Nov 23 01:41:08 localhost polkitd[1037]: Loading rules from directory /etc/polkit-1/rules.d Nov 23 01:41:08 localhost polkitd[1037]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 23 01:41:08 localhost polkitd[1037]: Finished loading, compiling and executing 4 rules Nov 23 01:41:08 localhost polkitd[1037]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 23 01:41:10 localhost useradd[1120]: new group: name=cloud-user, GID=1001 Nov 23 01:41:10 localhost useradd[1120]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Nov 23 01:41:10 localhost useradd[1120]: add 'cloud-user' to group 'adm' Nov 23 01:41:10 localhost useradd[1120]: add 'cloud-user' to group 'systemd-journal' Nov 23 01:41:10 localhost useradd[1120]: add 'cloud-user' to shadow group 'adm' Nov 23 01:41:10 localhost useradd[1120]: add 'cloud-user' to shadow group 'systemd-journal' Nov 23 01:41:11 localhost sshd[1134]: Server listening on 0.0.0.0 port 22. Nov 23 01:41:11 localhost sshd[1134]: Server listening on :: port 22. Nov 23 01:41:11 localhost sshd[1559]: Connection reset by 38.102.83.114 port 53460 [preauth] Nov 23 01:41:11 localhost sshd[1575]: Unable to negotiate with 38.102.83.114 port 53464: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Nov 23 01:41:11 localhost sshd[1601]: Unable to negotiate with 38.102.83.114 port 53488: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Nov 23 01:41:11 localhost sshd[1614]: Unable to negotiate with 38.102.83.114 port 53502: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Nov 23 01:41:12 localhost sshd[1626]: Connection reset by 38.102.83.114 port 53512 [preauth] Nov 23 01:41:12 localhost sshd[1588]: Connection closed by 38.102.83.114 port 53480 [preauth] Nov 23 01:41:12 localhost sshd[1651]: fatal: mm_answer_sign: sign: error in libcrypto Nov 23 01:41:12 localhost sshd[1664]: Unable to negotiate with 38.102.83.114 port 53542: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Nov 23 01:41:12 localhost sshd[1639]: Connection closed by 38.102.83.114 port 53520 [preauth] Nov 23 01:41:37 localhost sshd[4174]: Accepted publickey for zuul from 38.102.83.114 port 55300 ssh2: RSA SHA256:zhs3MiW0JhxzckYcMHQES8SMYHj1iGcomnyzmbiwor8 Nov 23 01:41:37 localhost systemd[4178]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:41:37 localhost sshd[4174]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:42:18 localhost sudo[4779]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eysgxazbopqrcsbjwrpmtrerhnoitjct ; /usr/bin/python3 Nov 23 01:42:18 localhost sudo[4779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:18 localhost sudo[4779]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:19 localhost sudo[4827]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yzbrfupribysosrhlxwpqjjxemzjwwtm ; /usr/bin/python3 Nov 23 01:42:19 localhost sudo[4827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:20 localhost sudo[4827]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:20 localhost sudo[4870]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zgbrqxdgeouhpjihubckbywlmwizuzqx ; /usr/bin/python3 Nov 23 01:42:20 localhost sudo[4870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:20 localhost sudo[4870]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:36 localhost sudo[5265]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xljtoobfnzorxrdaamabqwemucaufruh ; /usr/bin/python3 Nov 23 01:42:36 localhost sudo[5265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:37 localhost sudo[5265]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:38 localhost sudo[5286]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-siwnqkmyxfsdjgdqueruyzjxslxcivmn ; /usr/bin/python3 Nov 23 01:42:38 localhost sudo[5286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:38 localhost sudo[5286]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:43 localhost sudo[5536]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zfjzlpxgqkipgvlyhlnjevihnzaokivf ; /usr/bin/python3 Nov 23 01:42:43 localhost sudo[5536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:43 localhost sudo[5536]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:43 localhost sudo[5579]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xvecmxqsphvezsnuyjswwtwcgigtlrqg ; /usr/bin/python3 Nov 23 01:42:43 localhost sudo[5579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:43 localhost sudo[5579]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:46 localhost sudo[5673]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nruqfpnonxjlxhepddljjetpkmkaswwl ; /usr/bin/python3 Nov 23 01:42:46 localhost sudo[5673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:46 localhost sudo[5673]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:46 localhost sudo[5716]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ujgsdgzrpsxcmdnnxmrszaecznpbhtgz ; /usr/bin/python3 Nov 23 01:42:46 localhost sudo[5716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:46 localhost sudo[5716]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:47 localhost sudo[5747]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ewvyztvrlmdvrugpccoioszkugqzpjyt ; /usr/bin/python3 Nov 23 01:42:47 localhost sudo[5747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:42:48 localhost sudo[5747]: pam_unix(sudo:session): session closed for user root Nov 23 01:42:49 localhost sshd[5754]: Invalid user test from 80.94.95.116 port 61292 Nov 23 01:42:49 localhost sshd[5754]: Connection closed by invalid user test 80.94.95.116 port 61292 [preauth] Nov 23 01:43:10 localhost sudo[5804]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rewyzgycmqgdbnlnkvvasgcabryfxoyk ; /usr/bin/python3 Nov 23 01:43:10 localhost sudo[5804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:43:11 localhost sudo[5804]: pam_unix(sudo:session): session closed for user root Nov 23 01:43:47 localhost sshd[5807]: Received disconnect from 222.98.122.37 port 56484:11: Bye Bye [preauth] Nov 23 01:43:47 localhost sshd[5807]: Disconnected from authenticating user root 222.98.122.37 port 56484 [preauth] Nov 23 01:43:55 localhost sshd[5810]: Invalid user anik from 154.91.170.52 port 42580 Nov 23 01:43:55 localhost sshd[5810]: Received disconnect from 154.91.170.52 port 42580:11: Bye Bye [preauth] Nov 23 01:43:55 localhost sshd[5810]: Disconnected from invalid user anik 154.91.170.52 port 42580 [preauth] Nov 23 01:44:11 localhost sshd[4189]: Received disconnect from 38.102.83.114 port 55300:11: disconnected by user Nov 23 01:44:11 localhost sshd[4189]: Disconnected from user zuul 38.102.83.114 port 55300 Nov 23 01:44:11 localhost sshd[4174]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:45:08 localhost sshd[5814]: Connection closed by 115.151.72.155 port 57796 [preauth] Nov 23 01:45:10 localhost sshd[5818]: Invalid user swadmin from 122.35.192.61 port 52224 Nov 23 01:45:11 localhost sshd[5818]: Received disconnect from 122.35.192.61 port 52224:11: Bye Bye [preauth] Nov 23 01:45:11 localhost sshd[5818]: Disconnected from invalid user swadmin 122.35.192.61 port 52224 [preauth] Nov 23 01:46:25 localhost sshd[5821]: Received disconnect from 4.194.4.255 port 44140:11: Bye Bye [preauth] Nov 23 01:46:25 localhost sshd[5821]: Disconnected from authenticating user root 4.194.4.255 port 44140 [preauth] Nov 23 01:47:00 localhost sshd[5824]: Invalid user zu from 197.158.254.18 port 48978 Nov 23 01:47:01 localhost sshd[5824]: Received disconnect from 197.158.254.18 port 48978:11: Bye Bye [preauth] Nov 23 01:47:01 localhost sshd[5824]: Disconnected from invalid user zu 197.158.254.18 port 48978 [preauth] Nov 23 01:47:02 localhost sshd[5827]: Invalid user gui from 200.89.178.151 port 47359 Nov 23 01:47:02 localhost sshd[5827]: Received disconnect from 200.89.178.151 port 47359:11: Bye Bye [preauth] Nov 23 01:47:02 localhost sshd[5827]: Disconnected from invalid user gui 200.89.178.151 port 47359 [preauth] Nov 23 01:47:18 localhost sshd[5829]: Invalid user ntadmin from 154.91.170.52 port 35470 Nov 23 01:47:18 localhost sshd[5829]: Received disconnect from 154.91.170.52 port 35470:11: Bye Bye [preauth] Nov 23 01:47:18 localhost sshd[5829]: Disconnected from invalid user ntadmin 154.91.170.52 port 35470 [preauth] Nov 23 01:47:29 localhost sshd[5831]: Received disconnect from 115.31.151.36 port 41148:11: Bye Bye [preauth] Nov 23 01:47:29 localhost sshd[5831]: Disconnected from authenticating user root 115.31.151.36 port 41148 [preauth] Nov 23 01:47:35 localhost sshd[5836]: Accepted publickey for zuul from 38.102.83.114 port 41992 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 01:47:35 localhost sshd[5836]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:47:43 localhost sshd[5856]: Invalid user admin from 222.98.122.37 port 54712 Nov 23 01:47:43 localhost sshd[5856]: Received disconnect from 222.98.122.37 port 54712:11: Bye Bye [preauth] Nov 23 01:47:43 localhost sshd[5856]: Disconnected from invalid user admin 222.98.122.37 port 54712 [preauth] Nov 23 01:47:49 localhost sudo[5903]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffjcndtxixhdkefgpijvxdtuczydbrnt ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 23 01:47:49 localhost sudo[5903]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:47:49 localhost sshd[5820]: fatal: Timeout before authentication for 120.193.249.102 port 36574 Nov 23 01:47:49 localhost sudo[5903]: pam_unix(sudo:session): session closed for user root Nov 23 01:47:49 localhost sudo[5946]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-awsdassfqrpqzicnvajmfwfddekmjeph ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 23 01:47:49 localhost sudo[5946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:47:49 localhost sudo[5946]: pam_unix(sudo:session): session closed for user root Nov 23 01:47:50 localhost sudo[5976]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oxlfqfscqtuwljfakmohaaieriktetli ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 23 01:47:50 localhost sudo[5976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:47:50 localhost sudo[5976]: pam_unix(sudo:session): session closed for user root Nov 23 01:48:18 localhost sshd[6063]: Received disconnect from 122.35.192.61 port 45918:11: Bye Bye [preauth] Nov 23 01:48:18 localhost sshd[6063]: Disconnected from authenticating user root 122.35.192.61 port 45918 [preauth] Nov 23 01:48:31 localhost sshd[6067]: Invalid user p from 154.91.170.52 port 49374 Nov 23 01:48:31 localhost sshd[6067]: Received disconnect from 154.91.170.52 port 49374:11: Bye Bye [preauth] Nov 23 01:48:31 localhost sshd[6067]: Disconnected from invalid user p 154.91.170.52 port 49374 [preauth] Nov 23 01:48:45 localhost sshd[6081]: Received disconnect from 200.89.178.151 port 24306:11: Bye Bye [preauth] Nov 23 01:48:45 localhost sshd[6081]: Disconnected from authenticating user root 200.89.178.151 port 24306 [preauth] Nov 23 01:48:47 localhost sudo[6128]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qpwvrzmiikirenekdmyikgtkpwnkxwlp ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 23 01:48:47 localhost sudo[6128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:48:47 localhost sudo[6128]: pam_unix(sudo:session): session closed for user root Nov 23 01:48:47 localhost sudo[6171]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wdnaaxxhyjpbpooweckrkrvcbjpfcdzr ; OS_CLOUD=vexxhost /usr/bin/python3 Nov 23 01:48:47 localhost sudo[6171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:48:47 localhost sudo[6171]: pam_unix(sudo:session): session closed for user root Nov 23 01:48:49 localhost sshd[5836]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:49:20 localhost sshd[6188]: Received disconnect from 222.98.122.37 port 54362:11: Bye Bye [preauth] Nov 23 01:49:20 localhost sshd[6188]: Disconnected from authenticating user root 222.98.122.37 port 54362 [preauth] Nov 23 01:49:21 localhost sshd[6190]: Invalid user deepak from 115.31.151.36 port 46990 Nov 23 01:49:22 localhost sshd[6190]: Received disconnect from 115.31.151.36 port 46990:11: Bye Bye [preauth] Nov 23 01:49:22 localhost sshd[6190]: Disconnected from invalid user deepak 115.31.151.36 port 46990 [preauth] Nov 23 01:49:39 localhost sshd[6192]: Received disconnect from 197.158.254.18 port 59376:11: Bye Bye [preauth] Nov 23 01:49:39 localhost sshd[6192]: Disconnected from authenticating user root 197.158.254.18 port 59376 [preauth] Nov 23 01:49:55 localhost sshd[6195]: Received disconnect from 122.35.192.61 port 35540:11: Bye Bye [preauth] Nov 23 01:49:55 localhost sshd[6195]: Disconnected from authenticating user root 122.35.192.61 port 35540 [preauth] Nov 23 01:50:03 localhost sshd[6197]: Invalid user vladimir from 4.194.4.255 port 57498 Nov 23 01:50:03 localhost sshd[6197]: Received disconnect from 4.194.4.255 port 57498:11: Bye Bye [preauth] Nov 23 01:50:03 localhost sshd[6197]: Disconnected from invalid user vladimir 4.194.4.255 port 57498 [preauth] Nov 23 01:50:19 localhost sshd[6199]: Invalid user admin from 200.89.178.151 port 53988 Nov 23 01:50:19 localhost sshd[6199]: Received disconnect from 200.89.178.151 port 53988:11: Bye Bye [preauth] Nov 23 01:50:19 localhost sshd[6199]: Disconnected from invalid user admin 200.89.178.151 port 53988 [preauth] Nov 23 01:50:36 localhost sshd[6201]: Invalid user zu from 115.31.151.36 port 47170 Nov 23 01:50:36 localhost sshd[6201]: Received disconnect from 115.31.151.36 port 47170:11: Bye Bye [preauth] Nov 23 01:50:36 localhost sshd[6201]: Disconnected from invalid user zu 115.31.151.36 port 47170 [preauth] Nov 23 01:50:38 localhost sshd[6203]: Invalid user ftpuser from 222.98.122.37 port 53354 Nov 23 01:50:39 localhost sshd[6203]: Received disconnect from 222.98.122.37 port 53354:11: Bye Bye [preauth] Nov 23 01:50:39 localhost sshd[6203]: Disconnected from invalid user ftpuser 222.98.122.37 port 53354 [preauth] Nov 23 01:50:43 localhost sshd[6205]: Received disconnect from 154.91.170.52 port 56388:11: Bye Bye [preauth] Nov 23 01:50:43 localhost sshd[6205]: Disconnected from authenticating user root 154.91.170.52 port 56388 [preauth] Nov 23 01:51:24 localhost sshd[6207]: Invalid user teamspeak from 4.194.4.255 port 38816 Nov 23 01:51:24 localhost sshd[6209]: Invalid user system from 122.35.192.61 port 35478 Nov 23 01:51:25 localhost sshd[6209]: Received disconnect from 122.35.192.61 port 35478:11: Bye Bye [preauth] Nov 23 01:51:25 localhost sshd[6209]: Disconnected from invalid user system 122.35.192.61 port 35478 [preauth] Nov 23 01:51:25 localhost sshd[6207]: Received disconnect from 4.194.4.255 port 38816:11: Bye Bye [preauth] Nov 23 01:51:25 localhost sshd[6207]: Disconnected from invalid user teamspeak 4.194.4.255 port 38816 [preauth] Nov 23 01:51:48 localhost sshd[6211]: Received disconnect from 200.89.178.151 port 28673:11: Bye Bye [preauth] Nov 23 01:51:48 localhost sshd[6211]: Disconnected from authenticating user root 200.89.178.151 port 28673 [preauth] Nov 23 01:51:51 localhost sshd[6194]: fatal: Timeout before authentication for 14.103.113.53 port 44774 Nov 23 01:51:55 localhost sshd[6213]: Received disconnect from 115.31.151.36 port 34624:11: Bye Bye [preauth] Nov 23 01:51:55 localhost sshd[6213]: Disconnected from authenticating user root 115.31.151.36 port 34624 [preauth] Nov 23 01:51:55 localhost sshd[6215]: Invalid user gui from 197.158.254.18 port 34050 Nov 23 01:51:56 localhost sshd[6215]: Received disconnect from 197.158.254.18 port 34050:11: Bye Bye [preauth] Nov 23 01:51:56 localhost sshd[6215]: Disconnected from invalid user gui 197.158.254.18 port 34050 [preauth] Nov 23 01:51:58 localhost sshd[6217]: Received disconnect from 222.98.122.37 port 52732:11: Bye Bye [preauth] Nov 23 01:51:58 localhost sshd[6217]: Disconnected from authenticating user root 222.98.122.37 port 52732 [preauth] Nov 23 01:52:00 localhost sshd[6219]: Received disconnect from 154.91.170.52 port 34592:11: Bye Bye [preauth] Nov 23 01:52:00 localhost sshd[6219]: Disconnected from authenticating user root 154.91.170.52 port 34592 [preauth] Nov 23 01:52:49 localhost sshd[6222]: Invalid user sam from 4.194.4.255 port 50492 Nov 23 01:52:49 localhost sshd[6222]: Received disconnect from 4.194.4.255 port 50492:11: Bye Bye [preauth] Nov 23 01:52:49 localhost sshd[6222]: Disconnected from invalid user sam 4.194.4.255 port 50492 [preauth] Nov 23 01:53:00 localhost sshd[6224]: Invalid user info from 122.35.192.61 port 36736 Nov 23 01:53:00 localhost sshd[6224]: Received disconnect from 122.35.192.61 port 36736:11: Bye Bye [preauth] Nov 23 01:53:00 localhost sshd[6224]: Disconnected from invalid user info 122.35.192.61 port 36736 [preauth] Nov 23 01:53:08 localhost sshd[6226]: Invalid user postgres from 80.94.95.116 port 19464 Nov 23 01:53:08 localhost sshd[6226]: Connection closed by invalid user postgres 80.94.95.116 port 19464 [preauth] Nov 23 01:53:10 localhost sshd[6228]: Invalid user admin from 115.31.151.36 port 40898 Nov 23 01:53:10 localhost sshd[6228]: Received disconnect from 115.31.151.36 port 40898:11: Bye Bye [preauth] Nov 23 01:53:10 localhost sshd[6228]: Disconnected from invalid user admin 115.31.151.36 port 40898 [preauth] Nov 23 01:53:15 localhost sshd[6230]: Invalid user p from 222.98.122.37 port 52420 Nov 23 01:53:15 localhost sshd[6232]: Invalid user vladimir from 200.89.178.151 port 58351 Nov 23 01:53:15 localhost sshd[6230]: Received disconnect from 222.98.122.37 port 52420:11: Bye Bye [preauth] Nov 23 01:53:15 localhost sshd[6230]: Disconnected from invalid user p 222.98.122.37 port 52420 [preauth] Nov 23 01:53:15 localhost sshd[6232]: Received disconnect from 200.89.178.151 port 58351:11: Bye Bye [preauth] Nov 23 01:53:15 localhost sshd[6232]: Disconnected from invalid user vladimir 200.89.178.151 port 58351 [preauth] Nov 23 01:53:25 localhost sshd[6235]: Received disconnect from 154.91.170.52 port 54584:11: Bye Bye [preauth] Nov 23 01:53:25 localhost sshd[6235]: Disconnected from authenticating user root 154.91.170.52 port 54584 [preauth] Nov 23 01:53:51 localhost sshd[6237]: Invalid user react from 197.158.254.18 port 36932 Nov 23 01:53:51 localhost sshd[6237]: Received disconnect from 197.158.254.18 port 36932:11: Bye Bye [preauth] Nov 23 01:53:51 localhost sshd[6237]: Disconnected from invalid user react 197.158.254.18 port 36932 [preauth] Nov 23 01:54:12 localhost sshd[6239]: Received disconnect from 4.194.4.255 port 53128:11: Bye Bye [preauth] Nov 23 01:54:12 localhost sshd[6239]: Disconnected from authenticating user root 4.194.4.255 port 53128 [preauth] Nov 23 01:54:17 localhost sshd[6242]: Accepted publickey for zuul from 38.102.83.114 port 60020 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 01:54:17 localhost sshd[6242]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:54:17 localhost sudo[6259]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tgnkvnggqbdfavqgfoqnnfkftvsawmdc ; /usr/bin/python3 Nov 23 01:54:17 localhost sudo[6259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:18 localhost sudo[6259]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:19 localhost sudo[6278]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hhwqreendfhdeyeuzeuujtheootpnsfd ; /usr/bin/python3 Nov 23 01:54:19 localhost sudo[6278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:19 localhost sudo[6278]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:19 localhost sudo[6294]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ylnyinpkccykazyntklkqkbbmcnmkdav ; /usr/bin/python3 Nov 23 01:54:19 localhost sudo[6294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:19 localhost sudo[6294]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:19 localhost sudo[6310]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ybitaldyimppkjjeudhujanzzqhvjuci ; /usr/bin/python3 Nov 23 01:54:19 localhost sudo[6310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:19 localhost sudo[6310]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:20 localhost sudo[6326]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-frpemrilmopyetpnaidddsmzohmrpimv ; /usr/bin/python3 Nov 23 01:54:20 localhost sudo[6326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:20 localhost sudo[6326]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:20 localhost sudo[6342]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mtrzaeebvpmdlsbvybzeqlvlbuvdktkz ; /usr/bin/python3 Nov 23 01:54:20 localhost sudo[6342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:20 localhost sudo[6342]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:21 localhost sudo[6390]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ksycmnqcfmyevdjoifdtwtinsbggquah ; /usr/bin/python3 Nov 23 01:54:21 localhost sudo[6390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:22 localhost sudo[6390]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:22 localhost sudo[6435]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jpulkvfbtvdffkncmkkdlgujevcnfwoi ; /usr/bin/python3 Nov 23 01:54:22 localhost sudo[6435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:22 localhost sudo[6435]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:23 localhost sshd[6393]: Invalid user anas from 115.31.151.36 port 41690 Nov 23 01:54:23 localhost sshd[6393]: Received disconnect from 115.31.151.36 port 41690:11: Bye Bye [preauth] Nov 23 01:54:23 localhost sshd[6393]: Disconnected from invalid user anas 115.31.151.36 port 41690 [preauth] Nov 23 01:54:23 localhost sudo[6465]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bdnuviyqschhldijoqqctxukjrrqudxj ; /usr/bin/python3 Nov 23 01:54:23 localhost sudo[6465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:24 localhost sudo[6465]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:25 localhost sudo[6511]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kwuippjoartlcmrenfywapzhfqoavrlw ; /usr/bin/python3 Nov 23 01:54:25 localhost sudo[6511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:25 localhost sudo[6511]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:27 localhost sudo[6527]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-txecwkxnbagwvkrcuvtroirusabavprb ; /usr/bin/python3 Nov 23 01:54:27 localhost sudo[6527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:27 localhost sudo[6527]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:27 localhost sudo[6545]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-trzyhbfrwtklyjfxfabfuseikdrmtvof ; /usr/bin/python3 Nov 23 01:54:27 localhost sudo[6545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:27 localhost sudo[6545]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:27 localhost sudo[6563]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yboytnkztjbpakndqhmsjxznjwmwdizm ; /usr/bin/python3 Nov 23 01:54:27 localhost sudo[6563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:27 localhost sudo[6563]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:27 localhost sudo[6583]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jozwwxwbxphpufdptuemiqfunolibxwj ; /usr/bin/python3 Nov 23 01:54:27 localhost sudo[6583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:54:28 localhost sudo[6583]: pam_unix(sudo:session): session closed for user root Nov 23 01:54:28 localhost sshd[6566]: Received disconnect from 222.98.122.37 port 51840:11: Bye Bye [preauth] Nov 23 01:54:28 localhost sshd[6566]: Disconnected from authenticating user root 222.98.122.37 port 51840 [preauth] Nov 23 01:54:33 localhost sshd[6242]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:54:36 localhost sshd[6628]: Invalid user react from 122.35.192.61 port 43180 Nov 23 01:54:36 localhost sshd[6628]: Received disconnect from 122.35.192.61 port 43180:11: Bye Bye [preauth] Nov 23 01:54:36 localhost sshd[6628]: Disconnected from invalid user react 122.35.192.61 port 43180 [preauth] Nov 23 01:54:44 localhost sshd[6630]: Received disconnect from 200.89.178.151 port 33026:11: Bye Bye [preauth] Nov 23 01:54:44 localhost sshd[6630]: Disconnected from authenticating user root 200.89.178.151 port 33026 [preauth] Nov 23 01:54:47 localhost sshd[6632]: Received disconnect from 154.91.170.52 port 56284:11: Bye Bye [preauth] Nov 23 01:54:47 localhost sshd[6632]: Disconnected from authenticating user root 154.91.170.52 port 56284 [preauth] Nov 23 01:55:30 localhost sshd[6634]: Invalid user dut from 115.31.151.36 port 34798 Nov 23 01:55:30 localhost sshd[6634]: Received disconnect from 115.31.151.36 port 34798:11: Bye Bye [preauth] Nov 23 01:55:30 localhost sshd[6634]: Disconnected from invalid user dut 115.31.151.36 port 34798 [preauth] Nov 23 01:55:36 localhost sshd[6636]: Received disconnect from 4.194.4.255 port 50558:11: Bye Bye [preauth] Nov 23 01:55:36 localhost sshd[6636]: Disconnected from authenticating user root 4.194.4.255 port 50558 [preauth] Nov 23 01:55:42 localhost sshd[6639]: Received disconnect from 222.98.122.37 port 51222:11: Bye Bye [preauth] Nov 23 01:55:42 localhost sshd[6639]: Disconnected from authenticating user root 222.98.122.37 port 51222 [preauth] Nov 23 01:55:43 localhost sshd[6641]: Invalid user system from 197.158.254.18 port 39808 Nov 23 01:55:44 localhost sshd[6641]: Received disconnect from 197.158.254.18 port 39808:11: Bye Bye [preauth] Nov 23 01:55:44 localhost sshd[6641]: Disconnected from invalid user system 197.158.254.18 port 39808 [preauth] Nov 23 01:55:52 localhost sshd[6644]: Accepted publickey