99]: error: kex_exchange_identification: read: Connection reset by peer Apr 22 19:58:02 ip-172-31-29-215 sshd[2132402]: Invalid user aptuslegal from 185.93.89.103 port 52926 Apr 22 19:58:02 ip-172-31-29-215 sshd[2132402]: Connection closed by invalid user aptuslegal 185.93.89.103 port 52926 [preauth] Apr 22 20:00:01 ip-172-31-29-215 CRON[2132407]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 20:00:01 ip-172-31-29-215 CRON[2132407]: pam_unix(cron:session): session closed for user smmsp Apr 22 20:03:40 ip-172-31-29-215 sshd[2132430]: Invalid user aptuslegal from 72.167.34.120 port 49488 Apr 22 20:03:40 ip-172-31-29-215 sshd[2132430]: Connection closed by invalid user aptuslegal 72.167.34.120 port 49488 [preauth] Apr 22 20:09:01 ip-172-31-29-215 CRON[2132435]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 20:09:01 ip-172-31-29-215 CRON[2132435]: pam_unix(cron:session): session closed for user root Apr 22 20:09:47 ip-172-31-29-215 sshd[2132491]: Connection closed by authenticating user root 185.93.89.48 port 45946 [preauth] Apr 22 20:13:33 ip-172-31-29-215 sshd[2132505]: Connection closed by authenticating user root 162.240.26.174 port 54396 [preauth] Apr 22 20:17:01 ip-172-31-29-215 CRON[2132512]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 20:17:01 ip-172-31-29-215 CRON[2132512]: pam_unix(cron:session): session closed for user root Apr 22 20:17:15 ip-172-31-29-215 sshd[2132515]: Invalid user aptuslegal from 103.90.227.178 port 47542 Apr 22 20:17:15 ip-172-31-29-215 sshd[2132515]: Connection closed by invalid user aptuslegal 103.90.227.178 port 47542 [preauth] Apr 22 20:18:15 ip-172-31-29-215 sshd[2132519]: Invalid user admin from 64.227.150.168 port 55592 Apr 22 20:18:15 ip-172-31-29-215 sshd[2132519]: Connection closed by invalid user admin 64.227.150.168 port 55592 [preauth] Apr 22 20:20:01 ip-172-31-29-215 CRON[2132522]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 20:20:02 ip-172-31-29-215 CRON[2132522]: pam_unix(cron:session): session closed for user smmsp Apr 22 20:27:27 ip-172-31-29-215 sshd[2132545]: Connection closed by authenticating user root 172.94.9.64 port 59130 [preauth] Apr 22 20:30:24 ip-172-31-29-215 sshd[2132551]: Invalid user aptuslegal from 192.253.248.96 port 49716 Apr 22 20:30:24 ip-172-31-29-215 sshd[2132551]: Connection closed by invalid user aptuslegal 192.253.248.96 port 49716 [preauth] Apr 22 20:38:19 ip-172-31-29-215 sshd[2132779]: error: kex_exchange_identification: client sent invalid protocol identifier "" Apr 22 20:39:01 ip-172-31-29-215 CRON[2132780]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 20:39:01 ip-172-31-29-215 CRON[2132780]: pam_unix(cron:session): session closed for user root Apr 22 20:40:01 ip-172-31-29-215 CRON[2132837]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 20:40:01 ip-172-31-29-215 CRON[2132837]: pam_unix(cron:session): session closed for user smmsp Apr 22 20:41:24 ip-172-31-29-215 sshd[2132859]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Apr 22 20:42:04 ip-172-31-29-215 sshd[2132860]: error: kex_exchange_identification: banner line contains invalid characters Apr 22 20:45:38 ip-172-31-29-215 sshd[2132863]: error: kex_exchange_identification: banner line contains invalid characters Apr 22 20:55:12 ip-172-31-29-215 sshd[2132868]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Apr 22 20:55:12 ip-172-31-29-215 sshd[2132869]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" Apr 22 21:00:01 ip-172-31-29-215 CRON[2132873]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 21:00:01 ip-172-31-29-215 CRON[2132873]: pam_unix(cron:session): session closed for user smmsp Apr 22 21:00:44 ip-172-31-29-215 sshd[2132897]: Invalid user aptuslegal from 192.253.248.133 port 35222 Apr 22 21:00:44 ip-172-31-29-215 sshd[2132897]: Connection closed by invalid user aptuslegal 192.253.248.133 port 35222 [preauth] Apr 22 21:03:55 ip-172-31-29-215 sshd[2132900]: Invalid user aptuslegal from 213.177.179.26 port 59470 Apr 22 21:03:56 ip-172-31-29-215 sshd[2132900]: Connection closed by invalid user aptuslegal 213.177.179.26 port 59470 [preauth] Apr 22 21:09:01 ip-172-31-29-215 CRON[2132904]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 21:09:01 ip-172-31-29-215 CRON[2132904]: pam_unix(cron:session): session closed for user root Apr 22 21:17:01 ip-172-31-29-215 CRON[2132965]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 21:17:01 ip-172-31-29-215 CRON[2132965]: pam_unix(cron:session): session closed for user root