210]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:47:39 standalone sshd[437722]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:47:42 standalone sshd[437210]: pam_unix(sshd:session): session closed for user root
Dec  2 15:47:48 standalone sshd[438063]: Accepted publickey for root from 192.168.122.30 port 38050 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:47:48 standalone sshd[438063]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:47:55 standalone sshd[438063]: pam_unix(sshd:session): session closed for user root
Dec  2 15:48:00 standalone sshd[438778]: Accepted publickey for root from 192.168.122.30 port 48148 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:48:00 standalone sshd[438778]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:48:07 standalone sudo[439047]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:48:07 standalone sudo[439047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:48:07 standalone sudo[439047]: pam_unix(sudo:session): session closed for user root
Dec  2 15:48:07 standalone sudo[439076]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:48:07 standalone sudo[439076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:48:07 standalone sudo[439076]: pam_unix(sudo:session): session closed for user root
Dec  2 15:48:08 standalone sudo[439200]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:48:08 standalone sudo[439200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:48:08 standalone sudo[439200]: pam_unix(sudo:session): session closed for user root
Dec  2 15:48:15 standalone sshd[438778]: pam_unix(sshd:session): session closed for user root
Dec  2 15:48:21 standalone sshd[439771]: Accepted publickey for root from 192.168.122.30 port 60512 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:48:21 standalone sshd[439771]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:48:39 standalone sshd[439771]: pam_unix(sshd:session): session closed for user root
Dec  2 15:48:44 standalone sshd[441978]: Accepted publickey for root from 192.168.122.30 port 49994 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:48:44 standalone sshd[441978]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:48:48 standalone sshd[441978]: pam_unix(sshd:session): session closed for user root
Dec  2 15:48:54 standalone sshd[442442]: Accepted publickey for root from 192.168.122.30 port 37226 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:48:54 standalone sshd[442442]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:48:55 standalone sshd[442606]: Connection closed by authenticating user root 172.182.195.135 port 61507 [preauth]
Dec  2 15:49:08 standalone sudo[443537]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:49:08 standalone sudo[443537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:49:08 standalone sudo[443537]: pam_unix(sudo:session): session closed for user root
Dec  2 15:49:08 standalone sudo[443552]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:49:08 standalone sudo[443552]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:49:08 standalone sudo[443552]: pam_unix(sudo:session): session closed for user root
Dec  2 15:49:09 standalone sudo[443701]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:49:09 standalone sudo[443701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:49:09 standalone sudo[443701]: pam_unix(sudo:session): session closed for user root
Dec  2 15:49:59 standalone sshd[442442]: pam_unix(sshd:session): session closed for user root
Dec  2 15:50:05 standalone sshd[449448]: Accepted publickey for root from 192.168.122.30 port 58266 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:50:05 standalone sshd[449448]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:50:09 standalone sudo[449844]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:50:09 standalone sudo[449844]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:50:09 standalone sudo[449844]: pam_unix(sudo:session): session closed for user root
Dec  2 15:50:09 standalone sudo[449873]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:50:09 standalone sudo[449873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:50:09 standalone sudo[449873]: pam_unix(sudo:session): session closed for user root