for zuul from 38.102.83.114 port 59476 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 01:55:52 localhost sshd[6644]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:55:52 localhost sudo[6661]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uuobkfjzxslmwuhfkxzbbireuwvxebgk ; /usr/bin/python3 Nov 23 01:55:52 localhost sudo[6661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:55:58 localhost sudo[6661]: pam_unix(sudo:session): session closed for user root Nov 23 01:56:06 localhost sshd[6765]: Invalid user p from 122.35.192.61 port 49250 Nov 23 01:56:06 localhost sshd[6765]: Received disconnect from 122.35.192.61 port 49250:11: Bye Bye [preauth] Nov 23 01:56:06 localhost sshd[6765]: Disconnected from invalid user p 122.35.192.61 port 49250 [preauth] Nov 23 01:56:07 localhost sshd[6767]: Received disconnect from 154.91.170.52 port 56354:11: Bye Bye [preauth] Nov 23 01:56:07 localhost sshd[6767]: Disconnected from authenticating user root 154.91.170.52 port 56354 [preauth] Nov 23 01:56:10 localhost sshd[6769]: Received disconnect from 200.89.178.151 port 62708:11: Bye Bye [preauth] Nov 23 01:56:10 localhost sshd[6769]: Disconnected from authenticating user root 200.89.178.151 port 62708 [preauth] Nov 23 01:56:38 localhost sshd[6771]: Invalid user sherry from 115.31.151.36 port 48258 Nov 23 01:56:38 localhost sshd[6771]: Received disconnect from 115.31.151.36 port 48258:11: Bye Bye [preauth] Nov 23 01:56:38 localhost sshd[6771]: Disconnected from invalid user sherry 115.31.151.36 port 48258 [preauth] Nov 23 01:56:53 localhost sudo[6786]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kchmsgvxmyuhfmoshpajdpglxlucocvy ; /usr/bin/python3 Nov 23 01:56:53 localhost sudo[6786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:56:58 localhost sshd[6795]: Invalid user test123 from 222.98.122.37 port 50662 Nov 23 01:56:58 localhost sshd[6795]: Received disconnect from 222.98.122.37 port 50662:11: Bye Bye [preauth] Nov 23 01:56:58 localhost sshd[6795]: Disconnected from invalid user test123 222.98.122.37 port 50662 [preauth] Nov 23 01:56:59 localhost sshd[6797]: Invalid user test from 4.194.4.255 port 49922 Nov 23 01:56:59 localhost sshd[6797]: Received disconnect from 4.194.4.255 port 49922:11: Bye Bye [preauth] Nov 23 01:56:59 localhost sshd[6797]: Disconnected from invalid user test 4.194.4.255 port 49922 [preauth] Nov 23 01:57:28 localhost sshd[6877]: Invalid user server from 154.91.170.52 port 52866 Nov 23 01:57:28 localhost sshd[6877]: Received disconnect from 154.91.170.52 port 52866:11: Bye Bye [preauth] Nov 23 01:57:28 localhost sshd[6877]: Disconnected from invalid user server 154.91.170.52 port 52866 [preauth] Nov 23 01:57:37 localhost sshd[7615]: Invalid user test from 122.35.192.61 port 36500 Nov 23 01:57:37 localhost sshd[7615]: Received disconnect from 122.35.192.61 port 36500:11: Bye Bye [preauth] Nov 23 01:57:37 localhost sshd[7615]: Disconnected from invalid user test 122.35.192.61 port 36500 [preauth] Nov 23 01:57:38 localhost sshd[7617]: Invalid user vladimir from 197.158.254.18 port 42688 Nov 23 01:57:38 localhost sshd[7617]: Received disconnect from 197.158.254.18 port 42688:11: Bye Bye [preauth] Nov 23 01:57:38 localhost sshd[7617]: Disconnected from invalid user vladimir 197.158.254.18 port 42688 [preauth] Nov 23 01:57:42 localhost sshd[7619]: Invalid user copyuser from 200.89.178.151 port 37395 Nov 23 01:57:42 localhost sshd[7619]: Received disconnect from 200.89.178.151 port 37395:11: Bye Bye [preauth] Nov 23 01:57:42 localhost sshd[7619]: Disconnected from invalid user copyuser 200.89.178.151 port 37395 [preauth] Nov 23 01:57:47 localhost sudo[6786]: pam_unix(sudo:session): session closed for user root Nov 23 01:57:49 localhost sshd[9396]: Received disconnect from 115.31.151.36 port 33370:11: Bye Bye [preauth] Nov 23 01:57:49 localhost sshd[9396]: Disconnected from authenticating user root 115.31.151.36 port 33370 [preauth] Nov 23 01:57:49 localhost sudo[11931]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jievuzqeizxwkondnikoneudgrllptny ; /usr/bin/python3 Nov 23 01:57:49 localhost sudo[11931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:57:50 localhost sudo[11931]: pam_unix(sudo:session): session closed for user root Nov 23 01:57:51 localhost sshd[6644]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:58:08 localhost sshd[18536]: Unable to negotiate with 38.102.83.220 port 38834: no matching host key type found. Their offer: ssh-ed25519 [preauth] Nov 23 01:58:08 localhost sshd[18533]: Connection closed by 38.102.83.220 port 38822 [preauth] Nov 23 01:58:08 localhost sshd[18534]: Unable to negotiate with 38.102.83.220 port 38844: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Nov 23 01:58:08 localhost sshd[18535]: Unable to negotiate with 38.102.83.220 port 38854: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Nov 23 01:58:08 localhost sshd[18537]: Connection closed by 38.102.83.220 port 38830 [preauth] Nov 23 01:58:13 localhost sshd[18543]: Accepted publickey for zuul from 38.102.83.114 port 50686 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 01:58:13 localhost sshd[18543]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:58:14 localhost sudo[18574]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-slckuvdbztetfeijaaxzeoaefxtozfif ; /usr/bin/python3 Nov 23 01:58:14 localhost sudo[18574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:58:14 localhost sudo[18574]: pam_unix(sudo:session): session closed for user root Nov 23 01:58:15 localhost sshd[18543]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:58:22 localhost sshd[18577]: Invalid user system from 222.98.122.37 port 50492 Nov 23 01:58:22 localhost sshd[18577]: Received disconnect from 222.98.122.37 port 50492:11: Bye Bye [preauth] Nov 23 01:58:22 localhost sshd[18577]: Disconnected from invalid user system 222.98.122.37 port 50492 [preauth] Nov 23 01:58:26 localhost sshd[18579]: Invalid user test123 from 4.194.4.255 port 42454 Nov 23 01:58:26 localhost sshd[18579]: Received disconnect from 4.194.4.255 port 42454:11: Bye Bye [preauth] Nov 23 01:58:26 localhost sshd[18579]: Disconnected from invalid user test123 4.194.4.255 port 42454 [preauth] Nov 23 01:58:52 localhost sshd[18581]: Received disconnect from 154.91.170.52 port 49490:11: Bye Bye [preauth] Nov 23 01:58:52 localhost sshd[18581]: Disconnected from authenticating user root 154.91.170.52 port 49490 [preauth] Nov 23 01:59:06 localhost sshd[18583]: Received disconnect from 115.31.151.36 port 35748:11: Bye Bye [preauth] Nov 23 01:59:06 localhost sshd[18583]: Disconnected from authenticating user root 115.31.151.36 port 35748 [preauth] Nov 23 01:59:12 localhost sshd[18585]: Received disconnect from 122.35.192.61 port 58782:11: Bye Bye [preauth] Nov 23 01:59:12 localhost sshd[18585]: Disconnected from authenticating user root 122.35.192.61 port 58782 [preauth] Nov 23 01:59:22 localhost sshd[18587]: Invalid user test from 200.89.178.151 port 12080 Nov 23 01:59:22 localhost sshd[18587]: Received disconnect from 200.89.178.151 port 12080:11: Bye Bye [preauth] Nov 23 01:59:22 localhost sshd[18587]: Disconnected from invalid user test 200.89.178.151 port 12080 [preauth] Nov 23 01:59:33 localhost sshd[18589]: Invalid user admin from 197.158.254.18 port 45556 Nov 23 01:59:33 localhost sshd[18589]: Received disconnect from 197.158.254.18 port 45556:11: Bye Bye [preauth] Nov 23 01:59:33 localhost sshd[18589]: Disconnected from invalid user admin 197.158.254.18 port 45556 [preauth] Nov 23 01:59:44 localhost sshd[18592]: Accepted publickey for zuul from 38.102.83.114 port 37816 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 01:59:44 localhost sshd[18592]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 01:59:44 localhost sudo[18609]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-epmzyhubkukkpihjmnzpubvxyshxjokq ; /usr/bin/python3 Nov 23 01:59:44 localhost sudo[18609]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:44 localhost sudo[18609]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:45 localhost sudo[18625]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsuqdfjqwhrbhxvfvqpxcnazuyqxxvvz ; /usr/bin/python3 Nov 23 01:59:45 localhost sudo[18625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:45 localhost sudo[18625]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:46 localhost sudo[18675]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jpyozkoohlpkzdvgsyvnmksvvrakinng ; /usr/bin/python3 Nov 23 01:59:46 localhost sudo[18675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:46 localhost sudo[18675]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:47 localhost sudo[18718]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tsnxtxvutchnjhzwrvyxkdcrobbyxeej ; /usr/bin/python3 Nov 23 01:59:47 localhost sudo[18718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:47 localhost sudo[18718]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:48 localhost sudo[18782]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ouksgrvfrvvfutlejeslomjccagrvwgd ; /usr/bin/python3 Nov 23 01:59:48 localhost sudo[18782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:48 localhost sshd[18735]: Invalid user user7 from 222.98.122.37 port 49790 Nov 23 01:59:48 localhost sudo[18782]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:48 localhost sshd[18735]: Received disconnect from 222.98.122.37 port 49790:11: Bye Bye [preauth] Nov 23 01:59:48 localhost sshd[18735]: Disconnected from invalid user user7 222.98.122.37 port 49790 [preauth] Nov 23 01:59:48 localhost sudo[18825]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fhwuspjcoemfwvjkmskphgvttypqtitc ; /usr/bin/python3 Nov 23 01:59:48 localhost sudo[18825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:48 localhost sudo[18825]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:50 localhost sudo[18855]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nsjpqheaxpocctbdgxwajcqjnvfuakax ; /usr/bin/python3 Nov 23 01:59:50 localhost sudo[18855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 01:59:50 localhost sudo[18855]: pam_unix(sudo:session): session closed for user root Nov 23 01:59:55 localhost sshd[18592]: pam_unix(sshd:session): session closed for user zuul Nov 23 01:59:59 localhost sshd[19087]: Invalid user gui from 4.194.4.255 port 34610 Nov 23 01:59:59 localhost sshd[19087]: Received disconnect from 4.194.4.255 port 34610:11: Bye Bye [preauth] Nov 23 01:59:59 localhost sshd[19087]: Disconnected from invalid user gui 4.194.4.255 port 34610 [preauth] Nov 23 02:00:18 localhost sshd[19089]: Received disconnect from 154.91.170.52 port 39670:11: Bye Bye [preauth] Nov 23 02:00:18 localhost sshd[19089]: Disconnected from authenticating user root 154.91.170.52 port 39670 [preauth] Nov 23 02:00:20 localhost sshd[19091]: Received disconnect from 115.31.151.36 port 42690:11: Bye Bye [preauth] Nov 23 02:00:20 localhost sshd[19091]: Disconnected from authenticating user root 115.31.151.36 port 42690 [preauth] Nov 23 02:00:46 localhost sshd[19093]: Invalid user dut from 122.35.192.61 port 52862 Nov 23 02:00:46 localhost sshd[19093]: Received disconnect from 122.35.192.61 port 52862:11: Bye Bye [preauth] Nov 23 02:00:46 localhost sshd[19093]: Disconnected from invalid user dut 122.35.192.61 port 52862 [preauth] Nov 23 02:01:03 localhost sshd[19110]: Invalid user sam from 200.89.178.151 port 41764 Nov 23 02:01:03 localhost sshd[19110]: Received disconnect from 200.89.178.151 port 41764:11: Bye Bye [preauth] Nov 23 02:01:03 localhost sshd[19110]: Disconnected from invalid user sam 200.89.178.151 port 41764 [preauth] Nov 23 02:01:11 localhost sshd[19112]: Invalid user wg from 222.98.122.37 port 48632 Nov 23 02:01:11 localhost sshd[19112]: Received disconnect from 222.98.122.37 port 48632:11: Bye Bye [preauth] Nov 23 02:01:11 localhost sshd[19112]: Disconnected from invalid user wg 222.98.122.37 port 48632 [preauth] Nov 23 02:01:33 localhost sshd[19114]: Received disconnect from 197.158.254.18 port 48442:11: Bye Bye [preauth] Nov 23 02:01:33 localhost sshd[19114]: Disconnected from authenticating user root 197.158.254.18 port 48442 [preauth] Nov 23 02:01:34 localhost sshd[19116]: Received disconnect from 115.31.151.36 port 46778:11: Bye Bye [preauth] Nov 23 02:01:34 localhost sshd[19116]: Disconnected from authenticating user root 115.31.151.36 port 46778 [preauth] Nov 23 02:01:37 localhost sshd[19118]: Received disconnect from 4.194.4.255 port 53924:11: Bye Bye [preauth] Nov 23 02:01:37 localhost sshd[19118]: Disconnected from authenticating user root 4.194.4.255 port 53924 [preauth] Nov 23 02:01:39 localhost sshd[19120]: Invalid user admin from 154.91.170.52 port 42934 Nov 23 02:01:40 localhost sshd[19120]: Received disconnect from 154.91.170.52 port 42934:11: Bye Bye [preauth] Nov 23 02:01:40 localhost sshd[19120]: Disconnected from invalid user admin 154.91.170.52 port 42934 [preauth] Nov 23 02:02:06 localhost sshd[19122]: Accepted publickey for zuul from 38.102.83.220 port 50788 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:02:06 localhost sshd[19122]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:02:18 localhost sshd[19170]: Invalid user gui from 122.35.192.61 port 49254 Nov 23 02:02:18 localhost sshd[19170]: Received disconnect from 122.35.192.61 port 49254:11: Bye Bye [preauth] Nov 23 02:02:18 localhost sshd[19170]: Disconnected from invalid user gui 122.35.192.61 port 49254 [preauth] Nov 23 02:02:35 localhost sshd[19172]: Invalid user test from 222.98.122.37 port 48204 Nov 23 02:02:35 localhost sshd[19172]: Received disconnect from 222.98.122.37 port 48204:11: Bye Bye [preauth] Nov 23 02:02:35 localhost sshd[19172]: Disconnected from invalid user test 222.98.122.37 port 48204 [preauth] Nov 23 02:02:43 localhost sshd[19174]: Invalid user user7 from 200.89.178.151 port 16439 Nov 23 02:02:43 localhost sshd[19174]: Received disconnect from 200.89.178.151 port 16439:11: Bye Bye [preauth] Nov 23 02:02:43 localhost sshd[19174]: Disconnected from invalid user user7 200.89.178.151 port 16439 [preauth] Nov 23 02:02:47 localhost sshd[19176]: Received disconnect from 115.31.151.36 port 50194:11: Bye Bye [preauth] Nov 23 02:02:47 localhost sshd[19176]: Disconnected from authenticating user root 115.31.151.36 port 50194 [preauth] Nov 23 02:03:01 localhost sshd[19179]: Invalid user kate from 154.91.170.52 port 48790 Nov 23 02:03:01 localhost sshd[19179]: Received disconnect from 154.91.170.52 port 48790:11: Bye Bye [preauth] Nov 23 02:03:01 localhost sshd[19179]: Disconnected from invalid user kate 154.91.170.52 port 48790 [preauth] Nov 23 02:03:14 localhost sshd[19181]: Invalid user admin from 4.194.4.255 port 60840 Nov 23 02:03:14 localhost sshd[19181]: Received disconnect from 4.194.4.255 port 60840:11: Bye Bye [preauth] Nov 23 02:03:14 localhost sshd[19181]: Disconnected from invalid user admin 4.194.4.255 port 60840 [preauth] Nov 23 02:03:27 localhost sshd[19184]: Invalid user copyuser from 197.158.254.18 port 51324 Nov 23 02:03:28 localhost sshd[19184]: Received disconnect from 197.158.254.18 port 51324:11: Bye Bye [preauth] Nov 23 02:03:28 localhost sshd[19184]: Disconnected from invalid user copyuser 197.158.254.18 port 51324 [preauth] Nov 23 02:03:56 localhost sshd[19186]: Received disconnect from 122.35.192.61 port 57866:11: Bye Bye [preauth] Nov 23 02:03:56 localhost sshd[19186]: Disconnected from authenticating user root 122.35.192.61 port 57866 [preauth] Nov 23 02:04:01 localhost sshd[19188]: Invalid user swadmin from 115.31.151.36 port 42036 Nov 23 02:04:02 localhost sshd[19188]: Received disconnect from 115.31.151.36 port 42036:11: Bye Bye [preauth] Nov 23 02:04:02 localhost sshd[19188]: Disconnected from invalid user swadmin 115.31.151.36 port 42036 [preauth] Nov 23 02:04:04 localhost sshd[19190]: Invalid user react from 222.98.122.37 port 47870 Nov 23 02:04:04 localhost sshd[19190]: Received disconnect from 222.98.122.37 port 47870:11: Bye Bye [preauth] Nov 23 02:04:04 localhost sshd[19190]: Disconnected from invalid user react 222.98.122.37 port 47870 [preauth] Nov 23 02:04:25 localhost sshd[19192]: Invalid user novinhost from 154.91.170.52 port 40360 Nov 23 02:04:25 localhost sshd[19192]: Received disconnect from 154.91.170.52 port 40360:11: Bye Bye [preauth] Nov 23 02:04:25 localhost sshd[19192]: Disconnected from invalid user novinhost 154.91.170.52 port 40360 [preauth] Nov 23 02:04:26 localhost sshd[19194]: Invalid user deepak from 200.89.178.151 port 46125 Nov 23 02:04:27 localhost sshd[19194]: Received disconnect from 200.89.178.151 port 46125:11: Bye Bye [preauth] Nov 23 02:04:27 localhost sshd[19194]: Disconnected from invalid user deepak 200.89.178.151 port 46125 [preauth] Nov 23 02:04:54 localhost sshd[19196]: Invalid user info from 4.194.4.255 port 51046 Nov 23 02:04:54 localhost sshd[19196]: Received disconnect from 4.194.4.255 port 51046:11: Bye Bye [preauth] Nov 23 02:04:54 localhost sshd[19196]: Disconnected from invalid user info 4.194.4.255 port 51046 [preauth] Nov 23 02:05:24 localhost sshd[19198]: Received disconnect from 115.31.151.36 port 37630:11: Bye Bye [preauth] Nov 23 02:05:24 localhost sshd[19198]: Disconnected from authenticating user root 115.31.151.36 port 37630 [preauth] Nov 23 02:05:27 localhost sshd[19200]: Invalid user wg from 197.158.254.18 port 54196 Nov 23 02:05:27 localhost sshd[19200]: Received disconnect from 197.158.254.18 port 54196:11: Bye Bye [preauth] Nov 23 02:05:27 localhost sshd[19200]: Disconnected from invalid user wg 197.158.254.18 port 54196 [preauth] Nov 23 02:05:30 localhost sshd[19202]: Invalid user ec2-user from 122.35.192.61 port 59864 Nov 23 02:05:31 localhost sshd[19202]: Received disconnect from 122.35.192.61 port 59864:11: Bye Bye [preauth] Nov 23 02:05:31 localhost sshd[19202]: Disconnected from invalid user ec2-user 122.35.192.61 port 59864 [preauth] Nov 23 02:05:32 localhost sshd[19204]: Invalid user zu from 222.98.122.37 port 47388 Nov 23 02:05:33 localhost sshd[19204]: Received disconnect from 222.98.122.37 port 47388:11: Bye Bye [preauth] Nov 23 02:05:33 localhost sshd[19204]: Disconnected from invalid user zu 222.98.122.37 port 47388 [preauth] Nov 23 02:05:51 localhost sshd[19206]: Received disconnect from 154.91.170.52 port 54206:11: Bye Bye [preauth] Nov 23 02:05:51 localhost sshd[19206]: Disconnected from authenticating user root 154.91.170.52 port 54206 [preauth] Nov 23 02:06:08 localhost sshd[19208]: Invalid user anas from 200.89.178.151 port 20808 Nov 23 02:06:08 localhost sshd[19208]: Received disconnect from 200.89.178.151 port 20808:11: Bye Bye [preauth] Nov 23 02:06:08 localhost sshd[19208]: Disconnected from invalid user anas 200.89.178.151 port 20808 [preauth] Nov 23 02:06:35 localhost sshd[19210]: Received disconnect from 4.194.4.255 port 55164:11: Bye Bye [preauth] Nov 23 02:06:35 localhost sshd[19210]: Disconnected from authenticating user root 4.194.4.255 port 55164 [preauth] Nov 23 02:06:38 localhost sshd[19212]: Received disconnect from 115.31.151.36 port 49430:11: Bye Bye [preauth] Nov 23 02:06:38 localhost sshd[19212]: Disconnected from authenticating user root 115.31.151.36 port 49430 [preauth] Nov 23 02:06:56 localhost sshd[19214]: Invalid user info from 222.98.122.37 port 46174 Nov 23 02:06:57 localhost sshd[19214]: Received disconnect from 222.98.122.37 port 46174:11: Bye Bye [preauth] Nov 23 02:06:57 localhost sshd[19214]: Disconnected from invalid user info 222.98.122.37 port 46174 [preauth] Nov 23 02:07:05 localhost sshd[19216]: Invalid user zu from 122.35.192.61 port 36920 Nov 23 02:07:05 localhost sshd[19216]: Received disconnect from 122.35.192.61 port 36920:11: Bye Bye [preauth] Nov 23 02:07:05 localhost sshd[19216]: Disconnected from invalid user zu 122.35.192.61 port 36920 [preauth] Nov 23 02:07:06 localhost sshd[19125]: Received disconnect from 38.102.83.220 port 50788:11: disconnected by user Nov 23 02:07:06 localhost sshd[19125]: Disconnected from user zuul 38.102.83.220 port 50788 Nov 23 02:07:06 localhost sshd[19122]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:07:13 localhost sshd[19219]: Invalid user john from 154.91.170.52 port 36372 Nov 23 02:07:13 localhost sshd[19219]: Received disconnect from 154.91.170.52 port 36372:11: Bye Bye [preauth] Nov 23 02:07:13 localhost sshd[19219]: Disconnected from invalid user john 154.91.170.52 port 36372 [preauth] Nov 23 02:07:21 localhost sshd[19221]: Received disconnect from 197.158.254.18 port 57066:11: Bye Bye [preauth] Nov 23 02:07:21 localhost sshd[19221]: Disconnected from authenticating user root 197.158.254.18 port 57066 [preauth] Nov 23 02:07:43 localhost sshd[19223]: Invalid user sherry from 200.89.178.151 port 50488 Nov 23 02:07:43 localhost sshd[19223]: Received disconnect from 200.89.178.151 port 50488:11: Bye Bye [preauth] Nov 23 02:07:43 localhost sshd[19223]: Disconnected from invalid user sherry 200.89.178.151 port 50488 [preauth] Nov 23 02:07:52 localhost sshd[19225]: Invalid user info from 115.31.151.36 port 37760 Nov 23 02:07:53 localhost sshd[19225]: Received disconnect from 115.31.151.36 port 37760:11: Bye Bye [preauth] Nov 23 02:07:53 localhost sshd[19225]: Disconnected from invalid user info 115.31.151.36 port 37760 [preauth] Nov 23 02:08:13 localhost sshd[19227]: Invalid user system from 4.194.4.255 port 47580 Nov 23 02:08:13 localhost sshd[19227]: Received disconnect from 4.194.4.255 port 47580:11: Bye Bye [preauth] Nov 23 02:08:13 localhost sshd[19227]: Disconnected from invalid user system 4.194.4.255 port 47580 [preauth] Nov 23 02:08:17 localhost sshd[19229]: Received disconnect from 222.98.122.37 port 45902:11: Bye Bye [preauth] Nov 23 02:08:17 localhost sshd[19229]: Disconnected from authenticating user root 222.98.122.37 port 45902 [preauth] Nov 23 02:08:31 localhost sshd[19231]: Invalid user anu from 154.91.170.52 port 60380 Nov 23 02:08:31 localhost sshd[19231]: Received disconnect from 154.91.170.52 port 60380:11: Bye Bye [preauth] Nov 23 02:08:31 localhost sshd[19231]: Disconnected from invalid user anu 154.91.170.52 port 60380 [preauth] Nov 23 02:08:37 localhost sshd[19233]: Received disconnect from 122.35.192.61 port 39114:11: Bye Bye [preauth] Nov 23 02:08:37 localhost sshd[19233]: Disconnected from authenticating user root 122.35.192.61 port 39114 [preauth] Nov 23 02:08:58 localhost sshd[19236]: Invalid user admin from 80.94.95.116 port 25280 Nov 23 02:08:58 localhost sshd[19236]: Connection closed by invalid user admin 80.94.95.116 port 25280 [preauth] Nov 23 02:09:06 localhost sshd[19238]: Received disconnect from 115.31.151.36 port 33972:11: Bye Bye [preauth] Nov 23 02:09:06 localhost sshd[19238]: Disconnected from authenticating user root 115.31.151.36 port 33972 [preauth] Nov 23 02:09:14 localhost sshd[19240]: Invalid user test from 197.158.254.18 port 59938 Nov 23 02:09:14 localhost sshd[19240]: Received disconnect from 197.158.254.18 port 59938:11: Bye Bye [preauth] Nov 23 02:09:14 localhost sshd[19240]: Disconnected from invalid user test 197.158.254.18 port 59938 [preauth] Nov 23 02:09:19 localhost sshd[19242]: Invalid user swadmin from 200.89.178.151 port 25173 Nov 23 02:09:19 localhost sshd[19242]: Received disconnect from 200.89.178.151 port 25173:11: Bye Bye [preauth] Nov 23 02:09:19 localhost sshd[19242]: Disconnected from invalid user swadmin 200.89.178.151 port 25173 [preauth] Nov 23 02:09:38 localhost sshd[19244]: Invalid user vladimir from 222.98.122.37 port 45720 Nov 23 02:09:38 localhost sshd[19244]: Received disconnect from 222.98.122.37 port 45720:11: Bye Bye [preauth] Nov 23 02:09:38 localhost sshd[19244]: Disconnected from invalid user vladimir 222.98.122.37 port 45720 [preauth] Nov 23 02:09:50 localhost sshd[19246]: Invalid user gopal from 154.91.170.52 port 42594 Nov 23 02:09:50 localhost sshd[19246]: Received disconnect from 154.91.170.52 port 42594:11: Bye Bye [preauth] Nov 23 02:09:50 localhost sshd[19246]: Disconnected from invalid user gopal 154.91.170.52 port 42594 [preauth] Nov 23 02:09:52 localhost sshd[19248]: Invalid user ec2-user from 4.194.4.255 port 47322 Nov 23 02:09:52 localhost sshd[19248]: Received disconnect from 4.194.4.255 port 47322:11: Bye Bye [preauth] Nov 23 02:09:52 localhost sshd[19248]: Disconnected from invalid user ec2-user 4.194.4.255 port 47322 [preauth] Nov 23 02:10:09 localhost sshd[19250]: Invalid user deepak from 122.35.192.61 port 45528 Nov 23 02:10:10 localhost sshd[19250]: Received disconnect from 122.35.192.61 port 45528:11: Bye Bye [preauth] Nov 23 02:10:10 localhost sshd[19250]: Disconnected from invalid user deepak 122.35.192.61 port 45528 [preauth] Nov 23 02:10:16 localhost sshd[19252]: Invalid user vladimir from 115.31.151.36 port 38544 Nov 23 02:10:16 localhost sshd[19252]: Received disconnect from 115.31.151.36 port 38544:11: Bye Bye [preauth] Nov 23 02:10:16 localhost sshd[19252]: Disconnected from invalid user vladimir 115.31.151.36 port 38544 [preauth] Nov 23 02:10:56 localhost sshd[19254]: Received disconnect from 200.89.178.151 port 54859:11: Bye Bye [preauth] Nov 23 02:10:56 localhost sshd[19254]: Disconnected from authenticating user root 200.89.178.151 port 54859 [preauth] Nov 23 02:11:03 localhost sshd[19256]: Invalid user copyuser from 222.98.122.37 port 45270 Nov 23 02:11:03 localhost sshd[19256]: Received disconnect from 