Apr 22 21:20:01 ip-172-31-29-215 CRON[2132982]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 21:20:01 ip-172-31-29-215 CRON[2132982]: pam_unix(cron:session): session closed for user smmsp Apr 22 21:25:27 ip-172-31-29-215 sshd[2133005]: Connection closed by authenticating user root 164.126.161.177 port 45292 [preauth] Apr 22 21:28:28 ip-172-31-29-215 sshd[2133008]: Connection closed by authenticating user root 39.106.169.126 port 58152 [preauth] Apr 22 21:39:01 ip-172-31-29-215 CRON[2133014]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 21:39:01 ip-172-31-29-215 CRON[2133014]: pam_unix(cron:session): session closed for user root Apr 22 21:40:01 ip-172-31-29-215 CRON[2133072]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 21:40:01 ip-172-31-29-215 CRON[2133072]: pam_unix(cron:session): session closed for user smmsp Apr 22 21:50:22 ip-172-31-29-215 sshd[2133111]: Connection closed by authenticating user root 165.227.175.106 port 51650 [preauth] Apr 22 21:50:58 ip-172-31-29-215 sshd[2133113]: Invalid user aptuslegal from 77.90.185.41 port 33678 Apr 22 21:50:59 ip-172-31-29-215 sshd[2133113]: Connection closed by invalid user aptuslegal 77.90.185.41 port 33678 [preauth] Apr 22 21:51:27 ip-172-31-29-215 sshd[2133117]: Connection closed by authenticating user root 77.90.185.87 port 59486 [preauth] Apr 22 21:54:51 ip-172-31-29-215 sshd[2133119]: Invalid user aptuslegal from 77.90.185.48 port 38462 Apr 22 21:54:51 ip-172-31-29-215 sshd[2133119]: Connection closed by invalid user aptuslegal 77.90.185.48 port 38462 [preauth] Apr 22 21:57:45 ip-172-31-29-215 sshd[2133123]: Connection closed by authenticating user root 192.253.248.127 port 52740 [preauth] Apr 22 22:00:01 ip-172-31-29-215 CRON[2133127]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 22:00:01 ip-172-31-29-215 CRON[2133127]: pam_unix(cron:session): session closed for user smmsp Apr 22 22:05:49 ip-172-31-29-215 sshd[2133151]: Invalid user aptuslegal from 150.95.27.209 port 36344 Apr 22 22:05:49 ip-172-31-29-215 sshd[2133151]: Connection closed by invalid user aptuslegal 150.95.27.209 port 36344 [preauth] Apr 22 22:09:01 ip-172-31-29-215 CRON[2133156]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 22:09:01 ip-172-31-29-215 CRON[2133156]: pam_unix(cron:session): session closed for user root Apr 22 22:17:01 ip-172-31-29-215 CRON[2133215]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 22:17:01 ip-172-31-29-215 CRON[2133215]: pam_unix(cron:session): session closed for user root Apr 22 22:20:01 ip-172-31-29-215 CRON[2133220]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 22:20:01 ip-172-31-29-215 CRON[2133220]: pam_unix(cron:session): session closed for user smmsp Apr 22 22:26:13 ip-172-31-29-215 sshd[2133243]: Connection closed by authenticating user root 172.94.9.61 port 53818 [preauth] Apr 22 22:37:46 ip-172-31-29-215 sshd[2133473]: Invalid user aptuslegal from 34.138.135.178 port 52426 Apr 22 22:37:47 ip-172-31-29-215 sshd[2133473]: Connection closed by invalid user aptuslegal 34.138.135.178 port 52426 [preauth] Apr 22 22:39:01 ip-172-31-29-215 CRON[2133476]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 22:39:01 ip-172-31-29-215 CRON[2133476]: pam_unix(cron:session): session closed for user root Apr 22 22:40:01 ip-172-31-29-215 CRON[2133534]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 22:40:01 ip-172-31-29-215 CRON[2133534]: pam_unix(cron:session): session closed for user smmsp Apr 22 22:43:51 ip-172-31-29-215 sshd[2133557]: Invalid user aptuslegal from 162.240.156.176 port 47128 Apr 22 22:43:51 ip-172-31-29-215 sshd[2133557]: Connection closed by invalid user aptuslegal 162.240.156.176 port 47128 [preauth] Apr 22 22:53:30 ip-172-31-29-215 sshd[2133580]: Invalid user aptuslegal from 192.253.248.93 port 34420 Apr 22 22:53:30 ip-172-31-29-215 sshd[2133580]: Connection closed by invalid user aptuslegal 192.253.248.93 port 34420 [preauth] Apr 22 22:53:53 ip-172-31-29-215 sshd[2133582]: Invalid user aptuslegal from 42.96.16.250 port 51582 Apr 22 22:53:54 ip-172-31-29-215 sshd[2133582]: Connection closed by invalid user aptuslegal 42.96.16.250 port 51582 [preauth] Apr 22 22:55:15 ip-172-31-29-215 sshd[2133584]: Invalid user aptuslegal from 77.90.185.92 port 40020 Apr 22 22:55:15 ip-172-31-29-215 sshd[2133584]: Connection closed by invalid user aptuslegal 77.90.185.92 port 40020 [preauth] Apr 22 23:00:01 ip-172-31-29-215 CRON[2133590]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 23:00:01 ip-172-31-29-215 