Dec  2 15:50:09 standalone sudo[450057]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:50:09 standalone sudo[450057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:50:09 standalone sudo[450057]: pam_unix(sudo:session): session closed for user root
Dec  2 15:50:14 standalone sshd[450340]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:50:56 standalone sshd[449448]: pam_unix(sshd:session): session closed for user root
Dec  2 15:51:02 standalone sshd[454998]: Accepted publickey for root from 192.168.122.30 port 37006 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:51:02 standalone sshd[454998]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:51:10 standalone sudo[455674]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:51:10 standalone sudo[455674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:51:10 standalone sudo[455674]: pam_unix(sudo:session): session closed for user root
Dec  2 15:51:10 standalone sudo[455692]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:51:10 standalone sudo[455692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:51:10 standalone sudo[455692]: pam_unix(sudo:session): session closed for user root
Dec  2 15:51:10 standalone sudo[455780]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:51:10 standalone sudo[455780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:51:10 standalone sudo[455780]: pam_unix(sudo:session): session closed for user root
Dec  2 15:51:28 standalone sshd[458226]: Connection closed by authenticating user root 172.182.195.135 port 61507 [preauth]
Dec  2 15:51:33 standalone groupadd[458956]: group added to /etc/group: name=libvirt, GID=42473
Dec  2 15:51:33 standalone groupadd[458956]: group added to /etc/gshadow: name=libvirt
Dec  2 15:51:33 standalone groupadd[458956]: new group: name=libvirt, GID=42473
Dec  2 15:51:34 standalone useradd[459053]: new user: name=libvirt, UID=42473, GID=42473, home=/home/libvirt, shell=/sbin/nologin, from=/dev/pts/2
Dec  2 15:52:10 standalone sudo[460843]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:52:10 standalone sudo[460843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:52:11 standalone sudo[460843]: pam_unix(sudo:session): session closed for user root
Dec  2 15:52:11 standalone sudo[460861]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:52:11 standalone sudo[460861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:52:11 standalone sudo[460861]: pam_unix(sudo:session): session closed for user root
Dec  2 15:52:11 standalone sudo[460912]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:52:11 standalone sudo[460912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:52:11 standalone sudo[460912]: pam_unix(sudo:session): session closed for user root
Dec  2 15:52:39 standalone sshd[461086]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 15:52:45 standalone sshd[461096]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 15:53:01 standalone groupadd[461326]: group added to /etc/group: name=clevis, GID=983
Dec  2 15:53:01 standalone groupadd[461326]: group added to /etc/gshadow: name=clevis
Dec  2 15:53:01 standalone groupadd[461326]: new group: name=clevis, GID=983
Dec  2 15:53:01 standalone useradd[461333]: new user: name=clevis, UID=984, GID=983, home=/var/cache/clevis, shell=/usr/sbin/nologin, from=none
Dec  2 15:53:01 standalone usermod[461343]: add 'clevis' to group 'tss'
Dec  2 15:53:01 standalone usermod[461343]: add 'clevis' to shadow group 'tss'
Dec  2 15:53:05 standalone groupadd[461365]: group added to /etc/group: name=dnsmasq, GID=982
Dec  2 15:53:05 standalone groupadd[461365]: group added to /etc/gshadow: name=dnsmasq
Dec  2 15:53:05 standalone groupadd[461365]: new group: name=dnsmasq, GID=982
Dec  2 15:53:05 standalone useradd[461372]: new user: name=dnsmasq, UID=983, GID=982, home=/var/lib/dnsmasq, shell=/usr/sbin/nologin, from=none
Dec  2 15:53:05 standalone polkitd[1039]: Reloading rules
Dec  2 15:53:05 standalone polkitd[1039]: Collecting garbage unconditionally...
Dec  2 15:53:05 standalone polkitd[1039]: Loading rules from directory /etc/polkit-1/rules.d
Dec  2 15:53:05 standalone polkitd[1039]: Loading rules from directory /usr/share/polkit-1/rules.d
Dec  2 15:53:05 standalone polkitd[1039]: Finished loading, compiling and executing 5 rules
Dec  2 15:53:05 standalone polkitd[1039]: Reloading rules
Dec  2 15:53:05 standalone polkitd[1039]: Collecting garbage unconditionally...