222.98.122.37 port 45270:11: Bye Bye [preauth] Nov 23 02:11:03 localhost sshd[19256]: Disconnected from invalid user copyuser 222.98.122.37 port 45270 [preauth] Nov 23 02:11:07 localhost sshd[19258]: Invalid user user7 from 197.158.254.18 port 34576 Nov 23 02:11:07 localhost sshd[19258]: Received disconnect from 197.158.254.18 port 34576:11: Bye Bye [preauth] Nov 23 02:11:07 localhost sshd[19258]: Disconnected from invalid user user7 197.158.254.18 port 34576 [preauth] Nov 23 02:11:17 localhost sshd[19260]: Invalid user wangke from 154.91.170.52 port 57446 Nov 23 02:11:17 localhost sshd[19260]: Received disconnect from 154.91.170.52 port 57446:11: Bye Bye [preauth] Nov 23 02:11:17 localhost sshd[19260]: Disconnected from invalid user wangke 154.91.170.52 port 57446 [preauth] Nov 23 02:11:33 localhost sshd[19262]: Invalid user swadmin from 4.194.4.255 port 54900 Nov 23 02:11:33 localhost sshd[19262]: Received disconnect from 4.194.4.255 port 54900:11: Bye Bye [preauth] Nov 23 02:11:33 localhost sshd[19262]: Disconnected from invalid user swadmin 4.194.4.255 port 54900 [preauth] Nov 23 02:11:36 localhost sshd[19264]: Invalid user wg from 115.31.151.36 port 45318 Nov 23 02:11:36 localhost sshd[19264]: Received disconnect from 115.31.151.36 port 45318:11: Bye Bye [preauth] Nov 23 02:11:36 localhost sshd[19264]: Disconnected from invalid user wg 115.31.151.36 port 45318 [preauth] Nov 23 02:11:44 localhost sshd[19266]: Invalid user test123 from 122.35.192.61 port 44286 Nov 23 02:11:44 localhost sshd[19266]: Received disconnect from 122.35.192.61 port 44286:11: Bye Bye [preauth] Nov 23 02:11:44 localhost sshd[19266]: Disconnected from invalid user test123 122.35.192.61 port 44286 [preauth] Nov 23 02:12:29 localhost sshd[19269]: Invalid user ec2-user from 222.98.122.37 port 44698 Nov 23 02:12:29 localhost sshd[19269]: Received disconnect from 222.98.122.37 port 44698:11: Bye Bye [preauth] Nov 23 02:12:29 localhost sshd[19269]: Disconnected from invalid user ec2-user 222.98.122.37 port 44698 [preauth] Nov 23 02:12:36 localhost sshd[19271]: Invalid user dut from 200.89.178.151 port 29534 Nov 23 02:12:36 localhost sshd[19271]: Received disconnect from 200.89.178.151 port 29534:11: Bye Bye [preauth] Nov 23 02:12:36 localhost sshd[19271]: Disconnected from invalid user dut 200.89.178.151 port 29534 [preauth] Nov 23 02:12:41 localhost sshd[19273]: Invalid user odoo from 154.91.170.52 port 38924 Nov 23 02:12:41 localhost sshd[19273]: Received disconnect from 154.91.170.52 port 38924:11: Bye Bye [preauth] Nov 23 02:12:41 localhost sshd[19273]: Disconnected from invalid user odoo 154.91.170.52 port 38924 [preauth] Nov 23 02:12:51 localhost sshd[19275]: Invalid user test from 115.31.151.36 port 34384 Nov 23 02:12:51 localhost sshd[19275]: Received disconnect from 115.31.151.36 port 34384:11: Bye Bye [preauth] Nov 23 02:12:51 localhost sshd[19275]: Disconnected from invalid user test 115.31.151.36 port 34384 [preauth] Nov 23 02:13:01 localhost sshd[19277]: Received disconnect from 197.158.254.18 port 37452:11: Bye Bye [preauth] Nov 23 02:13:01 localhost sshd[19277]: Disconnected from authenticating user root 197.158.254.18 port 37452 [preauth] Nov 23 02:13:14 localhost sshd[19279]: Invalid user zu from 4.194.4.255 port 44708 Nov 23 02:13:14 localhost sshd[19279]: Received disconnect from 4.194.4.255 port 44708:11: Bye Bye [preauth] Nov 23 02:13:14 localhost sshd[19279]: Disconnected from invalid user zu 4.194.4.255 port 44708 [preauth] Nov 23 02:13:19 localhost sshd[19281]: Received disconnect from 122.35.192.61 port 57224:11: Bye Bye [preauth] Nov 23 02:13:19 localhost sshd[19281]: Disconnected from authenticating user root 122.35.192.61 port 57224 [preauth] Nov 23 02:13:43 localhost sshd[19284]: Accepted publickey for zuul from 38.102.83.114 port 50870 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:13:43 localhost sshd[19284]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:13:46 localhost sudo[19319]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wsfqhcapsikzgucuqxkuhfqquypzetyo ; /usr/bin/python3 Nov 23 02:13:46 localhost sudo[19319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:13:48 localhost sudo[19319]: pam_unix(sudo:session): session closed for user root Nov 23 02:13:55 localhost sshd[19326]: Invalid user dut from 222.98.122.37 port 44204 Nov 23 02:13:55 localhost sshd[19326]: Received disconnect from 222.98.122.37 port 44204:11: Bye Bye [preauth] Nov 23 02:13:55 localhost sshd[19326]: Disconnected from invalid user dut 222.98.122.37 port 44204 [preauth] Nov 23 02:14:03 localhost sshd[19328]: Invalid user react from 115.31.151.36 port 41346 Nov 23 02:14:03 localhost sshd[19328]: Received disconnect from 115.31.151.36 port 41346:11: Bye Bye [preauth] Nov 23 02:14:03 localhost sshd[19328]: Disconnected from invalid user react 115.31.151.36 port 41346 [preauth] Nov 23 02:14:03 localhost sshd[19330]: Invalid user ubuntu from 154.91.170.52 port 46842 Nov 23 02:14:04 localhost sshd[19330]: Received disconnect from 154.91.170.52 port 46842:11: Bye Bye [preauth] Nov 23 02:14:04 localhost sshd[19330]: Disconnected from invalid user ubuntu 154.91.170.52 port 46842 [preauth] Nov 23 02:14:12 localhost sshd[19332]: Invalid user info from 200.89.178.151 port 59220 Nov 23 02:14:12 localhost sshd[19332]: Received disconnect from 200.89.178.151 port 59220:11: Bye Bye [preauth] Nov 23 02:14:12 localhost sshd[19332]: Disconnected from invalid user info 200.89.178.151 port 59220 [preauth] Nov 23 02:14:20 localhost sudo[19348]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-asxkfrquekbuelelwmjtejwmwajhidvh ; /usr/bin/python3 Nov 23 02:14:20 localhost sudo[19348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:14:48 localhost sudo[19348]: pam_unix(sudo:session): session closed for user root Nov 23 02:14:50 localhost sshd[19491]: Invalid user info from 197.158.254.18 port 40330 Nov 23 02:14:50 localhost sshd[19493]: Received disconnect from 122.35.192.61 port 33960:11: Bye Bye [preauth] Nov 23 02:14:50 localhost sshd[19493]: Disconnected from authenticating user root 122.35.192.61 port 33960 [preauth] Nov 23 02:14:50 localhost sshd[19491]: Received disconnect from 197.158.254.18 port 40330:11: Bye Bye [preauth] Nov 23 02:14:50 localhost sshd[19491]: Disconnected from invalid user info 197.158.254.18 port 40330 [preauth] Nov 23 02:14:51 localhost sshd[19495]: Invalid user ftpuser from 4.194.4.255 port 57588 Nov 23 02:14:51 localhost sshd[19495]: Received disconnect from 4.194.4.255 port 57588:11: Bye Bye [preauth] Nov 23 02:14:51 localhost sshd[19495]: Disconnected from invalid user ftpuser 4.194.4.255 port 57588 [preauth] Nov 23 02:14:54 localhost sudo[19510]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkeorildvyauksfjjdoimtikrcuseyri ; /usr/bin/python3 Nov 23 02:14:54 localhost sudo[19510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:15:00 localhost sudo[19510]: pam_unix(sudo:session): session closed for user root Nov 23 02:15:15 localhost sudo[19653]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vmtqxpwgtjhfgkclhbfegrfjrqbgrsum ; /usr/bin/python3 Nov 23 02:15:15 localhost sudo[19653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:15:16 localhost sshd[19638]: Invalid user ftpuser from 115.31.151.36 port 59542 Nov 23 02:15:17 localhost sshd[19638]: Received disconnect from 115.31.151.36 port 59542:11: Bye Bye [preauth] Nov 23 02:15:17 localhost sshd[19638]: Disconnected from invalid user ftpuser 115.31.151.36 port 59542 [preauth] Nov 23 02:15:17 localhost sshd[19657]: Invalid user sam from 222.98.122.37 port 43486 Nov 23 02:15:17 localhost sshd[19657]: Received disconnect from 222.98.122.37 port 43486:11: Bye Bye [preauth] Nov 23 02:15:17 localhost sshd[19657]: Disconnected from invalid user sam 222.98.122.37 port 43486 [preauth] Nov 23 02:15:28 localhost sshd[19971]: Invalid user epro from 154.91.170.52 port 37582 Nov 23 02:15:28 localhost sshd[19971]: Received disconnect from 154.91.170.52 port 37582:11: Bye Bye [preauth] Nov 23 02:15:28 localhost sshd[19971]: Disconnected from invalid user epro 154.91.170.52 port 37582 [preauth] Nov 23 02:15:32 localhost sudo[19653]: pam_unix(sudo:session): session closed for user root Nov 23 02:15:47 localhost sudo[20051]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-umojcubnojdxdsbhvmxeuerpozathcsi ; /usr/bin/python3 Nov 23 02:15:47 localhost sudo[20051]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:15:52 localhost sshd[20181]: Received disconnect from 200.89.178.151 port 33907:11: Bye Bye [preauth] Nov 23 02:15:52 localhost sshd[20181]: Disconnected from authenticating user root 200.89.178.151 port 33907 [preauth] Nov 23 02:16:02 localhost sudo[20051]: pam_unix(sudo:session): session closed for user root Nov 23 02:16:20 localhost sudo[20389]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hrdklhuvgsevjasginwjjzhfbhojispx ; /usr/bin/python3 Nov 23 02:16:20 localhost sudo[20389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:16:25 localhost sshd[20494]: Invalid user copyuser from 122.35.192.61 port 50382 Nov 23 02:16:26 localhost sshd[20494]: Received disconnect from 122.35.192.61 port 50382:11: Bye Bye [preauth] Nov 23 02:16:26 localhost sshd[20494]: Disconnected from invalid user copyuser 122.35.192.61 port 50382 [preauth] Nov 23 02:16:29 localhost sshd[20584]: Invalid user user7 from 4.194.4.255 port 58720 Nov 23 02:16:29 localhost sshd[20580]: Invalid user ec2-user from 115.31.151.36 port 47800 Nov 23 02:16:29 localhost sshd[20584]: Received disconnect from 4.194.4.255 port 58720:11: Bye Bye [preauth] Nov 23 02:16:29 localhost sshd[20584]: Disconnected from invalid user user7 4.194.4.255 port 58720 [preauth] Nov 23 02:16:29 localhost sshd[20580]: Received disconnect from 115.31.151.36 port 47800:11: Bye Bye [preauth] Nov 23 02:16:29 localhost sshd[20580]: Disconnected from invalid user ec2-user 115.31.151.36 port 47800 [preauth] Nov 23 02:16:36 localhost sudo[20389]: pam_unix(sudo:session): session closed for user root Nov 23 02:16:39 localhost sudo[20675]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aekezecgtczeiybkvmmazdmtaoiziaow ; /usr/bin/python3 Nov 23 02:16:39 localhost sudo[20675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:16:42 localhost sudo[20675]: pam_unix(sudo:session): session closed for user root Nov 23 02:16:42 localhost sshd[20680]: Received disconnect from 197.158.254.18 port 43216:11: Bye Bye [preauth] Nov 23 02:16:42 localhost sshd[20680]: Disconnected from authenticating user root 197.158.254.18 port 43216 [preauth] Nov 23 02:16:43 localhost sshd[20682]: Received disconnect from 222.98.122.37 port 43036:11: Bye Bye [preauth] Nov 23 02:16:43 localhost sshd[20682]: Disconnected from authenticating user root 222.98.122.37 port 43036 [preauth] Nov 23 02:16:53 localhost sshd[20685]: Invalid user dbadmin from 154.91.170.52 port 37506 Nov 23 02:16:54 localhost sshd[20685]: Received disconnect from 154.91.170.52 port 37506:11: Bye Bye [preauth] Nov 23 02:16:54 localhost sshd[20685]: Disconnected from invalid user dbadmin 154.91.170.52 port 37506 [preauth] Nov 23 02:17:13 localhost sudo[20700]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bfmcdcvdxqhhgqintchlrbmuwyzlqqya ; /usr/bin/python3 Nov 23 02:17:13 localhost sudo[20700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:17:34 localhost groupadd[20809]: group added to /etc/group: name=unbound, GID=987 Nov 23 02:17:34 localhost groupadd[20809]: group added to /etc/gshadow: name=unbound Nov 23 02:17:34 localhost groupadd[20809]: new group: name=unbound, GID=987 Nov 23 02:17:34 localhost useradd[20816]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none Nov 23 02:17:34 localhost groupadd[20829]: group added to /etc/group: name=openvswitch, GID=986 Nov 23 02:17:34 localhost groupadd[20829]: group added to /etc/gshadow: name=openvswitch Nov 23 02:17:34 localhost groupadd[20829]: new group: name=openvswitch, GID=986 Nov 23 02:17:34 localhost useradd[20836]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none Nov 23 02:17:34 localhost groupadd[20844]: group added to /etc/group: name=hugetlbfs, GID=985 Nov 23 02:17:34 localhost groupadd[20844]: group added to /etc/gshadow: name=hugetlbfs Nov 23 02:17:34 localhost groupadd[20844]: new group: name=hugetlbfs, GID=985 Nov 23 02:17:34 localhost usermod[20852]: add 'openvswitch' to group 'hugetlbfs' Nov 23 02:17:34 localhost usermod[20852]: add 'openvswitch' to shadow group 'hugetlbfs' Nov 23 02:17:36 localhost sshd[20871]: Received disconnect from 200.89.178.151 port 63595:11: Bye Bye [preauth] Nov 23 02:17:36 localhost sshd[20871]: Disconnected from authenticating user root 200.89.178.151 port 63595 [preauth] Nov 23 02:17:39 localhost sudo[20700]: pam_unix(sudo:session): session closed for user root Nov 23 02:17:50 localhost sshd[21947]: Invalid user gui from 115.31.151.36 port 43818 Nov 23 02:17:50 localhost sshd[21947]: Received disconnect from 115.31.151.36 port 43818:11: Bye Bye [preauth] Nov 23 02:17:50 localhost sshd[21947]: Disconnected from invalid user gui 115.31.151.36 port 43818 [preauth] Nov 23 02:17:51 localhost sudo[21962]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uilvpmyjetuffkdbfmljwkauuwdlbdux ; /usr/bin/python3 Nov 23 02:17:51 localhost sudo[21962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:02 localhost sshd[21968]: Invalid user wg from 122.35.192.61 port 57776 Nov 23 02:18:02 localhost sshd[21968]: Received disconnect from 122.35.192.61 port 57776:11: Bye Bye [preauth] Nov 23 02:18:02 localhost sshd[21968]: Disconnected from invalid user wg 122.35.192.61 port 57776 [preauth] Nov 23 02:18:04 localhost sudo[21962]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:05 localhost sudo[21984]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dndtrrioqlrncanyzmojravpjxlotezp ; /usr/bin/python3 Nov 23 02:18:05 localhost sudo[21984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:05 localhost sudo[21984]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:06 localhost sudo[22032]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cyzgqtatnsnwgzvcnnwdnmrmehcjgpyh ; /usr/bin/python3 Nov 23 02:18:06 localhost sudo[22032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:07 localhost sudo[22032]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:07 localhost sudo[22075]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dsflqeetgrpnithybyyzektuyflszubd ; /usr/bin/python3 Nov 23 02:18:07 localhost sudo[22075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:07 localhost sudo[22075]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:09 localhost sudo[22107]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lzbznmmrwsloagvnunlldmjbvcnnshas ; /usr/bin/python3 Nov 23 02:18:09 localhost sudo[22107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:09 localhost sshd[22092]: Received disconnect from 4.194.4.255 port 50798:11: Bye Bye [preauth] Nov 23 02:18:09 localhost sshd[22092]: Disconnected from authenticating user root 4.194.4.255 port 50798 [preauth] Nov 23 02:18:09 localhost sudo[22107]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:09 localhost sudo[22128]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ygzakpbkkzfgczjlsklaskwldaphyosi ; /usr/bin/python3 Nov 23 02:18:09 localhost sudo[22128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:09 localhost sudo[22128]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:09 localhost sudo[22148]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ffefivjmyapxdrgmwzikmmbjqsdpjlhb ; /usr/bin/python3 Nov 23 02:18:09 localhost sudo[22148]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:10 localhost sudo[22148]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:10 localhost sudo[22168]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zedrujdxtwjzdmcivnrowzdfijbsfgzs ; /usr/bin/python3 Nov 23 02:18:10 localhost sudo[22168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:10 localhost sudo[22168]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:10 localhost sudo[22188]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-haqnsjalonjeszhzhbdvwvjfqpwqceba ; /usr/bin/python3 Nov 23 02:18:10 localhost sudo[22188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:11 localhost sudo[22188]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:12 localhost sshd[22195]: Invalid user local from 222.98.122.37 port 41972 Nov 23 02:18:12 localhost sshd[22195]: Received disconnect from 222.98.122.37 port 41972:11: Bye Bye [preauth] Nov 23 02:18:12 localhost sshd[22195]: Disconnected from invalid user local 222.98.122.37 port 41972 [preauth] Nov 23 02:18:14 localhost sudo[22210]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zuhncdmlavrimsdszpeovgvdayaxdvsd ; /usr/bin/python3 Nov 23 02:18:14 localhost sudo[22210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:14 localhost sudo[22210]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:14 localhost sudo[22383]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-epjaxyjppcvlubirjanifpugsthyufse ; /usr/bin/python3 Nov 23 02:18:14 localhost sudo[22383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:18:15 localhost sudo[22383]: pam_unix(sudo:session): session closed for user root Nov 23 02:18:22 localhost sshd[22536]: Invalid user vishal from 154.91.170.52 port 38086 Nov 23 02:18:22 localhost sshd[22536]: Received disconnect from 154.91.170.52 port 38086:11: Bye Bye [preauth] Nov 23 02:18:22 localhost sshd[22536]: Disconnected from invalid user vishal 154.91.170.52 port 38086 [preauth] Nov 23 02:18:39 localhost sshd[22538]: Invalid user ec2-user from 197.158.254.18 port 46088 Nov 23 02:18:39 localhost sshd[22538]: Received disconnect from 197.158.254.18 port 46088:11: Bye Bye [preauth] Nov 23 02:18:39 localhost sshd[22538]: Disconnected from invalid user ec2-user 197.158.254.18 port 46088 [preauth] Nov 23 02:18:47 localhost sudo[22553]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qbqcstclhnzigevitjvspbovqutmysup ; /usr/bin/python3 Nov 23 02:18:47 localhost sudo[22553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:19:05 localhost sshd[23024]: Invalid user sam from 115.31.151.36 port 42614 Nov 23 02:19:06 localhost sshd[23024]: Received disconnect from 115.31.151.36 port 42614:11: Bye Bye [preauth] Nov 23 02:19:06 localhost sshd[23024]: Disconnected from invalid user sam 115.31.151.36 port 42614 [preauth] Nov 23 02:19:19 localhost sshd[23241]: Invalid user react from 200.89.178.151 port 38280 Nov 23 02:19:19 localhost sshd[23241]: Received disconnect from 200.89.178.151 port 38280:11: Bye Bye [preauth] Nov 23 02:19:19 localhost sshd[23241]: Disconnected from invalid user react 200.89.178.151 port 38280 [preauth] Nov 23 02:19:37 localhost sshd[23818]: Invalid user vladimir from 122.35.192.61 port 45002 Nov 23 02:19:37 localhost sshd[23818]: Received disconnect from 122.35.192.61 port 45002:11: Bye Bye [preauth] Nov 23 02:19:37 localhost sshd[23818]: Disconnected from invalid user vladimir 122.35.192.61 port 45002 [preauth] Nov 23 02:19:39 localhost sudo[22553]: pam_unix(sudo:session): session closed for user root Nov 23 02:19:41 localhost sshd[23953]: Received disconnect from 222.98.122.37 port 41452:11: Bye Bye [preauth] Nov 23 02:19:41 localhost sshd[23953]: Disconnected from authenticating user root 222.98.122.37 port 41452 [preauth] Nov 23 02:19:45 localhost sshd[23974]: Received disconnect from 154.91.170.52 port 34904:11: Bye Bye [preauth] Nov 23 02:19:45 localhost sshd[23974]: Disconnected from authenticating user root 154.91.170.52 port 34904 [preauth] Nov 23 02:19:46 localhost sudo[24004]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xyozzjkwcogkxsrchrqtmdszytocjwic ; /usr/bin/python3 Nov 23 02:19:46 localhost sudo[24004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:19:47 localhost sudo[24004]: pam_unix(sudo:session): session closed for user root Nov 23 02:19:49 localhost sshd[24091]: Invalid user p from 4.194.4.255 port 53578 Nov 23 02:19:49 localhost sshd[24091]: Received disconnect from 4.194.4.255 port 53578:11: Bye Bye [preauth] Nov 23 02:19:49 localhost sshd[24091]: Disconnected from invalid user p 4.194.4.255 port 53578 [preauth] Nov 23 02:19:52 localhost sshd[19284]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:19:54 localhost sshd[24096]: Connection closed by authenticating user root 185.156.73.233 port 33940 [preauth] Nov 23 02:19:56 localhost sshd[24098]: Accepted publickey for zuul from 38.102.83.114 port 60648 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:19:56 localhost sshd[24098]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:19:57 localhost sshd[24098]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:20:23 localhost sshd[24203]: Invalid user copyuser from 115.31.151.36 port 53868 Nov 23 02:20:23 localhost sshd[24203]: Received disconnect from 115.31.151.36 port 53868:11: Bye Bye [preauth] Nov 23 02:20:23 localhost sshd[24203]: Disconnected from invalid user copyuser 115.31.151.36 port 53868 [preauth] Nov 23 02:20:33 localhost sshd[24205]: Invalid user sherry from 197.158.254.18 port 48958 Nov 23 02:20:34 localhost sshd[24205]: Received disconnect from 197.158.254.18 port 48958:11: Bye Bye [preauth] Nov 23 02:20:34 localhost sshd[24205]: Disconnected from invalid user sherry 197.158.254.18 port 48958 [preauth] Nov 23 02:21:01 localhost sshd[24207]: Invalid user zu from 200.89.178.151 port 12967 Nov 23 02:21:01 localhost sshd[24207]: Received disconnect from 200.89.178.151 port 12967:11: Bye Bye [preauth] Nov 23 02:21:01 localhost sshd[24207]: Disconnected from invalid user zu 200.89.178.151 port 12967 [preauth] Nov 23 02:21:03 localhost sshd[24209]: Received disconnect from 222.98.122.37 port 41024:11: Bye Bye [preauth] Nov 23 02:21:03 localhost sshd[24209]: Disconnected from authenticating user root 222.98.122.37 port 41024 [preauth] Nov 23 02:21:09 localhost sshd[24211]: Invalid user test from 154.91.170.52 port 51166 Nov 23 02:21:09 localhost sshd[24211]: Received disconnect from 154.91.170.52 port 51166:11: Bye Bye [preauth] Nov 23 02:21:09 localhost sshd[24211]: Disconnected from invalid user test 154.91.170.52 port 51166 [preauth] Nov 23 02:21:10 localhost sshd[24213]: Invalid user sherry from 122.35.192.61 port 59616 Nov 23 02:21:10 localhost sshd[24213]: Received disconnect from 122.35.192.61 port 59616:11: Bye Bye [preauth] Nov 23 02:21:10 localhost sshd[24213]: Disconnected from invalid user sherry 122.35.192.61 port 59616 [preauth] Nov 23 02:21:27 localhost sshd[24215]: Invalid user sherry from 4.194.4.255 port 56438 Nov 23 02:21:27 localhost sshd[24215]: Received disconnect from 4.194.4.255 port 56438:11: Bye Bye [preauth] Nov 23 02:21:27 localhost sshd[24215]: Disconnected from invalid user sherry 4.194.4.255 port 56438 [preauth] Nov 23 02:21:35 localhost sshd[24217]: Invalid user test123 from 115.31.151.36 port 43956 Nov 23 02:21:35 localhost sshd[24217]: Received disconnect from 115.31.151.36 port 43956:11: Bye Bye [preauth] Nov 23 02:21:35 localhost sshd[24217]: Disconnected from invalid user test123 115.31.151.36 port 43956 [preauth] Nov 23 02:22:05 localhost sshd[24220]: Accepted publickey for zuul from 38.102.83.114 port 40856 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:05 localhost sshd[24220]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:06 localhost sudo[24237]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oelyebuwhupguofucrervwiyspiqyzin ; /usr/bin/python3 Nov 23 02:22:06 localhost sudo[24237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:22:13 localhost groupadd[24302]: group added to /etc/group: name=printadmin, GID=984 Nov 23 02:22:13 localhost groupadd[24302]: group added to /etc/gshadow: name=printadmin Nov 23 02:22:14 localhost groupadd[24302]: new group: name=printadmin, GID=984 Nov 23 02:22:25 localhost sshd[24362]: Invalid user local from 197.158.254.18 port 51828 Nov 23 02:22:25 localhost sshd[24362]: Received disconnect from 197.158.254.18 port 51828:11: Bye Bye [preauth] Nov 23 02:22:25 localhost sshd[24362]: Disconnected from invalid user local 197.158.254.18 port 51828 [preauth] Nov 23 02:22:25 localhost sshd[24364]: Received disconnect from 222.98.122.37 port 40618:11: Bye Bye [preauth] Nov 23 02:22:25 localhost sshd[24364]: Disconnected from authenticating user root 222.98.122.37 port 40618 [preauth] Nov 23 02:22:27 localhost sshd[1134]: Received signal 15; terminating. Nov 23 02:22:27 localhost sshd[24379]: Server listening on 0.0.0.0 port 22. Nov 23 02:22:27 localhost sshd[24379]: Server listening on :: port 22. Nov 23 02:22:29 localhost sudo[24237]: pam_unix(sudo:session): session closed for user root Nov 23 02:22:30 localhost sshd[26342]: Invalid user ftpuser from 154.91.170.52 port 35996 Nov 23 02:22:30 localhost sshd[26342]: Received disconnect from 154.91.170.52 port 35996:11: Bye Bye [preauth] Nov 23 02:22:30 localhost sshd[26342]: Disconnected from invalid user ftpuser 154.91.170.52 port 35996 [preauth] Nov 23 02:22:37 localhost sshd[26344]: Received disconnect from 200.89.178.151 port 42645:11: Bye Bye [preauth] Nov 23 02:22:37 localhost sshd[26344]: Disconnected from authenticating user root 200.89.178.151 port 42645 [preauth] Nov 23 02:22:42 localhost sshd[26348]: Accepted publickey for root from 192.168.122.11 port 46208 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:42 