CRON[2133590]: pam_unix(cron:session): session closed for user smmsp Apr 22 23:05:18 ip-172-31-29-215 sshd[2133614]: Connection closed by authenticating user root 103.195.238.51 port 48886 [preauth] Apr 22 23:09:01 ip-172-31-29-215 CRON[2133618]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 23:09:01 ip-172-31-29-215 CRON[2133618]: pam_unix(cron:session): session closed for user root Apr 22 23:09:43 ip-172-31-29-215 sshd[2133674]: Connection closed by authenticating user root 213.177.179.26 port 41006 [preauth] Apr 22 23:10:19 ip-172-31-29-215 sshd[2133676]: Connection closed by authenticating user root 192.253.248.136 port 47622 [preauth] Apr 22 23:17:01 ip-172-31-29-215 CRON[2133680]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 23:17:01 ip-172-31-29-215 CRON[2133680]: pam_unix(cron:session): session closed for user root Apr 22 23:20:01 ip-172-31-29-215 CRON[2133686]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 23:20:01 ip-172-31-29-215 CRON[2133686]: pam_unix(cron:session): session closed for user smmsp Apr 22 23:32:20 ip-172-31-29-215 sshd[2133769]: Connection closed by authenticating user root 172.94.9.57 port 56172 [preauth] Apr 22 23:39:01 ip-172-31-29-215 CRON[2133774]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 22 23:39:01 ip-172-31-29-215 CRON[2133774]: pam_unix(cron:session): session closed for user root Apr 22 23:40:01 ip-172-31-29-215 CRON[2133831]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 22 23:40:01 ip-172-31-29-215 CRON[2133831]: pam_unix(cron:session): session closed for user smmsp Apr 22 23:52:14 ip-172-31-29-215 sshd[2133863]: Connection closed by authenticating user root 43.225.52.87 port 52940 [preauth] Apr 22 23:55:29 ip-172-31-29-215 sshd[2133865]: Invalid user aptuslegal from 165.227.175.106 port 39570 Apr 22 23:55:30 ip-172-31-29-215 sshd[2133865]: Connection closed by invalid user aptuslegal 165.227.175.106 port 39570 [preauth] Apr 23 00:00:01 ip-172-31-29-215 CRON[2133872]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 00:00:01 ip-172-31-29-215 CRON[2133873]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 00:00:01 ip-172-31-29-215 CRON[2133872]: pam_unix(cron:session): session closed for user root Apr 23 00:00:01 ip-172-31-29-215 CRON[2133873]: pam_unix(cron:session): session closed for user smmsp Apr 23 00:09:01 ip-172-31-29-215 CRON[2133940]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 00:09:01 ip-172-31-29-215 CRON[2133940]: pam_unix(cron:session): session closed for user root Apr 23 00:10:13 ip-172-31-29-215 sshd[2133993]: Connection closed by authenticating user root 66.116.199.61 port 60364 [preauth] Apr 23 00:17:01 ip-172-31-29-215 CRON[2133997]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 00:17:01 ip-172-31-29-215 CRON[2133997]: pam_unix(cron:session): session closed for user root Apr 23 00:20:01 ip-172-31-29-215 CRON[2134002]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 00:20:01 ip-172-31-29-215 CRON[2134002]: pam_unix(cron:session): session closed for user smmsp Apr 23 00:29:30 ip-172-31-29-215 sshd[2134026]: Connection closed by authenticating user root 103.106.104.187 port 33990 [preauth] Apr 23 00:33:34 ip-172-31-29-215 sshd[2134031]: Invalid user aptuslegal from 161.132.38.88 port 40612 Apr 23 00:33:34 ip-172-31-29-215 sshd[2134031]: Connection closed by invalid user aptuslegal 161.132.38.88 port 40612 [preauth] Apr 23 00:33:39 ip-172-31-29-215 sshd[2134033]: Connection closed by authenticating user root 172.94.9.128 port 58368 [preauth] Apr 23 00:35:12 ip-172-31-29-215 sshd[2134038]: Invalid user aptuslegal from 172.94.9.61 port 38588 Apr 23 00:35:12 ip-172-31-29-215 sshd[2134038]: Connection closed by invalid user aptuslegal 172.94.9.61 port 38588 [preauth] Apr 23 00:39:01 ip-172-31-29-215 CRON[2134263]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 00:39:01 ip-172-31-29-215 CRON[2134263]: pam_unix(cron:session): session closed for user root Apr 23 00:40:01 ip-172-31-29-215 CRON[2134316]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 00:40:01 ip-172-31-29-215 CRON[2134316]: pam_unix(cron:session): session closed for user smmsp Apr 23 00:42:14 ip-172-31-29-215 sshd[2134340]: Invalid user aptuslegal from 213.177.179.39 port 49418 Apr 23 00:42:14 ip-172-31-29-215 sshd[2134340]: Connection closed by invalid user aptuslegal 213.177.179.39 port 49418 [preauth] Apr 23 00:43:37 ip-172-31-29-215 sshd[2134342]: Invalid user aptuslegal from 209.38.34.156 port 53052 Apr 23 00:43:48 ip-172-31-29-215 