Dec  2 15:53:05 standalone polkitd[1039]: Loading rules from directory /etc/polkit-1/rules.d
Dec  2 15:53:05 standalone polkitd[1039]: Loading rules from directory /usr/share/polkit-1/rules.d
Dec  2 15:53:06 standalone polkitd[1039]: Finished loading, compiling and executing 5 rules
Dec  2 15:53:11 standalone sudo[461582]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:53:11 standalone sudo[461582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:53:11 standalone sudo[461582]: pam_unix(sudo:session): session closed for user root
Dec  2 15:53:12 standalone sudo[461600]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:53:12 standalone sudo[461600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:53:12 standalone sudo[461600]: pam_unix(sudo:session): session closed for user root
Dec  2 15:53:12 standalone sudo[461650]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:53:12 standalone sudo[461650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:53:12 standalone sudo[461650]: pam_unix(sudo:session): session closed for user root
Dec  2 15:53:47 standalone groupadd[478623]: group added to /etc/group: name=ceph, GID=167
Dec  2 15:53:47 standalone groupadd[478623]: group added to /etc/gshadow: name=ceph
Dec  2 15:53:47 standalone groupadd[478623]: new group: name=ceph, GID=167
Dec  2 15:53:47 standalone useradd[478629]: new user: name=ceph, UID=167, GID=167, home=/var/lib/ceph, shell=/sbin/nologin, from=none
Dec  2 15:53:55 standalone sshd[481226]: Connection closed by authenticating user root 172.182.195.135 port 61507 [preauth]
Dec  2 15:54:12 standalone sudo[490122]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:54:13 standalone sudo[490122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:54:13 standalone sudo[490122]: pam_unix(sudo:session): session closed for user root
Dec  2 15:54:13 standalone sudo[490141]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:54:13 standalone sudo[490141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:54:13 standalone sudo[490141]: pam_unix(sudo:session): session closed for user root
Dec  2 15:54:13 standalone sudo[490300]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:54:13 standalone sudo[490300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:54:13 standalone sudo[490300]: pam_unix(sudo:session): session closed for user root
Dec  2 15:55:13 standalone sudo[499761]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:55:13 standalone sudo[499761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:55:14 standalone sudo[499761]: pam_unix(sudo:session): session closed for user root
Dec  2 15:55:14 standalone sudo[499810]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:55:14 standalone sudo[499810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:55:14 standalone sudo[499810]: pam_unix(sudo:session): session closed for user root
Dec  2 15:55:14 standalone sudo[499987]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:55:14 standalone sudo[499987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:55:14 standalone sudo[499987]: pam_unix(sudo:session): session closed for user root
Dec  2 15:55:18 standalone polkitd[1039]: Registered Authentication Agent for unix-process:500619:824481 (system bus name :1.3218 [pkttyagent --process 500619 --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8)
Dec  2 15:55:18 standalone polkitd[1039]: Unregistered Authentication Agent for unix-process:500619:824481 (system bus name :1.3218, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8) (disconnected from bus)
Dec  2 15:55:18 standalone polkitd[1039]: Registered Authentication Agent for unix-process:500618:824480 (system bus name :1.3219 [pkttyagent --process 500618 --notify-fd 4 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8)
Dec  2 15:55:18 standalone polkitd[1039]: Unregistered Authentication Agent for unix-process:500618:824480 (system bus name :1.3219, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8) (disconnected from bus)
Dec  2 15:55:19 standalone sshd[500625]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 15:55:20 standalone polkitd[1039]: Registered Authentication Agent for unix-process:500957:824690 (system bus name :1.3220 [pkttyagent --process 500957 --notify-fd 4 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8)
Dec  2 15:55:20 standalone polkitd[1039]: Unregistered Authentication Agent for unix-process:500957:824690 (system bus name :1.3220, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8) (disconnected from bus)
Dec  2 15:55:44 standalone sshd[454998]: pam_unix(sshd:session): session closed for user root
Dec  2 15:55:49 standalone sshd[504786]: Accepted publickey for root from 192.168.122.30 port 33028 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:55:49 standalone sshd[504786]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:56:14 standalone sudo[506435]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:56:14 standalone sudo[506435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:56:14 standalone sudo[506435]: pam_unix(sudo:session): session closed for user root