localhost systemd[26352]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:22:42 localhost sshd[26348]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:22:42 localhost sshd[26367]: Received disconnect from 192.168.122.11 port 46208:11: disconnected by user Nov 23 02:22:42 localhost sshd[26367]: Disconnected from user root 192.168.122.11 port 46208 Nov 23 02:22:42 localhost sshd[26348]: pam_unix(sshd:session): session closed for user root Nov 23 02:22:43 localhost sshd[26346]: Invalid user user7 from 115.31.151.36 port 40712 Nov 23 02:22:43 localhost sshd[26383]: Accepted publickey for root from 192.168.122.11 port 46224 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:43 localhost sshd[26383]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:22:43 localhost sshd[26346]: Received disconnect from 115.31.151.36 port 40712:11: Bye Bye [preauth] Nov 23 02:22:43 localhost sshd[26346]: Disconnected from invalid user user7 115.31.151.36 port 40712 [preauth] Nov 23 02:22:43 localhost sshd[26386]: Received disconnect from 192.168.122.11 port 46224:11: disconnected by user Nov 23 02:22:43 localhost sshd[26386]: Disconnected from user root 192.168.122.11 port 46224 Nov 23 02:22:43 localhost sshd[26383]: pam_unix(sshd:session): session closed for user root Nov 23 02:22:43 localhost sshd[26400]: Accepted publickey for zuul from 192.168.122.11 port 46236 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:43 localhost sshd[26400]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:43 localhost sshd[26403]: Received disconnect from 192.168.122.11 port 46236:11: disconnected by user Nov 23 02:22:43 localhost sshd[26403]: Disconnected from user zuul 192.168.122.11 port 46236 Nov 23 02:22:43 localhost sshd[26400]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:43 localhost sshd[26417]: Accepted publickey for zuul from 192.168.122.11 port 46246 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:43 localhost sshd[26417]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:43 localhost sshd[26381]: Invalid user user7 from 122.35.192.61 port 47912 Nov 23 02:22:44 localhost sshd[26420]: Received disconnect from 192.168.122.11 port 46246:11: disconnected by user Nov 23 02:22:44 localhost sshd[26420]: Disconnected from user zuul 192.168.122.11 port 46246 Nov 23 02:22:44 localhost sshd[26417]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:44 localhost sshd[26381]: Received disconnect from 122.35.192.61 port 47912:11: Bye Bye [preauth] Nov 23 02:22:44 localhost sshd[26381]: Disconnected from invalid user user7 122.35.192.61 port 47912 [preauth] Nov 23 02:22:44 localhost sshd[26434]: Accepted publickey for root from 192.168.122.11 port 46262 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:44 localhost sshd[26434]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:22:44 localhost sshd[26437]: Received disconnect from 192.168.122.11 port 46262:11: disconnected by user Nov 23 02:22:44 localhost sshd[26437]: Disconnected from user root 192.168.122.11 port 46262 Nov 23 02:22:44 localhost sshd[26434]: pam_unix(sshd:session): session closed for user root Nov 23 02:22:44 localhost sshd[26451]: Accepted publickey for zuul from 192.168.122.11 port 46268 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:44 localhost sshd[26451]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:44 localhost sshd[26454]: Received disconnect from 192.168.122.11 port 46268:11: disconnected by user Nov 23 02:22:44 localhost sshd[26454]: Disconnected from user zuul 192.168.122.11 port 46268 Nov 23 02:22:44 localhost sshd[26451]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:44 localhost sshd[26468]: Accepted publickey for zuul from 192.168.122.11 port 46276 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:44 localhost sshd[26468]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:44 localhost sshd[26471]: Received disconnect from 192.168.122.11 port 46276:11: disconnected by user Nov 23 02:22:44 localhost sshd[26471]: Disconnected from user zuul 192.168.122.11 port 46276 Nov 23 02:22:44 localhost sshd[26468]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:44 localhost sshd[26485]: Accepted publickey for zuul from 192.168.122.11 port 46292 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:44 localhost sshd[26485]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:44 localhost sshd[26488]: Received disconnect from 192.168.122.11 port 46292:11: disconnected by user Nov 23 02:22:44 localhost sshd[26488]: Disconnected from user zuul 192.168.122.11 port 46292 Nov 23 02:22:44 localhost sshd[26485]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:45 localhost sshd[26502]: Accepted publickey for zuul from 192.168.122.11 port 46296 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:45 localhost sshd[26502]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:45 localhost sshd[26505]: Received disconnect from 192.168.122.11 port 46296:11: disconnected by user Nov 23 02:22:45 localhost sshd[26505]: Disconnected from user zuul 192.168.122.11 port 46296 Nov 23 02:22:45 localhost sshd[26502]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:45 localhost sshd[26519]: Accepted publickey for zuul from 192.168.122.11 port 46306 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:45 localhost sshd[26519]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:45 localhost sshd[26522]: Received disconnect from 192.168.122.11 port 46306:11: disconnected by user Nov 23 02:22:45 localhost sshd[26522]: Disconnected from user zuul 192.168.122.11 port 46306 Nov 23 02:22:45 localhost sshd[26519]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:45 localhost sshd[26536]: Accepted publickey for zuul from 192.168.122.11 port 46316 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:45 localhost sshd[26536]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:45 localhost sshd[26539]: Received disconnect from 192.168.122.11 port 46316:11: disconnected by user Nov 23 02:22:45 localhost sshd[26539]: Disconnected from user zuul 192.168.122.11 port 46316 Nov 23 02:22:45 localhost sshd[26536]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:45 localhost sshd[26553]: Accepted publickey for zuul from 192.168.122.11 port 46318 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:45 localhost sshd[26553]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:45 localhost sshd[26556]: Received disconnect from 192.168.122.11 port 46318:11: disconnected by user Nov 23 02:22:45 localhost sshd[26556]: Disconnected from user zuul 192.168.122.11 port 46318 Nov 23 02:22:45 localhost sshd[26553]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:45 localhost sshd[26570]: Accepted publickey for zuul from 192.168.122.11 port 46324 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:46 localhost sshd[26570]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:46 localhost sshd[26573]: Received disconnect from 192.168.122.11 port 46324:11: disconnected by user Nov 23 02:22:46 localhost sshd[26573]: Disconnected from user zuul 192.168.122.11 port 46324 Nov 23 02:22:46 localhost sshd[26570]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:46 localhost sshd[26587]: Accepted publickey for zuul from 192.168.122.11 port 46334 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:46 localhost sshd[26587]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:46 localhost sshd[26590]: Received disconnect from 192.168.122.11 port 46334:11: disconnected by user Nov 23 02:22:46 localhost sshd[26590]: Disconnected from user zuul 192.168.122.11 port 46334 Nov 23 02:22:46 localhost sshd[26587]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:46 localhost sshd[26604]: Accepted publickey for zuul from 192.168.122.11 port 46338 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:46 localhost sshd[26604]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:46 localhost sshd[26607]: Received disconnect from 192.168.122.11 port 46338:11: disconnected by user Nov 23 02:22:46 localhost sshd[26607]: Disconnected from user zuul 192.168.122.11 port 46338 Nov 23 02:22:46 localhost sshd[26604]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:46 localhost sshd[26621]: Accepted publickey for zuul from 192.168.122.11 port 46346 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:46 localhost sshd[26621]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:46 localhost sshd[26624]: Received disconnect from 192.168.122.11 port 46346:11: disconnected by user Nov 23 02:22:46 localhost sshd[26624]: Disconnected from user zuul 192.168.122.11 port 46346 Nov 23 02:22:46 localhost sshd[26621]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:46 localhost sshd[26638]: Accepted publickey for zuul from 192.168.122.11 port 46356 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:46 localhost sshd[26638]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:46 localhost sshd[26641]: Received disconnect from 192.168.122.11 port 46356:11: disconnected by user Nov 23 02:22:47 localhost sshd[26641]: Disconnected from user zuul 192.168.122.11 port 46356 Nov 23 02:22:47 localhost sshd[26638]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:47 localhost sshd[26655]: Accepted publickey for zuul from 192.168.122.11 port 46358 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:47 localhost sshd[26655]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:47 localhost sshd[26658]: Received disconnect from 192.168.122.11 port 46358:11: disconnected by user Nov 23 02:22:47 localhost sshd[26658]: Disconnected from user zuul 192.168.122.11 port 46358 Nov 23 02:22:47 localhost sshd[26655]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:22:47 localhost sshd[26672]: Accepted publickey for root from 192.168.122.11 port 46372 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:47 localhost sshd[26672]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:22:56 localhost sshd[26675]: Received disconnect from 192.168.122.11 port 46372:11: disconnected by user Nov 23 02:22:56 localhost sshd[26675]: Disconnected from user root 192.168.122.11 port 46372 Nov 23 02:22:56 localhost sshd[26672]: pam_unix(sshd:session): session closed for user root Nov 23 02:22:56 localhost sshd[26884]: Accepted publickey for zuul from 192.168.122.11 port 42226 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 02:22:56 localhost sshd[26884]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 02:22:56 localhost sudo[26902]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/dnf install -y podman python3-tripleoclient util-linux lvm2 Nov 23 02:22:56 localhost sudo[26902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:23:06 localhost sshd[26908]: Received disconnect from 4.194.4.255 port 47104:11: Bye Bye [preauth] Nov 23 02:23:06 localhost sshd[26908]: Disconnected from authenticating user root 4.194.4.255 port 47104 [preauth] Nov 23 02:23:29 localhost sshd[24223]: Received disconnect from 38.102.83.114 port 40856:11: disconnected by user Nov 23 02:23:29 localhost sshd[24223]: Disconnected from user zuul 38.102.83.114 port 40856 Nov 23 02:23:29 localhost sshd[24220]: pam_unix(sshd:session): session closed for user zuul Nov 23 02:23:54 localhost sshd[27703]: Invalid user praveen from 154.91.170.52 port 54044 Nov 23 02:23:54 localhost sshd[27703]: Received disconnect from 154.91.170.52 port 54044:11: Bye Bye [preauth] Nov 23 02:23:54 localhost sshd[27703]: Disconnected from invalid user praveen 154.91.170.52 port 54044 [preauth] Nov 23 02:23:56 localhost sshd[27710]: Received disconnect from 115.31.151.36 port 39878:11: Bye Bye [preauth] Nov 23 02:23:56 localhost sshd[27710]: Disconnected from authenticating user root 115.31.151.36 port 39878 [preauth] Nov 23 02:24:09 localhost sshd[27829]: Received disconnect from 222.98.122.37 port 40006:11: Bye Bye [preauth] Nov 23 02:24:09 localhost sshd[27829]: Disconnected from authenticating user root 222.98.122.37 port 40006 [preauth] Nov 23 02:24:18 localhost sshd[27862]: Invalid user teamspeak from 122.35.192.61 port 38186 Nov 23 02:24:18 localhost sshd[27862]: Received disconnect from 122.35.192.61 port 38186:11: Bye Bye [preauth] Nov 23 02:24:18 localhost sshd[27862]: Disconnected from invalid user teamspeak 122.35.192.61 port 38186 [preauth] Nov 23 02:24:18 localhost sshd[27864]: Invalid user system from 200.89.178.151 port 17330 Nov 23 02:24:19 localhost sshd[27864]: Received disconnect from 200.89.178.151 port 17330:11: Bye Bye [preauth] Nov 23 02:24:19 localhost sshd[27864]: Disconnected from invalid user system 200.89.178.151 port 17330 [preauth] Nov 23 02:24:26 localhost sshd[27936]: Received disconnect from 197.158.254.18 port 54710:11: Bye Bye [preauth] Nov 23 02:24:26 localhost sshd[27936]: Disconnected from authenticating user root 197.158.254.18 port 54710 [preauth] Nov 23 02:24:31 localhost groupadd[27957]: group added to /etc/group: name=heat, GID=187 Nov 23 02:24:31 localhost groupadd[27957]: group added to /etc/gshadow: name=heat Nov 23 02:24:31 localhost groupadd[27957]: new group: name=heat, GID=187 Nov 23 02:24:31 localhost useradd[27964]: new user: name=heat, UID=187, GID=187, home=/var/lib/heat, shell=/sbin/nologin, from=none Nov 23 02:24:33 localhost groupadd[27982]: group added to /etc/group: name=puppet, GID=52 Nov 23 02:24:33 localhost groupadd[27982]: group added to /etc/gshadow: name=puppet Nov 23 02:24:33 localhost groupadd[27982]: new group: name=puppet, GID=52 Nov 23 02:24:33 localhost useradd[27989]: new user: name=puppet, UID=52, GID=52, home=/var/lib/puppet, shell=/sbin/nologin, from=none Nov 23 02:24:44 localhost sudo[26902]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:44 localhost sudo[30543]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test Nov 23 02:24:44 localhost sudo[30543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:44 localhost sudo[30543]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:44 localhost sudo[30547]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test --transient Nov 23 02:24:44 localhost sudo[30547]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:44 localhost sudo[30547]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:46 localhost sudo[30574]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mkdir -p /etc/os-net-config Nov 23 02:24:46 localhost sudo[30574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:46 localhost sudo[30574]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:46 localhost sudo[30578]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/tee /etc/cloud/cloud.cfg.d/99-edpm-disable-network-config.cfg Nov 23 02:24:46 localhost sudo[30578]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:46 localhost sudo[30578]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:46 localhost sudo[30581]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/systemctl enable network Nov 23 02:24:46 localhost sudo[30581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:46 localhost sudo[30581]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:46 localhost sudo[30620]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /tmp/net_config.yaml /etc/os-net-config/config.yaml Nov 23 02:24:46 localhost sudo[30620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:46 localhost sudo[30620]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:46 localhost sudo[30623]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/os-net-config -c /etc/os-net-config/config.yaml Nov 23 02:24:46 localhost sudo[30623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:47 localhost sudo[30623]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:49 localhost sudo[30643]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hostnamectl set-hostname undercloud.ooo.test Nov 23 02:24:49 localhost sudo[30643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:49 localhost sudo[30643]: pam_unix(sudo:session): session closed for user root Nov 23 02:24:49 localhost sudo[30647]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/openstack tripleo deploy --standalone --standalone-role Undercloud --stack undercloud --local-domain=ooo.test --local-ip=192.168.122.100/24 --templates=/usr/share/openstack-tripleo-heat-templates --networks-file=/usr/share/openstack-tripleo-heat-templates/network_data_undercloud.yaml --heat-native -e /usr/share/openstack-tripleo-heat-templates/environments/undercloud.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/use-dns-for-vips.yaml -e /home/zuul/containers-prepare-parameters.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/masquerade-networks.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-inspector.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/undercloud-remove-novajoin.yaml -e Nov 23 02:24:49 localhost sudo[30647]: zuul : (command continued) /usr/share/openstack-tripleo-heat-templates/environments/disable-telemetry.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/public-tls-undercloud.yaml --public-virtual-ip 192.168.122.99 --control-virtual-ip 192.168.122.99 -e /usr/share/openstack-tripleo-heat-templates/environments/ssl/tls-endpoints-public-ip.yaml -e /usr/share/openstack-tripleo-heat-templates/environments/services/undercloud-haproxy.yaml --deployment-user zuul --output-dir=/home/zuul/tripleo-deploy/undercloud -e /home/zuul/tripleo-deploy/undercloud/tripleo-config-generated-env-files/undercloud_parameters.yaml --hieradata-override=/home/zuul/hieradata_overrides_undercloud.yaml -e /home/zuul/undercloud-parameter-defaults.yaml --log-file=install-undercloud.log -e /usr/share/openstack-tripleo-heat-templates/undercloud-stack-vstate-dropin.yaml Nov 23 02:24:49 localhost sudo[30647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 02:24:51 localhost sshd[30652]: Received disconnect from 4.194.4.255 port 57048:11: Bye Bye [preauth] Nov 23 02:24:51 localhost sshd[30652]: Disconnected from authenticating user root 4.194.4.255 port 57048 [preauth] Nov 23 02:24:54 localhost sudo[30667]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/tripleo-undercloud-passwords.yaml Nov 23 02:24:54 localhost sudo[30667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 02:24:54 localhost sudo[30667]: pam_unix(sudo:session): session closed for user root Nov 23 02:25:09 localhost sshd[30673]: Invalid user system from 115.31.151.36 port 48760 Nov 23 02:25:09 localhost sshd[30673]: Received disconnect from 115.31.151.36 port 48760:11: Bye Bye [preauth] Nov 23 02:25:09 localhost sshd[30673]: Disconnected from invalid user system 115.31.151.36 port 48760 [preauth] Nov 23 02:25:17 localhost sshd[30675]: Invalid user sameer from 154.91.170.52 port 39680 Nov 23 02:25:18 localhost sshd[30675]: Received disconnect from 154.91.170.52 port 39680:11: Bye Bye [preauth] Nov 23 02:25:18 localhost sshd[30675]: Disconnected from invalid user sameer 154.91.170.52 port 39680 [preauth] Nov 23 02:25:37 localhost sshd[30679]: Invalid user teamspeak from 222.98.122.37 port 39536 Nov 23 02:25:37 localhost sshd[30679]: Received disconnect from 222.98.122.37 port 39536:11: Bye Bye [preauth] Nov 23 02:25:37 localhost sshd[30679]: Disconnected from invalid user teamspeak 222.98.122.37 port 39536 [preauth] Nov 23 02:25:52 localhost sshd[30681]: Received disconnect from 122.35.192.61 port 38946:11: Bye Bye [preauth] Nov 23 02:25:52 localhost sshd[30681]: Disconnected from authenticating user root 122.35.192.61 port 38946 [preauth] Nov 23 02:25:58 localhost sshd[30683]: Received disconnect from 200.89.178.151 port 47016:11: Bye Bye [preauth] Nov 23 02:25:58 localhost sshd[30683]: Disconnected from authenticating user root 200.89.178.151 port 47016 [preauth] Nov 23 02:26:18 localhost sshd[30685]: Received disconnect from 197.158.254.18 port 57590:11: Bye Bye [preauth] Nov 23 02:26:18 localhost sshd[30685]: Disconnected from authenticating user root 197.158.254.18 port 57590 [preauth] Nov 23 02:26:20 localhost sshd[30687]: Invalid user local from 115.31.151.36 port 46510 Nov 23 02:26:21 localhost sshd[30687]: Received disconnect from 115.31.151.36 port 46510:11: Bye Bye [preauth] Nov 23 02:26:21 localhost sshd[30687]: Disconnected from invalid user local 115.31.151.36 port 46510 [preauth] Nov 23 02:26:32 localhost sshd[30689]: Invalid user copyuser from 4.194.4.255 port 42852 Nov 23 02:26:32 localhost sshd[30689]: Received disconnect from 4.194.4.255 port 42852:11: Bye Bye [preauth] Nov 23 02:26:32 localhost sshd[30689]: Disconnected from invalid user copyuser 4.194.4.255 port 42852 [preauth] Nov 23 02:26:43 localhost sshd[30691]: Invalid user sftpuser from 154.91.170.52 port 35188 Nov 23 02:26:43 localhost sshd[30691]: Received disconnect from 154.91.170.52 port 35188:11: Bye Bye [preauth] Nov 23 02:26:43 localhost sshd[30691]: Disconnected from invalid user sftpuser 154.91.170.52 port 35188 [preauth] Nov 23 02:27:01 localhost sshd[30693]: Invalid user gui from 222.98.122.37 port 38816 Nov 23 02:27:01 localhost sshd[30693]: Received disconnect from 222.98.122.37 port 38816:11: Bye Bye [preauth] Nov 23 02:27:01 localhost sshd[30693]: Disconnected from invalid user gui 222.98.122.37 port 38816 [preauth] Nov 23 02:27:24 localhost sshd[30695]: Received disconnect from 122.35.192.61 port 45478:11: Bye Bye [preauth] Nov 23 02:27:24 localhost sshd[30695]: Disconnected from authenticating user root 122.35.192.61 port 45478 [preauth] Nov 23 02:27:33 localhost sshd[30697]: Invalid user teamspeak from 115.31.151.36 port 33102 Nov 23 02:27:33 localhost sshd[30697]: Received disconnect from 115.31.151.36 port 33102:11: Bye Bye [preauth] Nov 23 02:27:33 localhost sshd[30697]: Disconnected from invalid user teamspeak 115.31.151.36 port 33102 [preauth] Nov 23 02:27:34 localhost sshd[30699]: Received disconnect from 200.89.178.151 port 21701:11: Bye Bye [preauth] Nov 23 02:27:34 localhost sshd[30699]: Disconnected from authenticating user root 200.89.178.151 port 21701 [preauth] Nov 23 02:28:03 localhost sshd[31434]: Invalid user client from 154.91.170.52 port 53246 Nov 23 02:28:03 localhost sshd[31434]: Received disconnect from 154.91.170.52 port 53246:11: Bye Bye [preauth] Nov 23 02:28:03 localhost sshd[31434]: Disconnected from invalid user client 154.91.170.52 port 53246 [preauth] Nov 23 02:28:09 localhost sshd[31539]: Invalid user wg from 4.194.4.255 port 33816 Nov 23 02:28:09 localhost sshd[31539]: Received disconnect from 4.194.4.255 port 33816:11: Bye Bye [preauth] Nov 23 02:28:09 localhost sshd[31539]: Disconnected from invalid user wg 4.194.4.255 port 33816 [preauth] Nov 23 02:28:11 localhost sshd[31566]: Received disconnect from 197.158.254.18 port 60472:11: Bye Bye [preauth] Nov 23 02:28:11 localhost sshd[31566]: Disconnected from authenticating user root 197.158.254.18 port 60472 [preauth] Nov 23 02:28:23 localhost sshd[32023]: Invalid user anas from 222.98.122.37 port 37926 Nov 23 02:28:23 localhost sshd[32023]: Received disconnect from 222.98.122.37 port 37926:11: Bye Bye [preauth] Nov 23 02:28:23 localhost sshd[32023]: Disconnected from invalid user anas 222.98.122.37 port 37926 [preauth] Nov 23 02:28:45 localhost sshd[32292]: Received disconnect from 115.31.151.36 port 60266:11: Bye Bye [preauth] Nov 23 02:28:45 localhost sshd[32292]: Disconnected from authenticating user root 115.31.151.36 port 60266 [preauth] Nov 23 02:28:57 localhost sshd[32595]: Invalid user local from 122.35.192.61 port 34080 Nov 23 02:28:57 localhost sshd[32595]: Received disconnect from 122.35.192.61 port 34080:11: Bye Bye [preauth] Nov 23 02:28:57 localhost sshd[32595]: Disconnected from invalid user local 122.35.192.61 port 34080 [preauth] Nov 23 02:29:09 localhost groupadd[32851]: group added to /etc/group: name=apache, GID=48 Nov 23 02:29:09 localhost groupadd[32851]: group added to /etc/gshadow: name=apache Nov 23 02:29:09 localhost groupadd[32851]: new group: name=apache, GID=48 Nov 23 02:29:09 localhost useradd[32858]: new user: name=apache, UID=48, GID=48, home=/usr/share/httpd, shell=/sbin/nologin, from=none Nov 23 02:29:13 localhost sshd[33209]: Received disconnect from 200.89.178.151 port 51383:11: Bye Bye [preauth] Nov 23 02:29:13 localhost sshd[33209]: Disconnected from authenticating user root 200.89.178.151 port 51383 [preauth] Nov 23 02:29:27 localhost sshd[33679]: Invalid user vpn from 154.91.170.52 port 44032 Nov 23 02:29:27 localhost sshd[33679]: Received disconnect from 154.91.170.52 port 44032:11: Bye Bye [preauth] Nov 23 02:29:27 localhost sshd[33679]: Disconnected from invalid user vpn 154.91.170.52 port 44032 [preauth] Nov 23 02:29:49 localhost sshd[33972]: Invalid user deepak from 4.194.4.255 port 33158 Nov 23 02:29:49 localhost sshd[33972]: Received disconnect from 4.194.4.255 port 33158:11: Bye Bye [preauth] Nov 23 02:29:49 localhost sshd[33972]: Disconnected from invalid user deepak 4.194.4.255 port 33158 [preauth] Nov 23 02:29:50 localhost sshd[34018]: Invalid user swadmin from 222.98.122.37 port 37852 Nov 23 02:29:50 localhost sshd[34018]: Received disconnect from 222.98.122.37 port 37852:11: Bye Bye [preauth] Nov 23 02:29:50 localhost sshd[34018]: Disconnected from invalid user swadmin 222.98.122.37 port 37852 [preauth] Nov 23 02:30:01 localhost sshd[34164]: Invalid user p from 115.31.151.36 port 53070 Nov 23 02:30:01 localhost sshd[34164]: Received disconnect from 115.31.151.36 port 53070:11: Bye Bye [preauth] Nov 23 