sshd[2134342]: Connection closed by invalid user aptuslegal 209.38.34.156 port 53052 [preauth] Apr 23 00:48:26 ip-172-31-29-215 sshd[2134347]: Connection closed by authenticating user root 192.210.243.165 port 60170 [preauth] Apr 23 00:48:50 ip-172-31-29-215 sshd[2134349]: Invalid user aptuslegal from 77.90.185.45 port 57250 Apr 23 00:48:50 ip-172-31-29-215 sshd[2134349]: Connection closed by invalid user aptuslegal 77.90.185.45 port 57250 [preauth] Apr 23 00:54:12 ip-172-31-29-215 sshd[2134353]: Connection closed by authenticating user root 185.93.89.70 port 33084 [preauth] Apr 23 01:00:01 ip-172-31-29-215 CRON[2134359]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 01:00:01 ip-172-31-29-215 CRON[2134359]: pam_unix(cron:session): session closed for user smmsp Apr 23 01:02:43 ip-172-31-29-215 sshd[2134382]: Invalid user aptuslegal from 192.253.248.93 port 56512 Apr 23 01:02:44 ip-172-31-29-215 sshd[2134382]: Connection closed by invalid user aptuslegal 192.253.248.93 port 56512 [preauth] Apr 23 01:03:48 ip-172-31-29-215 sshd[2134384]: Connection closed by authenticating user root 192.253.248.132 port 44968 [preauth] Apr 23 01:09:01 ip-172-31-29-215 CRON[2134389]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 01:09:01 ip-172-31-29-215 CRON[2134389]: pam_unix(cron:session): session closed for user root Apr 23 01:14:57 ip-172-31-29-215 sshd[2134443]: Invalid user aptuslegal from 172.94.9.158 port 33654 Apr 23 01:14:57 ip-172-31-29-215 sshd[2134443]: Connection closed by invalid user aptuslegal 172.94.9.158 port 33654 [preauth] Apr 23 01:17:01 ip-172-31-29-215 CRON[2134445]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 01:17:01 ip-172-31-29-215 CRON[2134445]: pam_unix(cron:session): session closed for user root Apr 23 01:20:01 ip-172-31-29-215 CRON[2134451]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 01:20:01 ip-172-31-29-215 CRON[2134451]: pam_unix(cron:session): session closed for user smmsp Apr 23 01:32:37 ip-172-31-29-215 sshd[2134478]: Invalid user aptuslegal from 103.90.227.178 port 54064 Apr 23 01:32:38 ip-172-31-29-215 sshd[2134478]: Connection closed by invalid user aptuslegal 103.90.227.178 port 54064 [preauth] Apr 23 01:39:01 ip-172-31-29-215 CRON[2134484]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 01:39:01 ip-172-31-29-215 CRON[2134484]: pam_unix(cron:session): session closed for user root Apr 23 01:40:01 ip-172-31-29-215 CRON[2134537]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 01:40:01 ip-172-31-29-215 CRON[2134537]: pam_unix(cron:session): session closed for user smmsp Apr 23 02:00:01 ip-172-31-29-215 CRON[2134567]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 02:00:01 ip-172-31-29-215 CRON[2134567]: pam_unix(cron:session): session closed for user smmsp Apr 23 02:06:03 ip-172-31-29-215 sshd[2134592]: Invalid user admin from 165.227.175.106 port 52166 Apr 23 02:06:03 ip-172-31-29-215 sshd[2134592]: Connection closed by invalid user admin 165.227.175.106 port 52166 [preauth] Apr 23 02:09:01 ip-172-31-29-215 CRON[2134628]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 02:09:01 ip-172-31-29-215 CRON[2134628]: pam_unix(cron:session): session closed for user root Apr 23 02:10:32 ip-172-31-29-215 sshd[2134681]: Connection closed by authenticating user root 34.138.135.178 port 57916 [preauth] Apr 23 02:17:01 ip-172-31-29-215 CRON[2134685]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 02:17:01 ip-172-31-29-215 CRON[2134685]: pam_unix(cron:session): session closed for user root Apr 23 02:20:01 ip-172-31-29-215 CRON[2134694]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 02:20:01 ip-172-31-29-215 CRON[2134694]: pam_unix(cron:session): session closed for user smmsp Apr 23 02:20:10 ip-172-31-29-215 sshd[2134718]: Invalid user aptuslegal from 192.253.248.44 port 59668 Apr 23 02:20:10 ip-172-31-29-215 sshd[2134718]: Connection closed by invalid user aptuslegal 192.253.248.44 port 59668 [preauth] Apr 23 02:20:58 ip-172-31-29-215 sshd[2134722]: Invalid user aptuslegal from 43.225.52.87 port 60112 Apr 23 02:20:59 ip-172-31-29-215 sshd[2134722]: Connection closed by invalid user aptuslegal 43.225.52.87 port 60112 [preauth] Apr 23 02:31:27 ip-172-31-29-215 sshd[2134729]: Invalid user aptuslegal from 185.93.89.103 port 42882 Apr 23 02:31:27 ip-172-31-29-215 sshd[2134729]: Connection closed by invalid user aptuslegal 185.93.89.103 port 42882 [preauth] Apr 23 02:39:01 ip-172-31-29-215 CRON[2134958]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 