Dec  2 15:56:14 standalone sudo[506455]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:56:15 standalone sudo[506455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:56:15 standalone sudo[506455]: pam_unix(sudo:session): session closed for user root
Dec  2 15:56:16 standalone sudo[506653]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:56:16 standalone sudo[506653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:56:16 standalone sudo[506653]: pam_unix(sudo:session): session closed for user root
Dec  2 15:56:28 standalone sshd[507955]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 15:57:07 standalone sudo[512912]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 15:57:07 standalone sudo[512912]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 15:57:07 standalone sudo[512912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:57:07 standalone sudo[512912]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:07 standalone sudo[512939]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_copy_cacerts
Dec  2 15:57:07 standalone sudo[512939]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 15:57:07 standalone sudo[512939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:57:07 standalone sudo[512939]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:10 standalone sudo[513351]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 15:57:10 standalone sudo[513351]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 15:57:10 standalone sudo[513351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:57:10 standalone sudo[513351]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:10 standalone sudo[513369]:    root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_copy_cacerts
Dec  2 15:57:10 standalone sudo[513369]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 15:57:10 standalone sudo[513369]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:57:10 standalone sudo[513369]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:16 standalone sudo[514269]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:57:16 standalone sudo[514269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:16 standalone sudo[514269]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:16 standalone sudo[514288]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 15:57:16 standalone sudo[514288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:16 standalone sudo[514288]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:16 standalone sudo[514329]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:57:16 standalone sudo[514329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:16 standalone sudo[514329]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:16 standalone sudo[514347]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 15:57:16 standalone sudo[514347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:18 standalone sudo[514347]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:18 standalone sudo[514544]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:57:18 standalone sudo[514544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:18 standalone sudo[514544]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:18 standalone sudo[514562]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:57:18 standalone sudo[514562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:19 standalone sudo[514562]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:19 standalone sudo[514613]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:57:19 standalone sudo[514613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:57:19 standalone sudo[514613]: pam_unix(sudo:session): session closed for user root
Dec  2 15:57:54 standalone sshd[519925]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 15:58:14 standalone groupadd[521995]: group added to /etc/group: name=nova, GID=42436
Dec  2 15:58:14 standalone groupadd[521995]: group added to /etc/gshadow: name=nova
Dec  2 15:58:14 standalone groupadd[521995]: new group: name=nova, GID=42436
Dec  2 15:58:15 standalone useradd[522110]: new user: name=nova, UID=42436, GID=42436, home=/home/nova, shell=/bin/sh, from=/dev/pts/2
Dec  2 15:58:15 standalone useradd[522110]: add 'nova' to group 'libvirt'
Dec  2 15:58:15 standalone useradd[522110]: add 'nova' to shadow group 'libvirt'
Dec  2 15:58:16 standalone sshd[522134]: Accepted publickey for root from 192.168.122.30 port 46610 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:58:16 standalone sshd[522134]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:58:16 standalone sshd[522137]: Received disconnect from 192.168.122.30 port 46610:11: disconnected by user
Dec  2 15:58:16 standalone sshd[522137]: Disconnected from user root 192.168.122.30 port 46610
Dec  2 15:58:16 standalone sshd[522134]: pam_unix(sshd:session): session closed for user root
Dec  2 15:58:19 standalone sudo[522680]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:58:19 standalone sudo[522680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:58:19 standalone sudo[522680]: pam_unix(sudo:session): session closed for user root