02:30:01 localhost sshd[34164]: Disconnected from invalid user p 115.31.151.36 port 53070 [preauth] Nov 23 02:30:06 localhost sshd[34192]: Invalid user anas from 197.158.254.18 port 35124 Nov 23 02:30:06 localhost sshd[34192]: Received disconnect from 197.158.254.18 port 35124:11: Bye Bye [preauth] Nov 23 02:30:06 localhost sshd[34192]: Disconnected from invalid user anas 197.158.254.18 port 35124 [preauth] Nov 23 02:30:17 localhost sshd[24379]: Received signal 15; terminating. Nov 23 02:30:17 localhost sshd[34403]: Server listening on 0.0.0.0 port 22. Nov 23 02:30:17 localhost sshd[34403]: Server listening on :: port 22. Nov 23 02:30:32 localhost sshd[34602]: Invalid user sam from 122.35.192.61 port 48342 Nov 23 02:30:32 localhost sshd[34602]: pam_unix(sshd:auth): check pass; user unknown Nov 23 02:30:32 localhost sshd[34602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 Nov 23 02:30:34 localhost sshd[34602]: Failed password for invalid user sam from 122.35.192.61 port 48342 ssh2 Nov 23 02:30:36 localhost sshd[34602]: Received disconnect from 122.35.192.61 port 48342:11: Bye Bye [preauth] Nov 23 02:30:36 localhost sshd[34602]: Disconnected from invalid user sam 122.35.192.61 port 48342 [preauth] Nov 23 02:30:53 localhost unix_chkpwd[35324]: password check failed for user (root) Nov 23 02:30:53 localhost sshd[35319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.170.52 user=root Nov 23 02:30:55 localhost unix_chkpwd[35365]: password check failed for user (root) Nov 23 02:30:55 localhost sshd[35341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 user=root Nov 23 02:30:56 localhost sshd[35319]: Failed password for root from 154.91.170.52 port 39054 ssh2 Nov 23 02:30:58 localhost sshd[35319]: Received disconnect from 154.91.170.52 port 39054:11: Bye Bye [preauth] Nov 23 02:30:58 localhost sshd[35319]: Disconnected from authenticating user root 154.91.170.52 port 39054 [preauth] Nov 23 02:30:58 localhost sshd[35341]: Failed password for root from 200.89.178.151 port 26070 ssh2 Nov 23 02:31:00 localhost sshd[35341]: Received disconnect from 200.89.178.151 port 26070:11: Bye Bye [preauth] Nov 23 02:31:00 localhost sshd[35341]: Disconnected from authenticating user root 200.89.178.151 port 26070 [preauth] Nov 23 07:31:09 undercloud sshd[35625]: Invalid user vpn from 80.94.95.115 port 47034 Nov 23 07:31:09 undercloud sshd[35625]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:31:09 undercloud sshd[35625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.115 Nov 23 07:31:11 undercloud sshd[35625]: Failed password for invalid user vpn from 80.94.95.115 port 47034 ssh2 Nov 23 07:31:11 undercloud sshd[35625]: Connection closed by invalid user vpn 80.94.95.115 port 47034 [preauth] Nov 23 07:31:19 undercloud sshd[35859]: Invalid user deepak from 222.98.122.37 port 37024 Nov 23 07:31:19 undercloud sshd[35859]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:31:19 undercloud sshd[35859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.122.37 Nov 23 07:31:20 undercloud unix_chkpwd[35864]: password check failed for user (root) Nov 23 07:31:20 undercloud sshd[35862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.31.151.36 user=root Nov 23 07:31:22 undercloud sshd[35859]: Failed password for invalid user deepak from 222.98.122.37 port 37024 ssh2 Nov 23 07:31:23 undercloud sshd[35862]: Failed password for root from 115.31.151.36 port 49366 ssh2 Nov 23 07:31:23 undercloud sshd[35859]: Received disconnect from 222.98.122.37 port 37024:11: Bye Bye [preauth] Nov 23 07:31:23 undercloud sshd[35859]: Disconnected from invalid user deepak 222.98.122.37 port 37024 [preauth] Nov 23 07:31:25 undercloud sshd[35862]: Received disconnect from 115.31.151.36 port 49366:11: Bye Bye [preauth] Nov 23 07:31:25 undercloud sshd[35862]: Disconnected from authenticating user root 115.31.151.36 port 49366 [preauth] Nov 23 07:31:30 undercloud sshd[36002]: Invalid user anas from 4.194.4.255 port 55962 Nov 23 07:31:30 undercloud sshd[36002]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:31:30 undercloud sshd[36002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 Nov 23 07:31:32 undercloud sshd[36002]: Failed password for invalid user anas from 4.194.4.255 port 55962 ssh2 Nov 23 07:31:33 undercloud sshd[36002]: Received disconnect from 4.194.4.255 port 55962:11: Bye Bye [preauth] Nov 23 07:31:33 undercloud sshd[36002]: Disconnected from invalid user anas 4.194.4.255 port 55962 [preauth] Nov 23 07:32:00 undercloud sshd[36392]: Invalid user swadmin from 197.158.254.18 port 37990 Nov 23 07:32:00 undercloud sshd[36392]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:32:00 undercloud sshd[36392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:32:02 undercloud sshd[36392]: Failed password for invalid user swadmin from 197.158.254.18 port 37990 ssh2 Nov 23 07:32:03 undercloud sshd[36392]: Received disconnect from 197.158.254.18 port 37990:11: Bye Bye [preauth] Nov 23 07:32:03 undercloud sshd[36392]: Disconnected from invalid user swadmin 197.158.254.18 port 37990 [preauth] Nov 23 07:32:08 undercloud unix_chkpwd[36787]: password check failed for user (root) Nov 23 07:32:08 undercloud sshd[36548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 user=root Nov 23 07:32:10 undercloud sshd[36548]: Failed password for root from 122.35.192.61 port 44752 ssh2 Nov 23 07:32:10 undercloud sshd[36548]: Received disconnect from 122.35.192.61 port 44752:11: Bye Bye [preauth] Nov 23 07:32:10 undercloud sshd[36548]: Disconnected from authenticating user root 122.35.192.61 port 44752 [preauth] Nov 23 07:32:18 undercloud sshd[36921]: Invalid user ec2-user from 154.91.170.52 port 49348 Nov 23 07:32:18 undercloud sshd[36921]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:32:18 undercloud sshd[36921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.170.52 Nov 23 07:32:20 undercloud sshd[36921]: Failed password for invalid user ec2-user from 154.91.170.52 port 49348 ssh2 Nov 23 07:32:20 undercloud sshd[36921]: Received disconnect from 154.91.170.52 port 49348:11: Bye Bye [preauth] Nov 23 07:32:20 undercloud sshd[36921]: Disconnected from invalid user ec2-user 154.91.170.52 port 49348 [preauth] Nov 23 07:32:36 undercloud sshd[37276]: Invalid user teamspeak from 200.89.178.151 port 55748 Nov 23 07:32:36 undercloud sshd[37276]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:32:36 undercloud sshd[37276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:32:38 undercloud sshd[37276]: Failed password for invalid user teamspeak from 200.89.178.151 port 55748 ssh2 Nov 23 07:32:40 undercloud sshd[37276]: Received disconnect from 200.89.178.151 port 55748:11: Bye Bye [preauth] Nov 23 07:32:40 undercloud sshd[37276]: Disconnected from invalid user teamspeak 200.89.178.151 port 55748 [preauth] Nov 23 07:32:45 undercloud sshd[37486]: Invalid user sherry from 222.98.122.37 port 36982 Nov 23 07:32:45 undercloud sshd[37486]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:32:45 undercloud sshd[37486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.122.37 Nov 23 07:32:46 undercloud sshd[37486]: Failed password for invalid user sherry from 222.98.122.37 port 36982 ssh2 Nov 23 07:32:47 undercloud sshd[37486]: Received disconnect from 222.98.122.37 port 36982:11: Bye Bye [preauth] Nov 23 07:32:47 undercloud sshd[37486]: Disconnected from invalid user sherry 222.98.122.37 port 36982 [preauth] Nov 23 07:33:06 undercloud unix_chkpwd[38344]: password check failed for user (root) Nov 23 07:33:06 undercloud sshd[38139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 user=root Nov 23 07:33:08 undercloud sshd[38139]: Failed password for root from 4.194.4.255 port 45830 ssh2 Nov 23 07:33:08 undercloud sshd[38139]: Received disconnect from 4.194.4.255 port 45830:11: Bye Bye [preauth] Nov 23 07:33:08 undercloud sshd[38139]: Disconnected from authenticating user root 4.194.4.255 port 45830 [preauth] Nov 23 07:33:15 undercloud runuser[39966]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:33:16 undercloud runuser[39966]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:33:16 undercloud runuser[40182]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:33:16 undercloud runuser[40182]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:33:27 undercloud sudo[40987]: memcached : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:33:27 undercloud sudo[40987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42457) Nov 23 07:33:27 undercloud sudo[40987]: pam_unix(sudo:session): session closed for user root Nov 23 07:33:27 undercloud sudo[41189]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:33:27 undercloud sudo[41189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:33:27 undercloud sudo[41189]: pam_unix(sudo:session): session closed for user root Nov 23 07:33:28 undercloud sudo[41323]: rabbitmq : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:33:28 undercloud sudo[41323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42439) Nov 23 07:33:28 undercloud sudo[41323]: pam_unix(sudo:session): session closed for user root Nov 23 07:33:39 undercloud sshd[41864]: Invalid user mailer from 154.91.170.52 port 56532 Nov 23 07:33:39 undercloud sshd[41864]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:33:39 undercloud sshd[41864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.170.52 Nov 23 07:33:40 undercloud sshd[41864]: Failed password for invalid user mailer from 154.91.170.52 port 56532 ssh2 Nov 23 07:33:41 undercloud sshd[41864]: Received disconnect from 154.91.170.52 port 56532:11: Bye Bye [preauth] Nov 23 07:33:41 undercloud sshd[41864]: Disconnected from invalid user mailer 154.91.170.52 port 56532 [preauth] Nov 23 07:33:41 undercloud unix_chkpwd[41938]: password check failed for user (root) Nov 23 07:33:41 undercloud sshd[41919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 user=root Nov 23 07:33:43 undercloud sshd[41919]: Failed password for root from 122.35.192.61 port 53012 ssh2 Nov 23 07:33:44 undercloud sshd[41919]: Received disconnect from 122.35.192.61 port 53012:11: Bye Bye [preauth] Nov 23 07:33:44 undercloud sshd[41919]: Disconnected from authenticating user root 122.35.192.61 port 53012 [preauth] Nov 23 07:33:53 undercloud unix_chkpwd[42174]: password check failed for user (root) Nov 23 07:33:53 undercloud sshd[42071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 user=root Nov 23 07:33:55 undercloud sshd[42071]: Failed password for root from 197.158.254.18 port 40862 ssh2 Nov 23 07:33:56 undercloud sshd[42071]: Received disconnect from 197.158.254.18 port 40862:11: Bye Bye [preauth] Nov 23 07:33:56 undercloud sshd[42071]: Disconnected from authenticating user root 197.158.254.18 port 40862 [preauth] Nov 23 07:34:07 undercloud unix_chkpwd[43853]: password check failed for user (root) Nov 23 07:34:07 undercloud sshd[43837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.122.37 user=root Nov 23 07:34:09 undercloud sshd[43837]: Failed password for root from 222.98.122.37 port 36002 ssh2 Nov 23 07:34:09 undercloud sshd[44132]: error: kex_exchange_identification: Connection closed by remote host Nov 23 07:34:09 undercloud sshd[44132]: Connection closed by 180.100.215.243 port 40332 Nov 23 07:34:09 undercloud sshd[43837]: Received disconnect from 222.98.122.37 port 36002:11: Bye Bye [preauth] Nov 23 07:34:09 undercloud sshd[43837]: Disconnected from authenticating user root 222.98.122.37 port 36002 [preauth] Nov 23 07:34:13 undercloud sshd[44267]: Invalid user ec2-user from 200.89.178.151 port 30435 Nov 23 07:34:13 undercloud sshd[44267]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:34:13 undercloud sshd[44267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:34:15 undercloud sshd[44267]: Failed password for invalid user ec2-user from 200.89.178.151 port 30435 ssh2 Nov 23 07:34:16 undercloud sshd[44267]: Received disconnect from 200.89.178.151 port 30435:11: Bye Bye [preauth] Nov 23 07:34:16 undercloud sshd[44267]: Disconnected from invalid user ec2-user 200.89.178.151 port 30435 [preauth] Nov 23 07:34:17 undercloud runuser[44527]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:34:18 undercloud runuser[44527]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:34:18 undercloud runuser[44634]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:34:19 undercloud runuser[44634]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:34:19 undercloud runuser[44782]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:34:20 undercloud runuser[44782]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:34:20 undercloud runuser[44878]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:34:21 undercloud runuser[44878]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:34:21 undercloud runuser[44930]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:34:21 undercloud runuser[44930]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:34:41 undercloud sshd[45575]: Invalid user react from 4.194.4.255 port 40946 Nov 23 07:34:41 undercloud sshd[45575]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:34:41 undercloud sshd[45575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 Nov 23 07:34:42 undercloud sshd[45659]: error: kex_exchange_identification: read: Connection reset by peer Nov 23 07:34:42 undercloud sshd[45659]: Connection reset by 45.140.17.97 port 1864 Nov 23 07:34:43 undercloud sshd[45575]: Failed password for invalid user react from 4.194.4.255 port 40946 ssh2 Nov 23 07:34:45 undercloud sshd[45575]: Received disconnect from 4.194.4.255 port 40946:11: Bye Bye [preauth] Nov 23 07:34:45 undercloud sshd[45575]: Disconnected from invalid user react 4.194.4.255 port 40946 [preauth] Nov 23 07:34:46 undercloud sudo[45973]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:46 undercloud sudo[45973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:46 undercloud sudo[45973]: pam_unix(sudo:session): session closed for user root Nov 23 07:34:46 undercloud sudo[46014]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:46 undercloud sudo[46014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:46 undercloud sudo[46014]: pam_unix(sudo:session): session closed for user root Nov 23 07:34:46 undercloud sudo[46037]: root : PWD=/ ; USER=keystone ; COMMAND=/usr/bin/keystone-manage db_sync Nov 23 07:34:46 undercloud sudo[46037]: pam_unix(sudo:session): session opened for user keystone(uid=42425) by (uid=0) Nov 23 07:34:55 undercloud sudo[46037]: pam_unix(sudo:session): session closed for user keystone Nov 23 07:34:56 undercloud sudo[46427]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:56 undercloud sudo[46427]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:56 undercloud sudo[46427]: pam_unix(sudo:session): session closed for user root Nov 23 07:34:56 undercloud su[46472]: pam_unix(su:session): session opened for user ironic(uid=42422) by (uid=0) Nov 23 07:34:56 undercloud su[46472]: pam_lastlog(su:session): file /var/log/lastlog created Nov 23 07:34:56 undercloud su[46472]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Nov 23 07:34:57 undercloud sshd[44184]: ssh_dispatch_run_fatal: Connection from authenticating user root 180.100.215.243 port 40884: Connection timed out [preauth] Nov 23 07:34:58 undercloud sshd[46474]: Invalid user gpadmin from 154.91.170.52 port 46402 Nov 23 07:34:58 undercloud sshd[46474]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:34:58 undercloud sshd[46474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.170.52 Nov 23 07:34:58 undercloud su[46472]: pam_unix(su:session): session closed for user ironic Nov 23 07:34:59 undercloud sudo[46754]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:59 undercloud sudo[46755]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:59 undercloud sudo[46757]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:34:59 undercloud sudo[46754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:59 undercloud sudo[46757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:59 undercloud sudo[46757]: pam_unix(sudo:session): session closed for user root Nov 23 07:34:59 undercloud systemd[46795]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:59 undercloud sudo[46754]: pam_unix(sudo:session): session closed for user root Nov 23 07:34:59 undercloud su[46877]: pam_unix(su:session): session opened for user ironic-inspector(uid=42461) by (uid=0) Nov 23 07:34:59 undercloud su[46877]: pam_lastlog(su:session): file /var/log/lastlog created Nov 23 07:34:59 undercloud su[46877]: pam_lastlog(su:session): unable to open /var/log/btmp: No such file or directory Nov 23 07:34:59 undercloud sudo[46755]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:34:59 undercloud sudo[46755]: pam_unix(sudo:session): session closed for user root Nov 23 07:35:00 undercloud sshd[46474]: Failed password for invalid user gpadmin from 154.91.170.52 port 46402 ssh2 Nov 23 07:35:00 undercloud su[46877]: pam_unix(su:session): session closed for user ironic-inspector Nov 23 07:35:00 undercloud sshd[46474]: Received disconnect from 154.91.170.52 port 46402:11: Bye Bye [preauth] Nov 23 07:35:00 undercloud sshd[46474]: Disconnected from invalid user gpadmin 154.91.170.52 port 46402 [preauth] Nov 23 07:35:17 undercloud sshd[47563]: Invalid user anas from 122.35.192.61 port 56658 Nov 23 07:35:17 undercloud sshd[47563]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:35:17 undercloud sshd[47563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 Nov 23 07:35:19 undercloud sshd[47563]: Failed password for invalid user anas from 122.35.192.61 port 56658 ssh2 Nov 23 07:35:19 undercloud sshd[47563]: Received disconnect from 122.35.192.61 port 56658:11: Bye Bye [preauth] Nov 23 07:35:19 undercloud sshd[47563]: Disconnected from invalid user anas 122.35.192.61 port 56658 [preauth] Nov 23 07:35:31 undercloud unix_chkpwd[47676]: password check failed for user (root) Nov 23 07:35:31 undercloud sshd[47642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.122.37 user=root Nov 23 07:35:33 undercloud sshd[47642]: Failed password for root from 222.98.122.37 port 35490 ssh2 Nov 23 07:35:33 undercloud sshd[47642]: Received disconnect from 222.98.122.37 port 35490:11: Bye Bye [preauth] Nov 23 07:35:33 undercloud sshd[47642]: Disconnected from authenticating user root 222.98.122.37 port 35490 [preauth] Nov 23 07:35:44 undercloud sshd[47885]: Invalid user dut from 197.158.254.18 port 43740 Nov 23 07:35:44 undercloud sshd[47885]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:35:44 undercloud sshd[47885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:35:46 undercloud sshd[47885]: Failed password for invalid user dut from 197.158.254.18 port 43740 ssh2 Nov 23 07:35:47 undercloud sshd[47885]: Received disconnect from 197.158.254.18 port 43740:11: Bye Bye [preauth] Nov 23 07:35:47 undercloud sshd[47885]: Disconnected from invalid user dut 197.158.254.18 port 43740 [preauth] Nov 23 07:35:56 undercloud sshd[48002]: Invalid user local from 200.89.178.151 port 60121 Nov 23 07:35:56 undercloud sshd[48002]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:35:56 undercloud sshd[48002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:35:58 undercloud sshd[48002]: Failed password for invalid user local from 200.89.178.151 port 60121 ssh2 Nov 23 07:35:59 undercloud sshd[48002]: Received disconnect from 200.89.178.151 port 60121:11: Bye Bye [preauth] Nov 23 07:35:59 undercloud sshd[48002]: Disconnected from invalid user local 200.89.178.151 port 60121 [preauth] Nov 23 07:36:20 undercloud sshd[48362]: Invalid user local from 4.194.4.255 port 36830 Nov 23 07:36:20 undercloud sshd[48362]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:36:20 undercloud sshd[48362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 Nov 23 07:36:22 undercloud sshd[48362]: Failed password for invalid user local from 4.194.4.255 port 36830 ssh2 Nov 23 07:36:23 undercloud sshd[48362]: Received disconnect from 4.194.4.255 port 36830:11: Bye Bye [preauth] Nov 23 07:36:23 undercloud sshd[48362]: Disconnected from invalid user local 4.194.4.255 port 36830 [preauth] Nov 23 07:36:37 undercloud sshd[48717]: error: kex_exchange_identification: Connection closed by remote host Nov 23 07:36:37 undercloud sshd[48717]: Connection closed by 167.99.98.244 port 47146 Nov 23 07:36:53 undercloud unix_chkpwd[49262]: password check failed for user (root) Nov 23 07:36:53 undercloud sshd[48959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 user=root Nov 23 07:36:56 undercloud sshd[48959]: Failed password for root from 122.35.192.61 port 59686 ssh2 Nov 23 07:36:58 undercloud sshd[48959]: Received disconnect from 122.35.192.61 port 59686:11: Bye Bye [preauth] Nov 23 07:36:58 undercloud sshd[48959]: Disconnected from authenticating user root 122.35.192.61 port 59686 [preauth] Nov 23 07:37:18 undercloud sudo[50076]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:18 undercloud sudo[50076]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:18 undercloud sudo[50099]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:18 undercloud sudo[50099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:18 undercloud sudo[50076]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:18 undercloud sudo[50099]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:19 undercloud sudo[50419]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:19 undercloud sudo[50419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:19 undercloud sudo[50425]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:19 undercloud sudo[50425]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:19 undercloud sudo[50419]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:19 undercloud sudo[50425]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:19 undercloud sudo[50464]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:19 undercloud sudo[50464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:19 undercloud sudo[50473]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:19 undercloud sudo[50473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:19 undercloud sudo[50464]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:19 undercloud sudo[50473]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:20 undercloud sudo[50792]: ironic : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:20 undercloud sudo[50812]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:20 undercloud systemd[50808]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:20 undercloud sudo[50812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:20 undercloud sudo[50812]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:20 undercloud sudo[50792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42422) Nov 23 07:37:20 undercloud sudo[50792]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:20 undercloud sudo[50902]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/neutron-openvswitch-agent --privsep_context neutron.privileged.ovs_vsctl_cmd --privsep_sock_path /tmp/tmprcw4u04o/privsep.sock Nov 23 07:37:20 undercloud sudo[50902]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:21 undercloud sudo[50954]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:21 undercloud sudo[50954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:21 undercloud sudo[50954]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:21 undercloud sudo[50902]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:21 undercloud sudo[51089]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:21 undercloud sudo[51089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:21 undercloud sudo[51089]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:22 undercloud sudo[51209]: ironic-inspector : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:22 undercloud sudo[51209]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42461) Nov 23 07:37:22 undercloud sudo[51209]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:23 undercloud sudo[51309]: root : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/kolla_set_configs Nov 23 07:37:23 undercloud sudo[51309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:37:23 undercloud sudo[51309]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:25 undercloud sudo[51395]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/common --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmpzgddx1k5/privsep.sock Nov 23 07:37:25 undercloud sudo[51395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:26 undercloud sudo[51395]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:27 undercloud sudo[51423]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/openvswitch_agent.ini --config-dir /etc/neutron/conf.d/common --privsep_context neutron.privileged.ovs_vsctl_cmd --privsep_sock_path /tmp/tmp7xkd_jei/privsep.sock Nov 23 07:37:27 undercloud sudo[51423]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:37:27 undercloud sudo[51423]: pam_unix(sudo:session): session closed for user root Nov 23 07:37:39 undercloud unix_chkpwd[52064]: password check failed for user (root) Nov 23 07:37:39 undercloud sshd[52015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 user=root Nov 23 07:37:42 undercloud sshd[52015]: Failed password for root from 200.89.178.151 port 34810 ssh2 Nov 23 07:37:43 