02:39:01 ip-172-31-29-215 CRON[2134958]: pam_unix(cron:session): session closed for user root Apr 23 02:40:01 ip-172-31-29-215 CRON[2135015]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 02:40:01 ip-172-31-29-215 CRON[2135015]: pam_unix(cron:session): session closed for user smmsp Apr 23 03:00:01 ip-172-31-29-215 CRON[2135045]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 03:00:01 ip-172-31-29-215 CRON[2135045]: pam_unix(cron:session): session closed for user smmsp Apr 23 03:08:48 ip-172-31-29-215 sshd[2135070]: Invalid user aptuslegal from 87.106.255.77 port 40252 Apr 23 03:08:48 ip-172-31-29-215 sshd[2135070]: Connection closed by invalid user aptuslegal 87.106.255.77 port 40252 [preauth] Apr 23 03:09:01 ip-172-31-29-215 CRON[2135072]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 03:09:01 ip-172-31-29-215 CRON[2135072]: pam_unix(cron:session): session closed for user root Apr 23 03:10:01 ip-172-31-29-215 CRON[2135129]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 03:10:01 ip-172-31-29-215 CRON[2135129]: pam_unix(cron:session): session closed for user root Apr 23 03:17:01 ip-172-31-29-215 CRON[2135133]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 03:17:01 ip-172-31-29-215 CRON[2135133]: pam_unix(cron:session): session closed for user root Apr 23 03:20:01 ip-172-31-29-215 CRON[2135138]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 03:20:01 ip-172-31-29-215 CRON[2135138]: pam_unix(cron:session): session closed for user smmsp Apr 23 03:39:01 ip-172-31-29-215 CRON[2135166]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 03:39:01 ip-172-31-29-215 CRON[2135166]: pam_unix(cron:session): session closed for user root Apr 23 03:40:01 ip-172-31-29-215 CRON[2135224]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 03:40:01 ip-172-31-29-215 CRON[2135224]: pam_unix(cron:session): session closed for user smmsp Apr 23 04:00:01 ip-172-31-29-215 CRON[2135659]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 04:00:02 ip-172-31-29-215 CRON[2135659]: pam_unix(cron:session): session closed for user smmsp Apr 23 04:08:43 ip-172-31-29-215 sshd[2135692]: Connection closed by authenticating user root 103.195.238.51 port 44716 [preauth] Apr 23 04:09:01 ip-172-31-29-215 CRON[2135694]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 04:09:01 ip-172-31-29-215 CRON[2135694]: pam_unix(cron:session): session closed for user root Apr 23 04:17:01 ip-172-31-29-215 CRON[2135759]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 04:17:01 ip-172-31-29-215 CRON[2135759]: pam_unix(cron:session): session closed for user root Apr 23 04:20:01 ip-172-31-29-215 CRON[2135767]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 04:20:01 ip-172-31-29-215 CRON[2135767]: pam_unix(cron:session): session closed for user smmsp Apr 23 04:20:59 ip-172-31-29-215 sshd[2135790]: Connection closed by authenticating user root 165.227.175.106 port 49248 [preauth] Apr 23 04:26:20 ip-172-31-29-215 sshd[2135802]: Connection closed by authenticating user root 171.244.61.223 port 36460 [preauth] Apr 23 04:34:26 ip-172-31-29-215 sshd[2135811]: Invalid user aptuslegal from 192.253.248.44 port 48692 Apr 23 04:34:26 ip-172-31-29-215 sshd[2135811]: Connection closed by invalid user aptuslegal 192.253.248.44 port 48692 [preauth] Apr 23 04:35:41 ip-172-31-29-215 sshd[2135818]: Invalid user aptuslegal from 185.93.89.29 port 48220 Apr 23 04:35:41 ip-172-31-29-215 sshd[2135818]: Connection closed by invalid user aptuslegal 185.93.89.29 port 48220 [preauth] Apr 23 04:39:01 ip-172-31-29-215 CRON[2136025]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 04:39:01 ip-172-31-29-215 CRON[2136025]: pam_unix(cron:session): session closed for user root Apr 23 04:40:01 ip-172-31-29-215 CRON[2136101]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 04:40:01 ip-172-31-29-215 CRON[2136101]: pam_unix(cron:session): session closed for user smmsp Apr 23 05:00:01 ip-172-31-29-215 CRON[2136137]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 05:00:01 ip-172-31-29-215 CRON[2136137]: pam_unix(cron:session): session closed for user smmsp Apr 23 05:09:01 ip-172-31-29-215 CRON[2136166]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 05:09:01 ip-172-31-29-215 CRON[2136166]: pam_unix(cron:session): session closed for user root Apr 23 05:10:19 ip-172-31-29-215 sshd[2136223]: Invalid user aptuslegal from 172.94.9.61 port 37936 Apr 23 05:10:20 ip-172-31-29-215 sshd[2136223]: Connection closed by invalid user aptuslegal 172.94.9.61 