Dec  2 15:58:19 standalone sudo[522715]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:58:19 standalone sudo[522715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:58:20 standalone sudo[522715]: pam_unix(sudo:session): session closed for user root
Dec  2 15:58:20 standalone sudo[522894]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:58:20 standalone sudo[522894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:58:20 standalone sudo[522894]: pam_unix(sudo:session): session closed for user root
Dec  2 15:59:03 standalone sshd[504786]: pam_unix(sshd:session): session closed for user root
Dec  2 15:59:04 standalone sshd[527230]: Connection closed by authenticating user root 172.182.195.135 port 61507 [preauth]
Dec  2 15:59:09 standalone sshd[527306]: Accepted publickey for root from 192.168.122.30 port 36086 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 15:59:09 standalone sshd[527306]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 15:59:20 standalone sudo[528623]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 15:59:20 standalone sudo[528623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:59:20 standalone sudo[528623]: pam_unix(sudo:session): session closed for user root
Dec  2 15:59:21 standalone sudo[528641]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 15:59:21 standalone sudo[528641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:59:21 standalone sudo[528641]: pam_unix(sudo:session): session closed for user root
Dec  2 15:59:21 standalone sudo[528797]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 15:59:21 standalone sudo[528797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 15:59:21 standalone sudo[528797]: pam_unix(sudo:session): session closed for user root
Dec  2 15:59:27 standalone groupadd[529590]: group added to /etc/group: name=ceilometer, GID=42405
Dec  2 15:59:27 standalone groupadd[529590]: group added to /etc/gshadow: name=ceilometer
Dec  2 15:59:27 standalone groupadd[529590]: new group: name=ceilometer, GID=42405
Dec  2 15:59:28 standalone useradd[529705]: new user: name=ceilometer, UID=42405, GID=42405, home=/home/ceilometer, shell=/sbin/nologin, from=/dev/pts/2
Dec  2 15:59:28 standalone useradd[529705]: add 'ceilometer' to group 'libvirt'
Dec  2 15:59:28 standalone useradd[529705]: add 'ceilometer' to shadow group 'libvirt'
Dec  2 15:59:59 standalone sudo[534337]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs
Dec  2 15:59:59 standalone sudo[534337]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 15:59:59 standalone sudo[534337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405)
Dec  2 15:59:59 standalone sudo[534337]: pam_unix(sudo:session): session closed for user root
Dec  2 16:00:00 standalone sudo[534354]: ceilometer : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_copy_cacerts
Dec  2 16:00:00 standalone sudo[534354]: pam_systemd(sudo:session): Failed to connect to system bus: No such file or directory
Dec  2 16:00:00 standalone sudo[534354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42405)
Dec  2 16:00:00 standalone sudo[534354]: pam_unix(sudo:session): session closed for user root
Dec  2 16:03:16 standalone sshd[527306]: pam_unix(sshd:session): session closed for user root
Dec  2 16:03:22 standalone sshd[546941]: Accepted publickey for root from 192.168.122.30 port 32880 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:03:22 standalone sshd[546941]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:03:30 standalone sudo[548133]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:03:30 standalone sudo[548133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:03:30 standalone sudo[548133]: pam_unix(sudo:session): session closed for user root
Dec  2 16:03:30 standalone sudo[548171]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:03:30 standalone sudo[548171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:03:32 standalone sudo[548171]: pam_unix(sudo:session): session closed for user root
Dec  2 16:03:32 standalone sudo[548654]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:03:32 standalone sudo[548654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:03:32 standalone sudo[548654]: pam_unix(sudo:session): session closed for user root
Dec  2 16:04:06 standalone sshd[551238]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 16:04:32 standalone sudo[551395]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:04:32 standalone sudo[551395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:04:32 standalone sudo[551395]: pam_unix(sudo:session): session closed for user root
Dec  2 16:04:32 standalone sudo[551413]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:04:32 standalone sudo[551413]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:04:35 standalone sudo[551413]: pam_unix(sudo:session): session closed for user root
Dec  2 16:04:35 standalone sudo[551463]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:04:35 standalone sudo[551463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:04:35 standalone sudo[551463]: pam_unix(sudo:session): session closed for user root