undercloud unix_chkpwd[52293]: password check failed for user (root) Nov 23 07:37:43 undercloud sshd[52136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 user=root Nov 23 07:37:43 undercloud sshd[52015]: Received disconnect from 200.89.178.151 port 34810:11: Bye Bye [preauth] Nov 23 07:37:43 undercloud sshd[52015]: Disconnected from authenticating user root 200.89.178.151 port 34810 [preauth] Nov 23 07:37:45 undercloud sshd[52136]: Failed password for root from 197.158.254.18 port 46624 ssh2 Nov 23 07:37:47 undercloud sshd[52136]: Received disconnect from 197.158.254.18 port 46624:11: Bye Bye [preauth] Nov 23 07:37:47 undercloud sshd[52136]: Disconnected from authenticating user root 197.158.254.18 port 46624 [preauth] Nov 23 07:38:04 undercloud unix_chkpwd[53146]: password check failed for user (root) Nov 23 07:38:04 undercloud sshd[53106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 user=root Nov 23 07:38:06 undercloud sshd[53106]: Failed password for root from 4.194.4.255 port 51132 ssh2 Nov 23 07:38:08 undercloud sshd[53106]: Received disconnect from 4.194.4.255 port 51132:11: Bye Bye [preauth] Nov 23 07:38:08 undercloud sshd[53106]: Disconnected from authenticating user root 4.194.4.255 port 51132 [preauth] Nov 23 07:38:30 undercloud unix_chkpwd[54478]: password check failed for user (root) Nov 23 07:38:30 undercloud sshd[54435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 user=root Nov 23 07:38:33 undercloud sshd[54435]: Failed password for root from 122.35.192.61 port 45786 ssh2 Nov 23 07:38:35 undercloud sshd[54435]: Received disconnect from 122.35.192.61 port 45786:11: Bye Bye [preauth] Nov 23 07:38:35 undercloud sshd[54435]: Disconnected from authenticating user root 122.35.192.61 port 45786 [preauth] Nov 23 07:38:56 undercloud sudo[55288]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/tripleo-heat-installer-templates Nov 23 07:38:56 undercloud sudo[55288]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55288]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[55291]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/tripleo-deploy/undercloud/undercloud-ansible-y5sgj5st Nov 23 07:38:56 undercloud sudo[55291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55291]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[55294]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R zuul /home/zuul/.tripleo Nov 23 07:38:56 undercloud sudo[55294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55294]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[55297]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /etc/openstack/clouds.yaml /home/zuul/.config/openstack Nov 23 07:38:56 undercloud sudo[55297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55297]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[55300]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chmod 0600 /home/zuul/.config/openstack/clouds.yaml Nov 23 07:38:56 undercloud sudo[55300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55300]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[55303]: root : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R 1000:1000 /home/zuul/.config Nov 23 07:38:56 undercloud sudo[55303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Nov 23 07:38:56 undercloud sudo[55303]: pam_unix(sudo:session): session closed for user root Nov 23 07:38:56 undercloud sudo[30647]: pam_unix(sudo:session): session closed for user root Nov 23 07:39:13 undercloud sshd[55514]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Nov 23 07:39:13 undercloud sshd[55514]: banner exchange: Connection from 64.227.43.181 port 44652: invalid format Nov 23 07:39:13 undercloud sshd[55515]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" Nov 23 07:39:13 undercloud sshd[55515]: banner exchange: Connection from 64.227.43.181 port 44666: invalid format Nov 23 07:39:20 undercloud sshd[55572]: Invalid user test123 from 200.89.178.151 port 64494 Nov 23 07:39:20 undercloud sshd[55572]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:39:20 undercloud sshd[55572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:39:22 undercloud sshd[55572]: Failed password for invalid user test123 from 200.89.178.151 port 64494 ssh2 Nov 23 07:39:22 undercloud sudo[55718]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/l3_agent.ini --config-dir /etc/neutron/conf.d/neutron-l3-agent --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmpaqn83h5o/privsep.sock Nov 23 07:39:22 undercloud sudo[55718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:39:23 undercloud sudo[55718]: pam_unix(sudo:session): session closed for user root Nov 23 07:39:24 undercloud sshd[55572]: Received disconnect from 200.89.178.151 port 64494:11: Bye Bye [preauth] Nov 23 07:39:24 undercloud sshd[55572]: Disconnected from invalid user test123 200.89.178.151 port 64494 [preauth] Nov 23 07:39:28 undercloud sudo[55957]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mkdir /tmp/ipa-data Nov 23 07:39:28 undercloud sudo[55957]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:39:28 undercloud sudo[55957]: pam_unix(sudo:session): session closed for user root Nov 23 07:39:28 undercloud sudo[55960]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman run -d --name freeipa-server-container --sysctl net.ipv6.conf.lo.disable_ipv6=0 --security-opt seccomp=unconfined --ip 10.255.255.25 -e IPA_SERVER_IP=10.255.255.25 -e PASSWORD=fce95318204114530f31f885c9df588f -h ipa.ooo.test -p 53:53/udp -p 53:53 -p 80:80 -p 443:443 -p 389:389 -p 636:636 -p 88:88 -p 464:464 -p 88:88/udp -p 464:464/udp --read-only --tmpfs /run --tmpfs /tmp -v /sys/fs/cgroup:/sys/fs/cgroup:ro -v /tmp/ipa-data:/data:Z quay.io/freeipa/freeipa-server:fedora-41 no-exit -U -r OOO.TEST --setup-dns --no-reverse --no-ntp --no-dnssec-validation --auto-forwarders Nov 23 07:39:28 undercloud sudo[55960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:39:43 undercloud unix_chkpwd[56400]: password check failed for user (root) Nov 23 07:39:43 undercloud sshd[56198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 user=root Nov 23 07:39:45 undercloud sshd[56545]: Invalid user dut from 4.194.4.255 port 43100 Nov 23 07:39:45 undercloud sshd[56545]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:39:45 undercloud sshd[56545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 Nov 23 07:39:45 undercloud sshd[56198]: Failed password for root from 197.158.254.18 port 49514 ssh2 Nov 23 07:39:45 undercloud sshd[56198]: Received disconnect from 197.158.254.18 port 49514:11: Bye Bye [preauth] Nov 23 07:39:45 undercloud sshd[56198]: Disconnected from authenticating user root 197.158.254.18 port 49514 [preauth] Nov 23 07:39:46 undercloud sudo[55960]: pam_unix(sudo:session): session closed for user root Nov 23 07:39:46 undercloud sudo[57091]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/tail -F /tmp/ipa-data/var/log/ipaserver-install.log Nov 23 07:39:46 undercloud sudo[57091]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:39:47 undercloud sshd[56545]: Failed password for invalid user dut from 4.194.4.255 port 43100 ssh2 Nov 23 07:39:48 undercloud sshd[56545]: Received disconnect from 4.194.4.255 port 43100:11: Bye Bye [preauth] Nov 23 07:39:48 undercloud sshd[56545]: Disconnected from invalid user dut 4.194.4.255 port 43100 [preauth] Nov 23 07:40:05 undercloud sshd[60088]: Invalid user admin from 122.35.192.61 port 56032 Nov 23 07:40:05 undercloud sshd[60088]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:40:05 undercloud sshd[60088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 Nov 23 07:40:07 undercloud sshd[60088]: Failed password for invalid user admin from 122.35.192.61 port 56032 ssh2 Nov 23 07:40:08 undercloud sshd[60088]: Received disconnect from 122.35.192.61 port 56032:11: Bye Bye [preauth] Nov 23 07:40:08 undercloud sshd[60088]: Disconnected from invalid user admin 122.35.192.61 port 56032 [preauth] Nov 23 07:40:56 undercloud sshd[61322]: Invalid user p from 200.89.178.151 port 39175 Nov 23 07:40:56 undercloud sshd[61322]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:40:56 undercloud sshd[61322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:40:58 undercloud sshd[61322]: Failed password for invalid user p from 200.89.178.151 port 39175 ssh2 Nov 23 07:40:58 undercloud sshd[61322]: Received disconnect from 200.89.178.151 port 39175:11: Bye Bye [preauth] Nov 23 07:40:58 undercloud sshd[61322]: Disconnected from invalid user p 200.89.178.151 port 39175 [preauth] Nov 23 07:41:25 undercloud unix_chkpwd[62436]: password check failed for user (root) Nov 23 07:41:25 undercloud sshd[62275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 user=root Nov 23 07:41:27 undercloud sshd[62275]: Failed password for root from 4.194.4.255 port 37326 ssh2 Nov 23 07:41:27 undercloud sshd[62275]: Received disconnect from 4.194.4.255 port 37326:11: Bye Bye [preauth] Nov 23 07:41:27 undercloud sshd[62275]: Disconnected from authenticating user root 4.194.4.255 port 37326 [preauth] Nov 23 07:41:35 undercloud sshd[62733]: Invalid user sam from 197.158.254.18 port 52396 Nov 23 07:41:35 undercloud sshd[62733]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:41:35 undercloud sshd[62733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:41:37 undercloud sshd[62733]: Failed password for invalid user sam from 197.158.254.18 port 52396 ssh2 Nov 23 07:41:37 undercloud sshd[62733]: Received disconnect from 197.158.254.18 port 52396:11: Bye Bye [preauth] Nov 23 07:41:37 undercloud sshd[62733]: Disconnected from invalid user sam 197.158.254.18 port 52396 [preauth] Nov 23 07:41:44 undercloud sshd[62969]: Invalid user ftpuser from 122.35.192.61 port 39784 Nov 23 07:41:44 undercloud sshd[62969]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:41:44 undercloud sshd[62969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 Nov 23 07:41:46 undercloud sshd[62969]: Failed password for invalid user ftpuser from 122.35.192.61 port 39784 ssh2 Nov 23 07:41:47 undercloud sshd[62969]: Received disconnect from 122.35.192.61 port 39784:11: Bye Bye [preauth] Nov 23 07:41:47 undercloud sshd[62969]: Disconnected from invalid user ftpuser 122.35.192.61 port 39784 [preauth] Nov 23 07:42:16 undercloud sshd[64021]: Invalid user ubuntu from 80.94.95.116 port 20870 Nov 23 07:42:16 undercloud sshd[64021]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:42:16 undercloud sshd[64021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 Nov 23 07:42:18 undercloud sshd[64021]: Failed password for invalid user ubuntu from 80.94.95.116 port 20870 ssh2 Nov 23 07:42:19 undercloud sshd[64021]: Connection closed by invalid user ubuntu 80.94.95.116 port 20870 [preauth] Nov 23 07:42:21 undercloud sudo[64333]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf privsep-helper --config-file /usr/share/neutron/neutron-dist.conf --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/dhcp_agent.ini --config-dir /etc/neutron/conf.d/neutron-dhcp-agent --privsep_context neutron.privileged.default --privsep_sock_path /tmp/tmpimjifwa3/privsep.sock Nov 23 07:42:21 undercloud sudo[64333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:42:22 undercloud sudo[64333]: pam_unix(sudo:session): session closed for user root Nov 23 07:42:23 undercloud sudo[64386]: neutron : PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf Nov 23 07:42:23 undercloud sudo[64386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=42435) Nov 23 07:42:31 undercloud sshd[64788]: Invalid user ftpuser from 200.89.178.151 port 13844 Nov 23 07:42:31 undercloud sshd[64788]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:42:31 undercloud sshd[64788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:42:33 undercloud sshd[64788]: Failed password for invalid user ftpuser from 200.89.178.151 port 13844 ssh2 Nov 23 07:42:34 undercloud sshd[64788]: Received disconnect from 200.89.178.151 port 13844:11: Bye Bye [preauth] Nov 23 07:42:34 undercloud sshd[64788]: Disconnected from invalid user ftpuser 200.89.178.151 port 13844 [preauth] Nov 23 07:43:08 undercloud unix_chkpwd[66172]: password check failed for user (root) Nov 23 07:43:08 undercloud sshd[66089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 user=root Nov 23 07:43:11 undercloud sshd[66089]: Failed password for root from 4.194.4.255 port 44550 ssh2 Nov 23 07:43:13 undercloud sshd[66089]: Received disconnect from 4.194.4.255 port 44550:11: Bye Bye [preauth] Nov 23 07:43:13 undercloud sshd[66089]: Disconnected from authenticating user root 4.194.4.255 port 44550 [preauth] Nov 23 07:43:29 undercloud sshd[66738]: Invalid user ftpuser from 197.158.254.18 port 55268 Nov 23 07:43:29 undercloud sshd[66738]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:43:29 undercloud sshd[66738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:43:31 undercloud sshd[66738]: Failed password for invalid user ftpuser from 197.158.254.18 port 55268 ssh2 Nov 23 07:43:33 undercloud sshd[66738]: Received disconnect from 197.158.254.18 port 55268:11: Bye Bye [preauth] Nov 23 07:43:33 undercloud sshd[66738]: Disconnected from invalid user ftpuser 197.158.254.18 port 55268 [preauth] Nov 23 07:43:42 undercloud sshd[67454]: error: kex_exchange_identification: banner line contains invalid characters Nov 23 07:43:42 undercloud sshd[67454]: banner exchange: Connection from 64.62.156.24 port 33264: invalid format Nov 23 07:44:06 undercloud sshd[68536]: Invalid user wg from 200.89.178.151 port 43530 Nov 23 07:44:06 undercloud sshd[68536]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:44:06 undercloud sshd[68536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.151 Nov 23 07:44:08 undercloud sshd[68536]: Failed password for invalid user wg from 200.89.178.151 port 43530 ssh2 Nov 23 07:44:08 undercloud sshd[68536]: Received disconnect from 200.89.178.151 port 43530:11: Bye Bye [preauth] Nov 23 07:44:08 undercloud sshd[68536]: Disconnected from invalid user wg 200.89.178.151 port 43530 [preauth] Nov 23 07:44:50 undercloud unix_chkpwd[69580]: password check failed for user (root) Nov 23 07:44:50 undercloud sshd[69578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.4.255 user=root Nov 23 07:44:52 undercloud sshd[69578]: Failed password for root from 4.194.4.255 port 40942 ssh2 Nov 23 07:44:53 undercloud sshd[69578]: Received disconnect from 4.194.4.255 port 40942:11: Bye Bye [preauth] Nov 23 07:44:53 undercloud sshd[69578]: Disconnected from authenticating user root 4.194.4.255 port 40942 [preauth] Nov 23 07:45:22 undercloud sshd[70189]: Invalid user p from 197.158.254.18 port 58138 Nov 23 07:45:22 undercloud sshd[70189]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:45:22 undercloud sshd[70189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:45:23 undercloud sshd[70189]: Failed password for invalid user p from 197.158.254.18 port 58138 ssh2 Nov 23 07:45:25 undercloud sshd[70189]: Received disconnect from 197.158.254.18 port 58138:11: Bye Bye [preauth] Nov 23 07:45:25 undercloud sshd[70189]: Disconnected from invalid user p 197.158.254.18 port 58138 [preauth] Nov 23 07:45:29 undercloud sudo[70385]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/mv ipa_resolv.conf /etc/resolv.conf Nov 23 07:45:29 undercloud sudo[70385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:45:29 undercloud sudo[70385]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:30 undercloud sudo[57091]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:33 undercloud sshd[70666]: Accepted publickey for zuul from 192.168.122.100 port 53022 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 07:45:33 undercloud sshd[70666]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 07:45:34 undercloud sudo[70787]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oupqqymbqwmtgdhgefetgxjjltcqycpq ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883933.807314-70664-121455334102813/AnsiballZ_setup.py Nov 23 07:45:34 undercloud sudo[70787]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:36 undercloud sudo[70787]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:37 undercloud sudo[71273]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icchnpouarxisjvfiorvqoqwvbfdsoct ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883937.3308015-71189-110968358511117/AnsiballZ_dnf.py Nov 23 07:45:37 undercloud sudo[71273]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:40 undercloud sudo[71273]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:41 undercloud sudo[71405]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fngownzluizzwqzkbrvzmxebqondcaau ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883941.4669206-71324-250476589517484/AnsiballZ_ipaclient_test.py Nov 23 07:45:41 undercloud sudo[71405]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:42 undercloud sudo[71405]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:43 undercloud sudo[71516]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dskbihcdnvabdanyfohgllkyspwskgxj ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883942.6950064-71435-250702091388852/AnsiballZ_file.py Nov 23 07:45:43 undercloud sudo[71516]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:43 undercloud sudo[71516]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:43 undercloud sudo[71620]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qjcseofsaogbshemqlkzvkkmdhkwpezj ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883943.3611062-71535-47489772934486/AnsiballZ_ipaclient_setup_ntp.py Nov 23 07:45:43 undercloud sudo[71620]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:51 undercloud sudo[71620]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:51 undercloud sudo[71826]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bsyezohipbmjxfuyzeavbixdryaabgkr ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883951.3613253-71741-158888063903885/AnsiballZ_ipaclient_test_keytab.py Nov 23 07:45:51 undercloud sudo[71826]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:52 undercloud sudo[71826]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:53 undercloud sudo[72049]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xldsrdkhsnmlbrndkymsebemxjyqhmau ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883953.262802-71919-203876558914347/AnsiballZ_ipaclient_set_hostname.py Nov 23 07:45:53 undercloud sudo[72049]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:54 undercloud sudo[72049]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:55 undercloud sudo[72158]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hbunhsvahgwlchduasfrmtjudifberoc ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883954.6560817-72073-260604359716306/AnsiballZ_ipaclient_temp_krb5.py Nov 23 07:45:55 undercloud sudo[72158]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:55 undercloud sudo[72158]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:56 undercloud sudo[72333]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mgqvocqdogowtchigwyxqecehcaojpst ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883955.8925283-72245-259596486271308/AnsiballZ_ipaclient_join.py Nov 23 07:45:56 undercloud sudo[72333]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:58 undercloud sudo[72333]: pam_unix(sudo:session): session closed for user root Nov 23 07:45:59 undercloud sudo[72477]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-varxbppsdghhedtxvgheuuquwiifbwnx ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883958.7765937-72392-76284444874167/AnsiballZ_ipaclient_ipa_conf.py Nov 23 07:45:59 undercloud sudo[72477]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:45:59 undercloud sudo[72477]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:00 undercloud sudo[72582]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cusdmtujhjxkabhhtukcmswasypzjvoa ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883960.0159674-72501-13971517294887/AnsiballZ_ipaclient_setup_sssd.py Nov 23 07:46:00 undercloud sudo[72582]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:01 undercloud sudo[72582]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:01 undercloud sudo[72687]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jauyjmxxfnvfqtobeuxlsirbakkqucji ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883961.224746-72606-106289757047008/AnsiballZ_ipaclient_api.py Nov 23 07:46:01 undercloud sudo[72687]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:04 undercloud sudo[72687]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:04 undercloud sudo[72920]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sstcxeozdaauedsilgusowneydyxzqmw ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883964.4337149-72810-237251547113751/AnsiballZ_ipaclient_setup_nss.py Nov 23 07:46:04 undercloud sudo[72920]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:10 undercloud sudo[72920]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:11 undercloud sudo[73297]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rhtzlvbtplxhgczbxgmvnclgswbofapn ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883970.837646-73210-84851454573267/AnsiballZ_ipaclient_setup_ssh.py Nov 23 07:46:11 undercloud sudo[73297]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:11 undercloud sshd[34403]: Received signal 15; terminating. Nov 23 07:46:11 undercloud sshd[73309]: Server listening on 0.0.0.0 port 22. Nov 23 07:46:11 undercloud sshd[73309]: Server listening on :: port 22. Nov 23 07:46:11 undercloud sudo[73297]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:12 undercloud sudo[73424]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-szgpqderoanewiznaoganpajghofwcwq ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883972.1705961-73329-112211661239642/AnsiballZ_ipaclient_setup_automount.py Nov 23 07:46:12 undercloud sudo[73424]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:13 undercloud sudo[73424]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:13 undercloud sudo[73543]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-izuyaveuwyjhckhaodaxuzduqojrdbyh ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883973.4475107-73452-107415496643121/AnsiballZ_ipaclient_setup_nis.py Nov 23 07:46:13 undercloud sudo[73543]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:14 undercloud sudo[73543]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:15 undercloud sudo[73708]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dekbsobmhlgueeofjsrluebnglccurbm ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883975.037742-73613-155905156135550/AnsiballZ_file.py Nov 23 07:46:15 undercloud sudo[73708]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:15 undercloud sudo[73708]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:16 undercloud sudo[73820]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pibwrypeadfzscvkztsytslueeortisq ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883975.6982758-73729-268554835923842/AnsiballZ_ipaclient_setup_krb5.py Nov 23 07:46:16 undercloud sudo[73820]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:16 undercloud sudo[73820]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:17 undercloud sudo[73945]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nkpvonponfrtuvllsekdohlzihjfthnr ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883976.9283204-73850-155669117830417/AnsiballZ_ipaclient_setup_certmonger.py Nov 23 07:46:17 undercloud sudo[73945]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:18 undercloud sudo[73945]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:18 undercloud sudo[74102]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cnhikrmleqwrllagpdwlmrvbdsvuhwoh ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883978.3234909-74007-109419842643053/AnsiballZ_file.py Nov 23 07:46:18 undercloud sudo[74102]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:18 undercloud sudo[74102]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:19 undercloud sudo[74214]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dmudtbojotsolnyswhekhobespvcwxxc ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883978.9666524-74123-202092245101148/AnsiballZ_file.py Nov 23 07:46:19 undercloud sudo[74214]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:19 undercloud sudo[74214]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:19 undercloud sudo[74330]: zuul : TTY=pts/1 ; PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aylvteryupgwyvcspsmaehnydtuhwkvj ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883979.6578543-74239-63342889786758/AnsiballZ_file.py Nov 23 07:46:19 undercloud sudo[74330]: pam_unix(sudo:session): session opened for user root(uid=0) by zuul(uid=1000) Nov 23 07:46:20 undercloud sudo[74330]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:20 undercloud sudo[74370]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oqgldvzxkivjdagohsufzydgyevevlyu ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883980.3822498-74357-275174926116386/AnsiballZ_setup.py Nov 23 07:46:20 undercloud sudo[74370]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:23 undercloud sudo[74370]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:24 undercloud sudo[74574]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bhlerqhcglnymorowhghibawuhefzghz ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883983.769339-74562-24706744372647/AnsiballZ_user.py Nov 23 07:46:24 undercloud sudo[74574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:24 undercloud useradd[74643]: new group: name=tripleo-admin, GID=1002 Nov 23 07:46:24 undercloud useradd[74643]: new user: name=tripleo-admin, UID=1002, GID=1002, home=/home/tripleo-admin, shell=/bin/bash, from=none Nov 23 07:46:24 undercloud sudo[74574]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:24 undercloud sudo[74693]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xknfhwtgwzqybtmhkdoqhsffkybaqgto ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883984.6747181-74681-131839778953945/AnsiballZ_stat.py Nov 23 07:46:24 undercloud sudo[74693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:25 undercloud sudo[74693]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:25 undercloud sudo[74701]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uqbrmytqcntrwcqqgqjhrozxmjkgofnd ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883984.6747181-74681-131839778953945/AnsiballZ_copy.py Nov 23 07:46:25 undercloud sudo[74701]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:25 undercloud sudo[74701]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:25 undercloud sudo[74723]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ocxpcxgqrzqrwlmckqmbdsfcigpdtbax ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883985.5995965-74711-149665224227929/AnsiballZ_file.py Nov 23 07:46:25 undercloud sudo[74723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:25 undercloud sudo[74723]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:26 undercloud sudo[74741]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mronbgwjwwdzekzkockkihquaculewoy ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883986.0186908-74729-170251647103559/AnsiballZ_file.py Nov 23 07:46:26 undercloud sudo[74741]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:26 undercloud sudo[74741]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:26 undercloud sudo[74818]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-owvhvvkjarnyosqbjrpryvdrdcbykzmc ; /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883986.405846-74806-141762956725277/AnsiballZ_file.py Nov 23 07:46:26 undercloud sudo[74818]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:26 undercloud sudo[74818]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:27 undercloud sudo[74881]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ektwscoxbivustzrynoadxayzlqjwomi ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883987.1347513-74869-148554451600355/AnsiballZ_setup.py Nov 23 07:46:27 undercloud sudo[74881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:29 undercloud sudo[74881]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:30 undercloud sudo[75083]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oeqehyfbmyyjucwcmuzyilajqacsrtvq ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883989.9221497-75071-35029938377948/AnsiballZ_command.py Nov 23 07:46:30 undercloud sudo[75083]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:30 undercloud sudo[75083]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:30 undercloud sudo[75112]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-etlwgydefkymivlkdekpnguzzsjbiabz ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883990.6296206-75096-217429707054326/AnsiballZ_ipapermission.py Nov 23 07:46:30 undercloud sudo[75112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:32 undercloud sudo[75112]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:32 undercloud sudo[75133]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ybjxzedpyoofdqybrqqiolyyotgnspwa ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883992.2858691-75096-59848883985964/AnsiballZ_ipapermission.py Nov 23 07:46:32 undercloud sudo[75133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:33 undercloud sudo[75133]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:33 undercloud sudo[75157]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-egzztzdsjvfixtzcnsfmpddjsdnhzvdp ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883993.8066752-75096-251320650694461/AnsiballZ_ipapermission.py Nov 23 07:46:33 undercloud sudo[75157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:35 undercloud sudo[75157]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:35 undercloud sudo[75320]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkbjxnprjimyzqslttuavnpmrdhjzafa ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883995.116195-75096-155765288506852/AnsiballZ_ipapermission.py Nov 23 07:46:35 undercloud sudo[75320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:36 undercloud sudo[75320]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:36 undercloud sudo[75443]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ahyahnupnjvvzzbsxnowivtxzsijpnlz ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883996.1957252-75431-125572581156272/AnsiballZ_ipaprivilege.py Nov 23 07:46:36 undercloud sudo[75443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:37 undercloud sudo[75443]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:37 undercloud sudo[75501]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xpwhhawiihzljoaacfeatykjirfhefdg ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883997.6220024-75489-174776125725290/AnsiballZ_ipaprivilege.py Nov 23 07:46:37 undercloud sudo[75501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:39 undercloud sudo[75501]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:39 undercloud sudo[75544]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ybjsnpkjwugabvqoymobjlwidtaqopiq ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763883999.157554-75489-218313706973921/AnsiballZ_ipaprivilege.py Nov 23 07:46:39 undercloud sudo[75544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:40 undercloud sudo[75544]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:40 undercloud sudo[75571]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcowesxvcbsuhyewounaqgikviykztof ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884000.4869363-75489-28957520024416/AnsiballZ_ipaprivilege.py Nov 23 07:46:40 undercloud sudo[75571]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:41 undercloud sudo[75571]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:41 undercloud sudo[75591]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dsygwlgbvuvmezpajikcfjyqkechpooy ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884001.43721-75489-205955027638053/AnsiballZ_ipaprivilege.py Nov 23 07:46:41 undercloud sudo[75591]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:42 undercloud sudo[75591]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:42 undercloud sudo[75611]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wnddrskkyqxshztbouszqgeoaayswaqx ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884002.740989-75489-188329108849843/AnsiballZ_ipaprivilege.py Nov 23 07:46:42 undercloud sudo[75611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:44 undercloud sudo[75611]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:44 undercloud sudo[75635]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tccphblfsjgduwwxqlsyxsmfkwxdcsof ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884004.2570224-75489-160342041855619/AnsiballZ_ipaprivilege.py Nov 23 07:46:44 undercloud sudo[75635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:45 undercloud sudo[75635]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:45 undercloud sudo[75657]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uvsnyiodtnsqxwyxutuhcmmzwnzzahar ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884005.272344-75489-141224766421893/AnsiballZ_ipaprivilege.py Nov 23 07:46:45 undercloud sudo[75657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:46 undercloud sudo[75657]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:46 undercloud sudo[75677]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xmbzvdmqliexqbqhmdqbujqmkyxhaqez ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884006.613326-75489-103158387174738/AnsiballZ_ipaprivilege.py Nov 23 07:46:46 undercloud sudo[75677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:47 undercloud sudo[75677]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:47 undercloud sudo[75697]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sdvuvbhdksfyhyrzcbolmqjulubjrnhz ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884007.6068826-75489-73914269074207/AnsiballZ_ipaprivilege.py Nov 23 07:46:47 undercloud sudo[75697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:48 undercloud sudo[75697]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:48 undercloud sudo[75717]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xvghtaehnsbvdxxfvvwclzudhseflley ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884008.8944852-75489-198040152462073/AnsiballZ_ipaprivilege.py Nov 23 07:46:48 undercloud sudo[75717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:49 undercloud sudo[75717]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:50 undercloud sudo[75737]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fyfkgleohhttltorfaavgsgmwmqzyjrz ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884009.9423535-75489-95629458030681/AnsiballZ_ipaprivilege.py Nov 23 07:46:50 undercloud sudo[75737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:51 undercloud sudo[75737]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:51 undercloud sudo[75761]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bnhhkuaymuvyfpuxltctiqdopiudvxwr ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884011.4327703-75489-167950244469783/AnsiballZ_ipaprivilege.py Nov 23 07:46:51 undercloud sudo[75761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:52 undercloud sudo[75761]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:52 undercloud sudo[75781]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kzdudmeehdtqzladmafhcvoebejmsbhm ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884012.5477543-75489-237992473265932/AnsiballZ_ipaprivilege.py Nov 23 07:46:52 undercloud sudo[75781]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:53 undercloud sudo[75781]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:53 undercloud sudo[75801]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-poucumvpwcymxofwvrkundbrxtfxfhdi ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884013.7549496-75489-116936210410573/AnsiballZ_ipaprivilege.py Nov 23 07:46:53 undercloud sudo[75801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:55 undercloud sudo[75801]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:55 undercloud sudo[75908]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hmgukvcofcxsgotapqqirprkktxdixad ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884015.0542893-75489-15463488847921/AnsiballZ_ipaprivilege.py Nov 23 07:46:55 undercloud sudo[75908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:56 undercloud sudo[75908]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:56 undercloud sudo[75932]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pbrybslyqimcryuyhkmmjrhbmouriwym ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884016.342036-75489-130570621784577/AnsiballZ_ipaprivilege.py Nov 23 07:46:56 undercloud sudo[75932]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:57 undercloud sudo[75932]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:57 undercloud sudo[76031]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bhyrycbwzebjsalgazgdldvqggulpqfx ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884017.6146889-75489-274660433652863/AnsiballZ_ipaprivilege.py Nov 23 07:46:57 undercloud sudo[76031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:46:58 undercloud sudo[76031]: pam_unix(sudo:session): session closed for user root Nov 23 07:46:58 undercloud sudo[76058]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lpawcnllksululrokykzxuktwvshmtub ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884018.8646722-75489-246330475398479/AnsiballZ_ipaprivilege.py Nov 23 07:46:58 undercloud sudo[76058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:00 undercloud sudo[76058]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:00 undercloud sudo[76078]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yzlfsyelgpuecqqlollhtnsqhtbnzpfg ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884020.1453695-75489-149274488452609/AnsiballZ_ipaprivilege.py Nov 23 07:47:00 undercloud sudo[76078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:01 undercloud sudo[76078]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:01 undercloud sudo[76102]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bbsdfusuootmxagvjikodxnyvpzlgdrb ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884021.4359677-75489-143673801977128/AnsiballZ_ipaprivilege.py Nov 23 07:47:01 undercloud sudo[76102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:02 undercloud sudo[76102]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:03 undercloud sudo[76126]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-trncjnbtadcjjmkeutmnqzplbmzemcvu ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884022.810184-76114-131569351958501/AnsiballZ_iparole.py Nov 23 07:47:03 undercloud sudo[76126]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:04 undercloud sudo[76126]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:04 undercloud sudo[76156]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cgybsvjkgvilmauqtniofuzuseytsaxe ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884024.6172943-76144-222808183107172/AnsiballZ_ipaservice.py Nov 23 07:47:04 undercloud sudo[76156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:06 undercloud sudo[76156]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:06 undercloud sudo[76355]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yiruxjpmeoqxxvcfwyyxkqfhgexnbzkn ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884026.1918151-76324-205174126409074/AnsiballZ_iparole.py Nov 23 07:47:06 undercloud sudo[76355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:07 undercloud sudo[76355]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:07 undercloud sudo[76438]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kropdorovwszqnwqojdkrpizfcvvpovd ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884027.4541986-76426-45357343371497/AnsiballZ_iparole.py Nov 23 07:47:07 undercloud sudo[76438]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:08 undercloud sudo[76438]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:08 undercloud sudo[76466]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ttjmtddqepadexhiscvpvdhsksdgtycn ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884028.6241384-76450-83243347321300/AnsiballZ_file.py Nov 23 07:47:08 undercloud sudo[76466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:08 undercloud sudo[76466]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:09 undercloud sudo[76484]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kjxwdeuxjbaxmhqygedjnfjpwrtnfuyo ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884028.9833221-76472-116258703094262/AnsiballZ_command.py Nov 23 07:47:09 undercloud sudo[76484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:09 undercloud sudo[76484]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:09 undercloud sudo[76508]: zuul : PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qgeqnyqtnnosubaambekqcgzzenmsxpu ; IPA_USER=admin IPA_HOST=ipa.ooo.test IPA_PASS=fce95318204114530f31f885c9df588f /usr/bin/python3 /home/zuul/.ansible/tmp/ansible-tmp-1763884029.6140273-76493-70844644766155/AnsiballZ_file.py Nov 23 07:47:09 undercloud sudo[76508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:09 undercloud sudo[76508]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:11 undercloud sshd[76488]: Invalid user deepak from 197.158.254.18 port 32770 Nov 23 07:47:11 undercloud sshd[76488]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:47:11 undercloud sshd[76488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:47:13 undercloud sshd[76488]: Failed password for invalid user deepak from 197.158.254.18 port 32770 ssh2 Nov 23 07:47:13 undercloud sshd[76488]: Received disconnect from 197.158.254.18 port 32770:11: Bye Bye [preauth] Nov 23 07:47:13 undercloud sshd[76488]: Disconnected from invalid user deepak 197.158.254.18 port 32770 [preauth] Nov 23 07:47:17 undercloud sudo[76583]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::default_user Nov 23 07:47:17 undercloud sudo[76583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:17 undercloud sudo[76583]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:17 undercloud sudo[76590]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::default_pass Nov 23 07:47:17 undercloud sudo[76590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:18 undercloud sudo[76590]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:18 undercloud sudo[76593]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera fqdn_ctlplane Nov 23 07:47:18 undercloud sudo[76593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:18 undercloud sudo[76593]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:18 undercloud sudo[76596]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera rabbitmq::port Nov 23 07:47:18 undercloud sudo[76596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:18 undercloud sudo[76596]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:18 undercloud sudo[76603]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera controller_virtual_ip Nov 23 07:47:18 undercloud sudo[76603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:19 undercloud sudo[76603]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:19 undercloud sudo[76607]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/hiera ctlplane Nov 23 07:47:19 undercloud sudo[76607]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:19 undercloud sudo[76607]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:19 undercloud sudo[76610]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -h 192.168.122.100 -e show databases; Nov 23 07:47:19 undercloud sudo[76610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:19 undercloud sudo[76610]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:19 undercloud sudo[76641]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root rabbitmq rabbitmqctl list_queues Nov 23 07:47:19 undercloud sudo[76641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:19 undercloud runuser[76663]: pam_unix(runuser:session): session opened for user rabbitmq(uid=42439) by (uid=0) Nov 23 07:47:20 undercloud sshd[70672]: Received disconnect from 192.168.122.100 port 53022:11: disconnected by user Nov 23 07:47:20 undercloud sshd[70672]: Disconnected from user zuul 192.168.122.100 port 53022 Nov 23 07:47:20 undercloud sshd[70666]: pam_unix(sshd:session): session closed for user zuul Nov 23 07:47:20 undercloud runuser[76663]: pam_unix(runuser:session): session closed for user rabbitmq Nov 23 07:47:20 undercloud sudo[76641]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:20 undercloud sudo[76725]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e show databases like "heat" Nov 23 07:47:20 undercloud sudo[76725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:20 undercloud sudo[76725]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:20 undercloud sudo[76762]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e create database heat Nov 23 07:47:20 undercloud sudo[76762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:20 undercloud sudo[76762]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:20 undercloud sudo[76795]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e create user if not exists 'heat'@'%' identified by 'heat' Nov 23 07:47:20 undercloud sudo[76795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:20 undercloud sudo[76795]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:20 undercloud sudo[76822]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql heat -e grant all privileges on heat.* to 'heat'@'%' Nov 23 07:47:20 undercloud sudo[76822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:21 undercloud sudo[76822]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:21 undercloud sudo[76862]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e flush privileges; Nov 23 07:47:21 undercloud sudo[76862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:21 undercloud sudo[76862]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:21 undercloud sudo[76891]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman run --rm --user heat --net host --volume /home/zuul/overcloud-deploy/overcloud/heat-launcher/heat.conf:/etc/heat/heat.conf:z --volume /home/zuul/overcloud-deploy/overcloud/heat-launcher:/home/zuul/overcloud-deploy/overcloud/heat-launcher:z localhost/tripleo/openstack-heat-api:ephemeral heat-manage db_sync Nov 23 07:47:21 undercloud sudo[76891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:23 undercloud sudo[76891]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:23 undercloud sudo[76940]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect --format "{{.State}}" ephemeral-heat Nov 23 07:47:23 undercloud sudo[76940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:23 undercloud sudo[76940]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:23 undercloud sudo[76954]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman play kube /home/zuul/overcloud-deploy/overcloud/heat-launcher/heat-pod.yaml Nov 23 07:47:23 undercloud sudo[76954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:25 undercloud sudo[76954]: pam_unix(sudo:session): session closed for user root Nov 23 07:47:27 undercloud sudo[77145]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec rabbitmq rabbitmqctl list_queues Nov 23 07:47:27 undercloud sudo[77145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:47:28 undercloud sudo[77145]: pam_unix(sudo:session): session closed for user root Nov 23 07:49:03 undercloud sshd[79004]: Invalid user teamspeak from 197.158.254.18 port 35636 Nov 23 07:49:03 undercloud sshd[79004]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:49:03 undercloud sshd[79004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:49:05 undercloud sshd[79004]: Failed password for invalid user teamspeak from 197.158.254.18 port 35636 ssh2 Nov 23 07:49:05 undercloud sshd[79004]: Received disconnect from 197.158.254.18 port 35636:11: Bye Bye [preauth] Nov 23 07:49:05 undercloud sshd[79004]: Disconnected from invalid user teamspeak 197.158.254.18 port 35636 [preauth] Nov 23 07:50:39 undercloud sudo[80522]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect ephemeral-heat Nov 23 07:50:39 undercloud sudo[80522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:39 undercloud sudo[80522]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:39 undercloud sudo[80537]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod kill ephemeral-heat Nov 23 07:50:39 undercloud sudo[80537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:39 undercloud sudo[80537]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:39 undercloud sudo[80587]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e show databases like "heat" Nov 23 07:50:39 undercloud sudo[80587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:39 undercloud sudo[80587]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:40 undercloud sudo[80621]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysqldump heat Nov 23 07:50:40 undercloud sudo[80621]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:40 undercloud sudo[80621]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:49 undercloud sudo[80938]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql heat -e drop database heat Nov 23 07:50:49 undercloud sudo[80938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:49 undercloud sudo[80938]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:49 undercloud sudo[80967]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman exec -u root mysql mysql -e drop user 'heat'@'%' Nov 23 07:50:49 undercloud sudo[80967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:49 undercloud sudo[80967]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:49 undercloud sudo[80995]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod inspect ephemeral-heat Nov 23 07:50:49 undercloud sudo[80995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:50 undercloud sudo[80995]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:50 undercloud sudo[81018]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/podman pod rm -f ephemeral-heat Nov 23 07:50:50 undercloud sudo[81018]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:50 undercloud sudo[81018]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:52 undercloud sudo[81047]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cndexthishfgiukhhwxnhchgbutjhqte ; /usr/bin/python3 Nov 23 07:50:52 undercloud sudo[81047]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:52 