port 37936 [preauth] Apr 23 05:17:01 ip-172-31-29-215 CRON[2136226]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 05:17:01 ip-172-31-29-215 CRON[2136226]: pam_unix(cron:session): session closed for user root Apr 23 05:18:21 ip-172-31-29-215 sshd[2136230]: Invalid user aptuslegal from 185.93.89.70 port 45100 Apr 23 05:18:21 ip-172-31-29-215 sshd[2136230]: Connection closed by invalid user aptuslegal 185.93.89.70 port 45100 [preauth] Apr 23 05:20:01 ip-172-31-29-215 CRON[2136234]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 05:20:01 ip-172-31-29-215 CRON[2136234]: pam_unix(cron:session): session closed for user smmsp Apr 23 05:23:43 ip-172-31-29-215 sshd[2136258]: Invalid user aptuslegal from 66.116.199.61 port 55826 Apr 23 05:23:44 ip-172-31-29-215 sshd[2136258]: Connection closed by invalid user aptuslegal 66.116.199.61 port 55826 [preauth] Apr 23 05:29:29 ip-172-31-29-215 sshd[2136270]: Connection closed by authenticating user root 192.253.248.96 port 49226 [preauth] Apr 23 05:32:33 ip-172-31-29-215 sshd[2136274]: Invalid user aptuslegal from 72.167.34.120 port 56026 Apr 23 05:32:34 ip-172-31-29-215 sshd[2136274]: Connection closed by invalid user aptuslegal 72.167.34.120 port 56026 [preauth] Apr 23 05:34:25 ip-172-31-29-215 sshd[2136277]: error: kex_exchange_identification: Connection closed by remote host Apr 23 05:38:32 ip-172-31-29-215 sshd[2136280]: Connection closed by authenticating user root 34.138.135.178 port 36646 [preauth] Apr 23 05:39:01 ip-172-31-29-215 CRON[2136282]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 05:39:01 ip-172-31-29-215 CRON[2136282]: pam_unix(cron:session): session closed for user root Apr 23 05:40:01 ip-172-31-29-215 CRON[2136338]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 05:40:01 ip-172-31-29-215 CRON[2136338]: pam_unix(cron:session): session closed for user smmsp Apr 23 05:52:25 ip-172-31-29-215 sshd[2136364]: Connection closed by authenticating user root 183.60.172.37 port 35778 [preauth] Apr 23 05:52:26 ip-172-31-29-215 sshd[2136366]: Invalid user admin from 183.60.172.37 port 36626 Apr 23 05:52:27 ip-172-31-29-215 sshd[2136366]: Connection closed by invalid user admin 183.60.172.37 port 36626 [preauth] Apr 23 05:52:28 ip-172-31-29-215 sshd[2136368]: Invalid user user from 183.60.172.37 port 37506 Apr 23 05:52:29 ip-172-31-29-215 sshd[2136368]: Connection closed by invalid user user 183.60.172.37 port 37506 [preauth] Apr 23 05:52:31 ip-172-31-29-215 sshd[2136370]: Invalid user git from 183.60.172.37 port 38796 Apr 23 05:52:31 ip-172-31-29-215 sshd[2136370]: Connection closed by invalid user git 183.60.172.37 port 38796 [preauth] Apr 23 05:52:33 ip-172-31-29-215 sshd[2136372]: Invalid user oracle from 183.60.172.37 port 40416 Apr 23 05:52:33 ip-172-31-29-215 sshd[2136372]: Connection closed by invalid user oracle 183.60.172.37 port 40416 [preauth] Apr 23 05:52:34 ip-172-31-29-215 sshd[2136374]: Invalid user minecraft from 183.60.172.37 port 41872 Apr 23 05:52:34 ip-172-31-29-215 sshd[2136374]: Connection closed by invalid user minecraft 183.60.172.37 port 41872 [preauth] Apr 23 05:52:36 ip-172-31-29-215 sshd[2136376]: Connection closed by authenticating user root 183.60.172.37 port 42748 [preauth] Apr 23 05:52:37 ip-172-31-29-215 sshd[2136378]: Connection closed by authenticating user root 183.60.172.37 port 44002 [preauth] Apr 23 05:52:41 ip-172-31-29-215 sshd[2136380]: Connection closed by authenticating user root 183.60.172.37 port 44908 [preauth] Apr 23 05:52:43 ip-172-31-29-215 sshd[2136382]: Connection closed by authenticating user root 183.60.172.37 port 47562 [preauth] Apr 23 05:52:45 ip-172-31-29-215 sshd[2136384]: Connection closed by authenticating user backup 183.60.172.37 port 48904 [preauth] Apr 23 05:52:46 ip-172-31-29-215 sshd[2136386]: Invalid user epic from 183.60.172.37 port 49764 Apr 23 05:52:46 ip-172-31-29-215 sshd[2136386]: Connection closed by invalid user epic 183.60.172.37 port 49764 [preauth] Apr 23 05:52:47 ip-172-31-29-215 sshd[2136388]: Invalid user kali from 183.60.172.37 port 50594 Apr 23 05:52:47 ip-172-31-29-215 sshd[2136388]: Connection closed by invalid user kali 183.60.172.37 port 50594 [preauth] Apr 23 05:52:49 ip-172-31-29-215 sshd[2136390]: Invalid user ftpuser from 183.60.172.37 port 51476 Apr 23 05:52:49 ip-172-31-29-215 sshd[2136390]: Connection closed by invalid user ftpuser 183.60.172.37 port 51476 [preauth] Apr 23 05:52:50 ip-172-31-29-215 sshd[2136392]: Invalid user vagrant from 183.60.172.37 