Dec  2 16:05:21 standalone sshd[551991]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:05:35 standalone sudo[552013]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:05:35 standalone sudo[552013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:05:35 standalone sudo[552013]: pam_unix(sudo:session): session closed for user root
Dec  2 16:05:35 standalone sudo[552031]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:05:35 standalone sudo[552031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:05:37 standalone sudo[552031]: pam_unix(sudo:session): session closed for user root
Dec  2 16:05:37 standalone sudo[552082]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:05:37 standalone sudo[552082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:05:37 standalone sudo[552082]: pam_unix(sudo:session): session closed for user root
Dec  2 16:06:37 standalone sudo[552638]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:06:37 standalone sudo[552638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:06:37 standalone sudo[552638]: pam_unix(sudo:session): session closed for user root
Dec  2 16:06:38 standalone sudo[552656]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:06:38 standalone sudo[552656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:06:39 standalone sudo[552656]: pam_unix(sudo:session): session closed for user root
Dec  2 16:06:39 standalone sudo[552705]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:06:39 standalone sudo[552705]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:06:39 standalone sudo[552705]: pam_unix(sudo:session): session closed for user root
Dec  2 16:06:45 standalone sshd[552796]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:07:39 standalone sudo[553508]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:07:39 standalone sudo[553508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:07:39 standalone sudo[553508]: pam_unix(sudo:session): session closed for user root
Dec  2 16:07:39 standalone sudo[553526]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 check-host
Dec  2 16:07:39 standalone sudo[553526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:07:41 standalone sudo[553526]: pam_unix(sudo:session): session closed for user root
Dec  2 16:07:41 standalone sudo[553563]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:07:41 standalone sudo[553563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:07:41 standalone sudo[553563]: pam_unix(sudo:session): session closed for user root
Dec  2 16:07:41 standalone sudo[553581]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ls
Dec  2 16:07:41 standalone sudo[553581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:08:03 standalone sshd[554608]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 16:08:14 standalone sshd[546941]: pam_unix(sshd:session): session closed for user root
Dec  2 16:08:20 standalone sshd[554800]: Accepted publickey for root from 192.168.122.30 port 47628 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:08:20 standalone sshd[554800]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:08:54 standalone sshd[559379]: error: kex_exchange_identification: Connection closed by remote host
Dec  2 16:08:54 standalone sshd[559379]: Connection closed by 1.94.123.200 port 41332
Dec  2 16:09:10 standalone sshd[560632]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:09:50 standalone sshd[560920]: Connection reset by 198.235.24.57 port 58618 [preauth]
Dec  2 16:10:32 standalone sshd[561338]: Connection closed by authenticating user root 172.182.195.135 port 61508 [preauth]
Dec  2 16:10:54 standalone sshd[559531]: fatal: Timeout before authentication for 1.94.123.200 port 53366
Dec  2 16:11:04 standalone sshd[561735]: Received disconnect from 193.46.255.159 port 54486:11:  [preauth]
Dec  2 16:11:04 standalone sshd[561735]: Disconnected from authenticating user root 193.46.255.159 port 54486 [preauth]
Dec  2 16:11:13 standalone sshd[561861]: Connection closed by authenticating user root 172.174.223.104 port 15424 [preauth]
Dec  2 16:11:35 standalone sshd[554800]: pam_unix(sshd:session): session closed for user root
Dec  2 16:11:48 standalone sshd[563097]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 16:11:58 standalone sshd[563343]: Accepted publickey for root from 192.168.122.30 port 33984 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:11:58 standalone systemd[563347]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:11:59 standalone sshd[563343]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:13:02 standalone sshd[570395]: Connection closed by authenticating user root 172.182.195.135 port 61504 [preauth]
Dec  2 16:13:53 standalone sudo[553581]: pam_unix(sudo:session): session closed for user root
Dec  2 16:13:53 standalone sudo[570992]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:13:54 standalone sudo[570992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:13:54 standalone sudo[570992]: pam_unix(sudo:session): session closed for user root
Dec  2 16:13:54 standalone sudo[571013]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:13:54 standalone sudo[571013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:13:57 standalone sudo[571013]: pam_unix(sudo:session): session closed for user root