undercloud sudo[81047]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:52 undercloud sudo[81053]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bskptdsgeuyozqqgypxkxspyubnzptih ; /usr/bin/python3 Nov 23 07:50:52 undercloud sudo[81053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:52 undercloud sudo[81053]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:53 undercloud sudo[81072]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jeeqklvejeypcukbhbqaopwkeppitcia ; /usr/bin/python3 Nov 23 07:50:53 undercloud sudo[81072]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:53 undercloud sudo[81072]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:54 undercloud sudo[81078]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-crxnnalzbhamffkuisxoxqqkptrtplfm ; /usr/bin/python3 Nov 23 07:50:54 undercloud sudo[81078]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:54 undercloud sudo[81078]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:55 undercloud sudo[81124]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-amkzdotfboleadzikvitebpledemqlho ; /usr/bin/python3 Nov 23 07:50:55 undercloud sudo[81124]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:56 undercloud sudo[81124]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:56 undercloud sudo[81166]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-giawsbigkjbozifgwqumuluvpxdwfalu ; /usr/bin/python3 Nov 23 07:50:56 undercloud sudo[81166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:56 undercloud sudo[81166]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:57 undercloud sudo[81265]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ugeaeqtipigmmihamxxlgsajpptgymdc ; /usr/bin/python3 Nov 23 07:50:57 undercloud sudo[81265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:58 undercloud sudo[81265]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:58 undercloud unix_chkpwd[81320]: password check failed for user (root) Nov 23 07:50:58 undercloud sshd[81131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 user=root Nov 23 07:50:58 undercloud sudo[81336]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-euebrckcysuyrdjrkooigyjonorkhljn ; /usr/bin/python3 Nov 23 07:50:58 undercloud sudo[81336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:58 undercloud sudo[81336]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:59 undercloud sudo[81387]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kkaflhbveajgxzxuamykqbmiqpjhmaco ; /usr/bin/python3 Nov 23 07:50:59 undercloud sudo[81387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:59 undercloud sudo[81387]: pam_unix(sudo:session): session closed for user root Nov 23 07:50:59 undercloud sudo[81441]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lktmdqghlbdacxwhkjdruhpmjbnmvqva ; /usr/bin/python3 Nov 23 07:50:59 undercloud sudo[81441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:50:59 undercloud sudo[81441]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:00 undercloud sudo[81536]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xguhhojvaqjiurkhqfdnaaunougvmhcz ; /usr/bin/python3 Nov 23 07:51:00 undercloud sudo[81536]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:00 undercloud sudo[81536]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:00 undercloud sudo[81572]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cygfwynwcraxqcdbnbvknstndeoafucl ; /usr/bin/python3 Nov 23 07:51:00 undercloud sudo[81572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:00 undercloud sshd[81131]: Failed password for root from 197.158.254.18 port 38520 ssh2 Nov 23 07:51:00 undercloud sudo[81572]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:00 undercloud sudo[81606]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aenhkcmqugyonapnfweobsgfbkdptejr ; /usr/bin/python3 Nov 23 07:51:00 undercloud sudo[81606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:01 undercloud sudo[81606]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:01 undercloud sudo[81681]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fvjltpkgotkmqicvekjnmoadbshhagfg ; /usr/bin/python3 Nov 23 07:51:01 undercloud sudo[81681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:01 undercloud sshd[81131]: Received disconnect from 197.158.254.18 port 38520:11: Bye Bye [preauth] Nov 23 07:51:01 undercloud sshd[81131]: Disconnected from authenticating user root 197.158.254.18 port 38520 [preauth] Nov 23 07:51:01 undercloud sudo[81681]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:03 undercloud sudo[81857]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kybhnoxttttuvdnvjagrmkqtkhiazecc ; /usr/bin/python3 Nov 23 07:51:03 undercloud sudo[81857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:04 undercloud sudo[81857]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:04 undercloud sudo[81884]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pdnzugkvxjiorobdbdidaxthhxqwsvnl ; /usr/bin/python3 Nov 23 07:51:04 undercloud sudo[81884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:04 undercloud sudo[81884]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:04 undercloud sudo[81892]: zuul : TTY=pts/0 ; PWD=/usr/share/ansible/tripleo-playbooks ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xowppxzfdokjslcmxrtzwsvdnivdfgum ; /usr/bin/python3 Nov 23 07:51:04 undercloud sudo[81892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:05 undercloud sudo[81892]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:12 undercloud sudo[82102]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lupktcbmpzcnfvbtunssmjjtnepniebt ; /usr/bin/python3 Nov 23 07:51:12 undercloud sudo[82102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:13 undercloud sudo[82102]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:13 undercloud sudo[82121]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dhhwnfmhztpqzbvmltqzwjfyelinibhl ; /usr/bin/python3 Nov 23 07:51:13 undercloud sudo[82121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:13 undercloud sudo[82121]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:19 undercloud sudo[82785]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-deavkzlnjxwcuauwnqxfjlzwhlpjfngm ; /usr/bin/python3 Nov 23 07:51:19 undercloud sudo[82785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:20 undercloud sudo[82785]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:20 undercloud sudo[82849]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-sadenfchmrbwtsxyrzdspfrczrhvrrlr ; /usr/bin/python3 Nov 23 07:51:20 undercloud sudo[82849]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:20 undercloud sudo[82849]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:20 undercloud sudo[82921]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nurmnjrbpwprgiezhzkzbqdctcyhlggd ; /usr/bin/python3 Nov 23 07:51:20 undercloud sudo[82921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:21 undercloud sudo[82921]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:21 undercloud sudo[82949]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-stnkdubntldextotscdthpqxzxlrribe ; /usr/bin/python3 Nov 23 07:51:21 undercloud sudo[82949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:21 undercloud sudo[82949]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:22 undercloud sudo[82992]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rcuqqmsmuqcuddohopxaqcizpmfsjrxd ; /usr/bin/python3 Nov 23 07:51:22 undercloud sudo[82992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:22 undercloud sudo[82992]: pam_unix(sudo:session): session closed for user root Nov 23 07:51:22 undercloud sudo[83031]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-plcqblcbspzlzbklzwvmwlxcdvqyoocp ; /usr/bin/python3 Nov 23 07:51:22 undercloud sudo[83031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:51:23 undercloud sudo[83031]: pam_unix(sudo:session): session closed for user root Nov 23 07:52:24 undercloud sudo[64386]: pam_unix(sudo:session): session closed for user root Nov 23 07:52:34 undercloud sshd[84173]: Invalid user 1 from 80.94.95.116 port 20044 Nov 23 07:52:34 undercloud sshd[84173]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:52:34 undercloud sshd[84173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 Nov 23 07:52:36 undercloud sshd[84173]: Failed password for invalid user 1 from 80.94.95.116 port 20044 ssh2 Nov 23 07:52:38 undercloud sshd[84173]: Connection closed by invalid user 1 80.94.95.116 port 20044 [preauth] Nov 23 07:52:52 undercloud sshd[84855]: Invalid user test123 from 197.158.254.18 port 41396 Nov 23 07:52:52 undercloud sshd[84855]: pam_unix(sshd:auth): check pass; user unknown Nov 23 07:52:52 undercloud sshd[84855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 Nov 23 07:52:54 undercloud sshd[84855]: Failed password for invalid user test123 from 197.158.254.18 port 41396 ssh2 Nov 23 07:52:57 undercloud sshd[84855]: Received disconnect from 197.158.254.18 port 41396:11: Bye Bye [preauth] Nov 23 07:52:57 undercloud sshd[84855]: Disconnected from invalid user test123 197.158.254.18 port 41396 [preauth] Nov 23 07:53:38 undercloud sudo[88992]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gutkkxofccahtktlsvayizqlqnnqpdgl ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[88992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[88995]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-abrrcaidokrweeeeeskcmidnngfnnjwq ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[88995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[88999]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uqwnyjcaytlyqnqijrwedjoglehgihzj ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[88999]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[89005]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bpdhclewkavwmvhdbhyvpekbnwsqlqvf ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[89005]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[89010]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qgfhpfaosnjypxqozeqsetyemaidmbqg ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[89010]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[89014]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jpnargqxevzunyskqmkwanvlpdmwrsfx ; /usr/bin/python3 Nov 23 07:53:38 undercloud sudo[89014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:53:38 undercloud sudo[88995]: pam_unix(sudo:session): session closed for user root Nov 23 07:53:38 undercloud sudo[88992]: pam_unix(sudo:session): session closed for user root Nov 23 07:53:38 undercloud sudo[88999]: pam_unix(sudo:session): session closed for user root Nov 23 07:53:38 undercloud sudo[89010]: pam_unix(sudo:session): session closed for user root Nov 23 07:53:38 undercloud sudo[89005]: pam_unix(sudo:session): session closed for user root Nov 23 07:53:38 undercloud sudo[89014]: pam_unix(sudo:session): session closed for user root Nov 23 07:54:50 undercloud unix_chkpwd[91623]: password check failed for user (root) Nov 23 07:54:50 undercloud sshd[91361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.158.254.18 user=root Nov 23 07:54:52 undercloud sshd[91361]: Failed password for root from 197.158.254.18 port 44276 ssh2 Nov 23 07:54:53 undercloud sshd[91361]: Received disconnect from 197.158.254.18 port 44276:11: Bye Bye [preauth] Nov 23 07:54:53 undercloud sshd[91361]: Disconnected from authenticating user root 197.158.254.18 port 44276 [preauth] Nov 23 07:57:15 undercloud sudo[102214]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-glzovvxzponnajwlqczvjsmayxehhelf ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532603.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102219]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xcysbpcwjkhirssnbiucuyicqbxcmqtq ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532604.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102233]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-redexwpivjzwhiptxywboozrquhwkslm ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532605.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102214]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102219]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102240]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qadnhoulatdxypfpgjxwihafxtadlqtb ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532600.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102233]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102240]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102255]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-miwhzpuirllgjmlptgstjpvnglcplmoh ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532601.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102255]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102265]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-orofjdzhryxrlicninddcfyqnvypfjxh ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532602.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102265]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:15 undercloud sudo[102279]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-blepxpdgrbdqyetdiplisapuyvuvdizt ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532603.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102280]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iqdcezsmmopniklmmrxnpqsuhjbsapxi ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532605.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102277]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-plyltigvzdqjbvftayfcrxsrdblsusdf ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532604.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:15 undercloud sudo[102278]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tewpmvkgjkcnokfpkmioxobsbzjvgpea ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532600.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:15 undercloud sudo[102278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:16 undercloud sudo[102294]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rsftrgzkzoptyvifgxymxaopyjvejmfn ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532601.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:16 undercloud sudo[102294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:16 undercloud sudo[102300]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rzfhpevdwchbbgowwgfrcxvxfronkrml ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532602.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:16 undercloud sudo[102300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:16 undercloud sudo[102280]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:16 undercloud sudo[102278]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:16 undercloud sudo[102279]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:17 undercloud sudo[102294]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:17 undercloud sudo[102277]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:17 undercloud sudo[102300]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:17 undercloud sudo[102386]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-byixbdmipbgnrxiyhlcytcdvfpudceau ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532600.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102383]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ukqlwfgmmehfdkgtthmcthpkojwgfxkm ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532603.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102386]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:17 undercloud sudo[102383]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:17 undercloud sudo[102385]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-klbtackbqnyhgqqqaiiatncnxxbbwxgk ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532605.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102385]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:17 undercloud sudo[102395]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zyaimkqczyjyzhmakbmtigfziiajizkc ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532604.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102395]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:17 undercloud sudo[102399]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fgwuyznwzimaceqphdxnxkwsgekikbke ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532601.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:17 undercloud sudo[102404]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ktizkrvvmvltgajmxklvbpibweqhnkau ; IPA_HOST=ipa.ooo.test IPA_USER=nova/np0005532602.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:17 undercloud sudo[102404]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:19 undercloud sudo[102385]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:19 undercloud sudo[102383]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:20 undercloud sudo[102395]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:22 undercloud sudo[102386]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:22 undercloud sudo[102399]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:23 undercloud sudo[102404]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:55 undercloud sudo[104230]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-evlupxiotqyphsbazbqqjxebyfuoqjhb ; /usr/bin/python3 Nov 23 07:57:55 undercloud sudo[104230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:57:56 undercloud sudo[104230]: pam_unix(sudo:session): session closed for user root Nov 23 07:57:56 undercloud sudo[104244]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pyinihejyjraybgvihoseysdzjclxour ; IPA_HOST=ipa.ooo.test IPA_USER=nova/undercloud.ooo.test KRB5CCNAME=/etc/novajoin/krb5.cache KRB5_CLIENT_KTNAME=FILE:/etc/novajoin/krb5.keytab /usr/bin/python3 Nov 23 07:57:56 undercloud sudo[104244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:01 undercloud sudo[104244]: pam_unix(sudo:session): session closed for user root Nov 23 07:58:02 undercloud sudo[104277]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xtdqalkldebgpmadnbkkbfsgrvoitozz ; /usr/bin/python3 Nov 23 07:58:02 undercloud sudo[104277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:02 undercloud sudo[104277]: pam_unix(sudo:session): session closed for user root Nov 23 07:58:02 undercloud sudo[104285]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-unoboezggicueuaygszqisflbhprebbb ; /usr/bin/python3 Nov 23 07:58:02 undercloud sudo[104285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:02 undercloud sudo[104285]: pam_unix(sudo:session): session closed for user root Nov 23 07:58:02 undercloud sudo[104306]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tqyeklnszhvgykdqgaipybfwbcakousz ; /usr/bin/python3 Nov 23 07:58:02 undercloud sudo[104306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:03 undercloud sudo[104306]: pam_unix(sudo:session): session closed for user root Nov 23 07:58:03 undercloud sudo[104310]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-orfoqifumlomxbuusijjvcirlukanplt ; /usr/bin/python3 Nov 23 07:58:03 undercloud sudo[104310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:03 undercloud sudo[104310]: pam_unix(sudo:session): session closed for user root Nov 23 07:58:03 undercloud sudo[104314]: zuul : TTY=pts/0 ; PWD=/home/zuul/overcloud-deploy/overcloud/config-download/overcloud ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vctelaxgaxtrllqghrckmaoimysvfnqr ; /usr/bin/python3 Nov 23 07:58:03 undercloud sudo[104314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 07:58:03 undercloud sudo[104314]: pam_unix(sudo:session): session closed for user root Nov 23 08:05:20 undercloud sshd[115553]: Invalid user pi from 185.156.73.233 port 31064 Nov 23 08:05:21 undercloud sshd[115553]: pam_unix(sshd:auth): check pass; user unknown Nov 23 08:05:21 undercloud sshd[115553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.73.233 Nov 23 08:05:22 undercloud sshd[115553]: Failed password for invalid user pi from 185.156.73.233 port 31064 ssh2 Nov 23 08:05:23 undercloud sshd[115553]: Connection closed by invalid user pi 185.156.73.233 port 31064 [preauth] Nov 23 08:11:00 undercloud sshd[120921]: error: kex_exchange_identification: Connection closed by remote host Nov 23 08:11:00 undercloud sshd[120921]: Connection closed by 117.5.148.56 port 50328 Nov 23 08:16:47 undercloud sshd[126298]: Invalid user user from 80.94.95.115 port 41768 Nov 23 08:16:47 undercloud sshd[126298]: pam_unix(sshd:auth): check pass; user unknown Nov 23 08:16:47 undercloud sshd[126298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.115 Nov 23 08:16:49 undercloud sshd[126298]: Failed password for invalid user user from 80.94.95.115 port 41768 ssh2 Nov 23 08:16:49 undercloud sshd[126298]: Connection closed by invalid user user 80.94.95.115 port 41768 [preauth] Nov 23 08:27:46 undercloud unix_chkpwd[136720]: password check failed for user (root) Nov 23 08:27:46 undercloud sshd[136620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 user=root Nov 23 08:27:48 undercloud sshd[136620]: Failed password for root from 80.94.95.116 port 17944 ssh2 Nov 23 08:27:49 undercloud sshd[136620]: Connection closed by authenticating user root 80.94.95.116 port 17944 [preauth] Nov 23 08:39:25 undercloud sshd[147666]: Invalid user user1 from 80.94.95.116 port 27234 Nov 23 08:39:25 undercloud sshd[147666]: pam_unix(sshd:auth): check pass; user unknown Nov 23 08:39:25 undercloud sshd[147666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 Nov 23 08:39:27 undercloud sshd[147666]: Failed password for invalid user user1 from 80.94.95.116 port 27234 ssh2 Nov 23 08:39:27 undercloud sshd[147666]: Connection closed by invalid user user1 80.94.95.116 port 27234 [preauth] Nov 23 08:42:32 undercloud unix_chkpwd[150568]: password check failed for user (root) Nov 23 08:42:32 undercloud sshd[150563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.5.148.56 user=root Nov 23 08:42:34 undercloud sshd[150563]: Failed password for root from 117.5.148.56 port 45038 ssh2 Nov 23 08:42:35 undercloud unix_chkpwd[150672]: password check failed for user (root) Nov 23 08:42:37 undercloud sshd[150563]: error: PAM: Authentication failure for root from 117.5.148.56 Nov 23 08:42:37 undercloud sshd[150563]: Received disconnect from 117.5.148.56 port 45038:11: [preauth] Nov 23 08:42:37 undercloud sshd[150563]: Disconnected from authenticating user root 117.5.148.56 port 45038 [preauth] Nov 23 08:50:58 undercloud unix_chkpwd[158511]: password check failed for user (root) Nov 23 08:50:58 undercloud sshd[158506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 user=root Nov 23 08:51:00 undercloud sshd[158506]: Failed password for root from 80.94.95.116 port 23698 ssh2 Nov 23 08:51:01 undercloud sshd[158506]: Connection closed by authenticating user root 80.94.95.116 port 23698 [preauth] Nov 23 09:06:13 undercloud sudo[173791]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/cp /etc/openstack/clouds.yaml /home/zuul/.config/openstack Nov 23 09:06:13 undercloud sudo[173791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 09:06:13 undercloud sudo[173791]: pam_unix(sudo:session): session closed for user root Nov 23 09:06:13 undercloud sudo[173794]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chmod 0600 /home/zuul/.config/openstack/clouds.yaml Nov 23 09:06:13 undercloud sudo[173794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 09:06:13 undercloud sudo[173794]: pam_unix(sudo:session): session closed for user root Nov 23 09:06:13 undercloud sudo[173797]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/chown -R 1000:1000 /home/zuul/.config Nov 23 09:06:13 undercloud sudo[173797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 09:06:13 undercloud sudo[173797]: pam_unix(sudo:session): session closed for user root Nov 23 09:06:15 undercloud sshd[26888]: Received disconnect from 192.168.122.11 port 42226:11: disconnected by user Nov 23 09:06:15 undercloud sshd[26888]: Disconnected from user zuul 192.168.122.11 port 42226 Nov 23 09:06:15 undercloud sshd[26884]: pam_unix(sshd:session): session closed for user zuul Nov 23 09:06:25 undercloud sshd[173913]: Accepted publickey for zuul from 38.102.83.114 port 37416 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 09:06:25 undercloud sshd[173913]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 09:06:25 undercloud sudo[173931]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dvdbnzksekzzzxprtybnjcztsmicdikz ; /usr/bin/python3 Nov 23 09:06:25 undercloud sudo[173931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 23 09:06:26 undercloud sudo[173931]: pam_unix(sudo:session): session closed for user root Nov 23 09:06:26 undercloud sshd[173913]: pam_unix(sshd:session): session closed for user zuul Nov 23 09:06:42 undercloud sshd[174272]: Accepted publickey for zuul from 38.102.83.114 port 57514 ssh2: RSA SHA256:Xz8XZLbESHnozokCXTVFlqYiwDkZm5t19NcpSScmMws Nov 23 09:06:42 undercloud sshd[174272]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Nov 23 09:06:42 undercloud sudo[174277]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxC . /var/log Nov 23 09:06:42 undercloud sudo[174277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)