port 52702 Apr 23 05:52:51 ip-172-31-29-215 sshd[2136392]: Connection closed by invalid user vagrant 183.60.172.37 port 52702 [preauth] Apr 23 05:52:52 ip-172-31-29-215 sshd[2136394]: Invalid user ansible from 183.60.172.37 port 53544 Apr 23 05:52:52 ip-172-31-29-215 sshd[2136394]: Connection closed by invalid user ansible 183.60.172.37 port 53544 [preauth] Apr 23 05:52:53 ip-172-31-29-215 sshd[2136396]: Invalid user es from 183.60.172.37 port 54420 Apr 23 05:52:53 ip-172-31-29-215 sshd[2136396]: Connection closed by invalid user es 183.60.172.37 port 54420 [preauth] Apr 23 05:52:54 ip-172-31-29-215 sshd[2136398]: Connection closed by authenticating user root 183.60.172.37 port 55366 [preauth] Apr 23 05:52:56 ip-172-31-29-215 sshd[2136400]: Invalid user deploy from 183.60.172.37 port 56230 Apr 23 05:52:57 ip-172-31-29-215 sshd[2136400]: Connection closed by invalid user deploy 183.60.172.37 port 56230 [preauth] Apr 23 05:53:00 ip-172-31-29-215 sshd[2136403]: Connection closed by authenticating user ubuntu 183.60.172.37 port 57884 [preauth] Apr 23 05:53:02 ip-172-31-29-215 sshd[2136405]: Invalid user cloud from 183.60.172.37 port 60496 Apr 23 05:53:02 ip-172-31-29-215 sshd[2136405]: Connection closed by invalid user cloud 183.60.172.37 port 60496 [preauth] Apr 23 05:53:04 ip-172-31-29-215 sshd[2136407]: Connection closed by authenticating user root 183.60.172.37 port 33626 [preauth] Apr 23 05:53:05 ip-172-31-29-215 sshd[2136409]: Invalid user moxa from 183.60.172.37 port 34606 Apr 23 05:53:05 ip-172-31-29-215 sshd[2136409]: Connection closed by invalid user moxa 183.60.172.37 port 34606 [preauth] Apr 23 05:53:06 ip-172-31-29-215 sshd[2136411]: Invalid user deploy from 183.60.172.37 port 35518 Apr 23 05:53:06 ip-172-31-29-215 sshd[2136411]: Connection closed by invalid user deploy 183.60.172.37 port 35518 [preauth] Apr 23 05:53:08 ip-172-31-29-215 sshd[2136413]: Invalid user admin from 183.60.172.37 port 36382 Apr 23 05:53:08 ip-172-31-29-215 sshd[2136413]: Connection closed by invalid user admin 183.60.172.37 port 36382 [preauth] Apr 23 05:53:11 ip-172-31-29-215 sshd[2136415]: Invalid user postgres from 183.60.172.37 port 37388 Apr 23 05:53:11 ip-172-31-29-215 sshd[2136415]: Connection closed by invalid user postgres 183.60.172.37 port 37388 [preauth] Apr 23 05:53:12 ip-172-31-29-215 sshd[2136417]: Connection closed by authenticating user ubuntu 183.60.172.37 port 39894 [preauth] Apr 23 05:53:14 ip-172-31-29-215 sshd[2136419]: Invalid user user1 from 183.60.172.37 port 40828 Apr 23 05:53:14 ip-172-31-29-215 sshd[2136419]: Connection closed by invalid user user1 183.60.172.37 port 40828 [preauth] Apr 23 05:53:15 ip-172-31-29-215 sshd[2136421]: Invalid user user from 183.60.172.37 port 42158 Apr 23 05:53:16 ip-172-31-29-215 sshd[2136421]: Connection closed by invalid user user 183.60.172.37 port 42158 [preauth] Apr 23 05:53:18 ip-172-31-29-215 sshd[2136423]: Invalid user deployer from 183.60.172.37 port 43178 Apr 23 05:53:18 ip-172-31-29-215 sshd[2136423]: Connection closed by invalid user deployer 183.60.172.37 port 43178 [preauth] Apr 23 05:53:19 ip-172-31-29-215 sshd[2136425]: Invalid user ftptest from 183.60.172.37 port 45024 Apr 23 05:53:19 ip-172-31-29-215 sshd[2136425]: Connection closed by invalid user ftptest 183.60.172.37 port 45024 [preauth] Apr 23 05:53:22 ip-172-31-29-215 sshd[2136427]: Connection closed by authenticating user root 183.60.172.37 port 45940 [preauth] Apr 23 05:53:24 ip-172-31-29-215 sshd[2136429]: Connection closed by authenticating user root 183.60.172.37 port 47822 [preauth] Apr 23 05:53:25 ip-172-31-29-215 sshd[2136431]: Connection closed by authenticating user ubuntu 183.60.172.37 port 49310 [preauth] Apr 23 05:53:26 ip-172-31-29-215 sshd[2136433]: Invalid user linaro from 183.60.172.37 port 50312 Apr 23 05:53:26 ip-172-31-29-215 sshd[2136433]: Connection closed by invalid user linaro 183.60.172.37 port 50312 [preauth] Apr 23 05:53:28 ip-172-31-29-215 sshd[2136435]: Invalid user hduser from 183.60.172.37 port 51284 Apr 23 05:53:28 ip-172-31-29-215 sshd[2136435]: Connection closed by invalid user hduser 183.60.172.37 port 51284 [preauth] Apr 23 05:53:29 ip-172-31-29-215 sshd[2136437]: Invalid user docker from 183.60.172.37 port 52246 Apr 23 05:53:29 ip-172-31-29-215 sshd[2136437]: Connection closed by invalid user docker 183.60.172.37 port 52246 [preauth] Apr 23 05:53:31 ip-172-31-29-215 sshd[2136439]: Invalid user web from 183.60.172.37 port 53270 Apr 23 05:53:31 ip-172-31-29-215 