Dec  2 16:13:57 standalone sudo[571115]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:13:57 standalone sudo[571115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:13:57 standalone sudo[571115]: pam_unix(sudo:session): session closed for user root
Dec  2 16:14:16 standalone sshd[571263]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 16:14:23 standalone sshd[571363]: Connection reset by 152.32.240.168 port 46728 [preauth]
Dec  2 16:14:58 standalone sudo[571590]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:14:58 standalone sudo[571590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:14:58 standalone sudo[571590]: pam_unix(sudo:session): session closed for user root
Dec  2 16:14:58 standalone sudo[571615]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:14:58 standalone sudo[571615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:15:01 standalone sudo[571615]: pam_unix(sudo:session): session closed for user root
Dec  2 16:15:02 standalone sudo[571747]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:15:02 standalone sudo[571747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:15:02 standalone sudo[571747]: pam_unix(sudo:session): session closed for user root
Dec  2 16:15:38 standalone sshd[573288]: Connection closed by authenticating user root 172.182.195.135 port 61508 [preauth]
Dec  2 16:16:02 standalone sudo[575674]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:16:02 standalone sudo[575674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:16:02 standalone sudo[575674]: pam_unix(sudo:session): session closed for user root
Dec  2 16:16:02 standalone sudo[575692]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:16:02 standalone sudo[575692]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:16:03 standalone sudo[575692]: pam_unix(sudo:session): session closed for user root
Dec  2 16:16:03 standalone sudo[575878]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:16:03 standalone sudo[575878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:16:03 standalone sudo[575878]: pam_unix(sudo:session): session closed for user root
Dec  2 16:16:03 standalone sudo[575896]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 list-networks
Dec  2 16:16:03 standalone sudo[575896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:16:05 standalone sudo[575896]: pam_unix(sudo:session): session closed for user root
Dec  2 16:16:05 standalone sudo[576467]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:16:05 standalone sudo[576467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:16:05 standalone sudo[576467]: pam_unix(sudo:session): session closed for user root
Dec  2 16:16:34 standalone sshd[579774]: Accepted publickey for root from 192.168.122.30 port 46388 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:16:34 standalone sshd[579774]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:16:34 standalone sshd[579778]: Received disconnect from 192.168.122.30 port 46388:11: disconnected by user
Dec  2 16:16:34 standalone sshd[579778]: Disconnected from user root 192.168.122.30 port 46388
Dec  2 16:16:34 standalone sshd[579774]: pam_unix(sshd:session): session closed for user root
Dec  2 16:16:51 standalone sshd[582065]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:17:05 standalone sudo[582424]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:17:06 standalone sudo[582424]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:17:06 standalone sudo[582424]: pam_unix(sudo:session): session closed for user root
Dec  2 16:17:06 standalone sudo[582442]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:17:06 standalone sudo[582442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:17:08 standalone sudo[582442]: pam_unix(sudo:session): session closed for user root
Dec  2 16:17:08 standalone sudo[582520]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:17:08 standalone sudo[582520]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:17:08 standalone sudo[582520]: pam_unix(sudo:session): session closed for user root
Dec  2 16:17:08 standalone sudo[582538]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --image registry.redhat.io/rhceph/rhceph-7-rhel9:latest --timeout 895 ceph-volume --fsid d6a9b20e-737e-5747-8a71-5fd7c568411c -- inventory --format=json-pretty --filter-for-batch
Dec  2 16:17:08 standalone sudo[582538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:18:06 standalone sshd[584860]: Connection closed by authenticating user root 172.182.195.135 port 61507 [preauth]
Dec  2 16:18:06 standalone sshd[563343]: pam_unix(sshd:session): session closed for user root
Dec  2 16:19:20 standalone sshd[585537]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 16:20:37 standalone sshd[586357]: Connection closed by authenticating user root 172.182.195.135 port 61506 [preauth]
Dec  2 16:21:16 standalone sudo[582538]: pam_unix(sudo:session): session closed for user root
Dec  2 16:21:16 standalone sudo[588511]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:21:16 standalone sudo[588511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:21:16 standalone sudo[588511]: pam_unix(sudo:session): session closed for user root
Dec  2 16:21:29 standalone sshd[588627]: Accepted publickey for zuul from 38.102.83.114 port 34556 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:21:29 standalone systemd[588630]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 16:21:29 standalone sshd[588627]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 16:21:29 standalone sudo[588662]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-osoomtklosokptwdctnaozthkttsuwxn ; /usr/bin/python3
Dec  2 16:21:29 standalone sudo[588662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 16:21:30 standalone sudo[588662]: pam_unix(sudo:session): session closed for user root
Dec  2 16:21:36 standalone sshd[588627]: pam_unix(sshd:session): session closed for user zuul
Dec  2 16:21:37 standalone sshd[588699]: Accepted publickey for zuul from 38.102.83.114 port 52320 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:21:37 standalone sshd[588699]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0)
Dec  2 16:21:37 standalone sudo[588719]:    zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dvvwdhbmbkiyesatlkfmorpqlkjkojaz ; /usr/bin/python3
Dec  2 16:21:37 standalone sudo[588719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
Dec  2 16:21:37 standalone sudo[588719]: pam_unix(sudo:session): session closed for user root
Dec  2 16:21:41 standalone sshd[588699]: pam_unix(sshd:session): session closed for user zuul
Dec  2 16:21:47 standalone sshd[588884]: Accepted publickey for root from 192.168.122.11 port 32850 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:21:48 standalone systemd[588888]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:21:48 standalone sshd[588884]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:21:49 standalone sshd[588903]: Received disconnect from 192.168.122.11 port 32850:11: disconnected by user
Dec  2 16:21:49 standalone sshd[588903]: Disconnected from user root 192.168.122.11 port 32850
Dec  2 16:21:49 standalone sshd[588884]: pam_unix(sshd:session): session closed for user root
Dec  2 16:21:50 standalone sshd[588940]: Accepted publickey for root from 192.168.122.11 port 32862 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:21:50 standalone sshd[588940]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:21:50 standalone sshd[588943]: Received disconnect from 192.168.122.11 port 32862:11: disconnected by user
Dec  2 16:21:50 standalone sshd[588943]: Disconnected from user root 192.168.122.11 port 32862
Dec  2 16:21:50 standalone sshd[588940]: pam_unix(sshd:session): session closed for user root
Dec  2 16:21:51 standalone sshd[588960]: Accepted publickey for root from 192.168.122.11 port 32866 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:21:51 standalone sshd[588960]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:21:51 standalone sshd[588963]: Received disconnect from 192.168.122.11 port 32866:11: disconnected by user
Dec  2 16:21:51 standalone sshd[588963]: Disconnected from user root 192.168.122.11 port 32866
Dec  2 16:21:51 standalone sshd[588960]: pam_unix(sshd:session): session closed for user root
Dec  2 16:21:52 standalone sshd[588980]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:22:46 standalone sshd[589623]: Accepted publickey for root from 192.168.122.10 port 38184 ssh2: RSA SHA256:urqdLCSQL2wfunrq+EzjCqC73QSkviB++VKK+c5RFxE
Dec  2 16:22:46 standalone systemd[589627]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:22:46 standalone sshd[589623]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:22:46 standalone sudo[589643]:    root : PWD=/root ; USER=root ; COMMAND=/bin/bash -c rm -rf /var/tmp/sos-osp && mkdir /var/tmp/sos-osp && sos report --batch --all-logs --tmp-dir=/var/tmp/sos-osp  -p container,openstack_edpm,system,storage,virt
Dec  2 16:22:46 standalone sudo[589643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Dec  2 16:23:08 standalone sshd[589861]: Connection closed by authenticating user root 172.182.195.135 port 61505 [preauth]
Dec  2 16:23:21 standalone sudo[589956]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/which python3
Dec  2 16:23:21 standalone sudo[589956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:23:21 standalone sudo[589956]: pam_unix(sudo:session): session closed for user root
Dec  2 16:23:21 standalone sudo[589978]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/python3 /var/lib/ceph/d6a9b20e-737e-5747-8a71-5fd7c568411c/cephadm.a31fbded8455ec58c0f5dde8c3d5c4a1f59de5789b672b4f3ea9cd8d29a0d1c3 --timeout 895 gather-facts
Dec  2 16:23:21 standalone sudo[589978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:23:24 standalone sudo[589978]: pam_unix(sudo:session): session closed for user root
Dec  2 16:23:24 standalone sudo[590060]: ceph-admin : PWD=/home/ceph-admin ; USER=root ; COMMAND=/bin/ls /etc/sysctl.d
Dec  2 16:23:24 standalone sudo[590060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1002)
Dec  2 16:23:24 standalone sudo[590060]: pam_unix(sudo:session): session closed for user root