sshd[2136439]: Connection closed by invalid user web 183.60.172.37 port 53270 [preauth] Apr 23 05:53:32 ip-172-31-29-215 sshd[2136441]: Invalid user mcserver from 183.60.172.37 port 54706 Apr 23 05:53:32 ip-172-31-29-215 sshd[2136441]: Connection closed by invalid user mcserver 183.60.172.37 port 54706 [preauth] Apr 23 05:53:34 ip-172-31-29-215 sshd[2136443]: Invalid user esuser from 183.60.172.37 port 55768 Apr 23 05:53:34 ip-172-31-29-215 sshd[2136443]: Connection closed by invalid user esuser 183.60.172.37 port 55768 [preauth] Apr 23 05:53:35 ip-172-31-29-215 sshd[2136445]: Connection closed by authenticating user root 183.60.172.37 port 56828 [preauth] Apr 23 05:53:37 ip-172-31-29-215 sshd[2136447]: Invalid user oracle from 183.60.172.37 port 57896 Apr 23 05:53:37 ip-172-31-29-215 sshd[2136447]: Connection closed by invalid user oracle 183.60.172.37 port 57896 [preauth] Apr 23 05:53:39 ip-172-31-29-215 sshd[2136449]: Invalid user steam from 183.60.172.37 port 59774 Apr 23 05:53:39 ip-172-31-29-215 sshd[2136449]: Connection closed by invalid user steam 183.60.172.37 port 59774 [preauth] Apr 23 05:53:40 ip-172-31-29-215 sshd[2136451]: Invalid user cs2server from 183.60.172.37 port 60798 Apr 23 05:53:41 ip-172-31-29-215 sshd[2136451]: Connection closed by invalid user cs2server 183.60.172.37 port 60798 [preauth] Apr 23 05:53:42 ip-172-31-29-215 sshd[2136453]: Invalid user www from 183.60.172.37 port 34006 Apr 23 05:53:42 ip-172-31-29-215 sshd[2136453]: Connection closed by invalid user www 183.60.172.37 port 34006 [preauth] Apr 23 05:53:44 ip-172-31-29-215 sshd[2136455]: Connection closed by authenticating user root 183.60.172.37 port 35054 [preauth] Apr 23 05:53:45 ip-172-31-29-215 sshd[2136457]: Invalid user admin from 183.60.172.37 port 36588 Apr 23 05:53:45 ip-172-31-29-215 sshd[2136457]: Connection closed by invalid user admin 183.60.172.37 port 36588 [preauth] Apr 23 05:53:46 ip-172-31-29-215 sshd[2136459]: Invalid user debian from 183.60.172.37 port 37562 Apr 23 05:53:46 ip-172-31-29-215 sshd[2136459]: Connection closed by invalid user debian 183.60.172.37 port 37562 [preauth] Apr 23 05:53:48 ip-172-31-29-215 sshd[2136461]: Connection closed by authenticating user root 183.60.172.37 port 38642 [preauth] Apr 23 05:53:50 ip-172-31-29-215 sshd[2136463]: Invalid user ftpuser from 183.60.172.37 port 40168 Apr 23 05:53:50 ip-172-31-29-215 sshd[2136463]: Connection closed by invalid user ftpuser 183.60.172.37 port 40168 [preauth] Apr 23 05:53:51 ip-172-31-29-215 sshd[2136465]: Invalid user dev from 183.60.172.37 port 41854 Apr 23 05:53:52 ip-172-31-29-215 sshd[2136465]: Connection closed by invalid user dev 183.60.172.37 port 41854 [preauth] Apr 23 05:53:53 ip-172-31-29-215 sshd[2136467]: Connection closed by authenticating user ubuntu 183.60.172.37 port 42908 [preauth] Apr 23 05:53:54 ip-172-31-29-215 sshd[2136469]: Invalid user vpnuser from 183.60.172.37 port 43976 Apr 23 05:53:54 ip-172-31-29-215 sshd[2136469]: Connection closed by invalid user vpnuser 183.60.172.37 port 43976 [preauth] Apr 23 05:53:55 ip-172-31-29-215 sshd[2136471]: Invalid user postgres from 183.60.172.37 port 45066 Apr 23 05:53:56 ip-172-31-29-215 sshd[2136471]: Connection closed by invalid user postgres 183.60.172.37 port 45066 [preauth] Apr 23 05:53:57 ip-172-31-29-215 sshd[2136473]: Invalid user admin from 183.60.172.37 port 46186 Apr 23 05:53:58 ip-172-31-29-215 sshd[2136473]: Connection closed by invalid user admin 183.60.172.37 port 46186 [preauth] Apr 23 05:53:59 ip-172-31-29-215 sshd[2136475]: Connection closed by authenticating user ftp 183.60.172.37 port 47734 [preauth] Apr 23 05:54:00 ip-172-31-29-215 sshd[2136477]: Connection closed by authenticating user ubuntu 183.60.172.37 port 48806 [preauth] Apr 23 05:54:01 ip-172-31-29-215 sshd[2136479]: Invalid user test from 183.60.172.37 port 49928 Apr 23 05:54:02 ip-172-31-29-215 sshd[2136479]: Connection closed by invalid user test 183.60.172.37 port 49928 [preauth] Apr 23 05:54:03 ip-172-31-29-215 sshd[2136481]: Invalid user deploy from 183.60.172.37 port 51072 Apr 23 05:54:03 ip-172-31-29-215 sshd[2136481]: Connection closed by invalid user deploy 183.60.172.37 port 51072 [preauth] Apr 23 05:54:04 ip-172-31-29-215 sshd[2136483]: Invalid user sonar from 183.60.172.37 port 52236 Apr 23 05:54:04 ip-172-31-29-215 sshd[2136483]: Connection closed by invalid user sonar 183.60.172.37 port 52236 [preauth] Apr 23 05:54:06 ip-172-31-29-215 sshd[2136485]: Invalid user testuser from 183.60.172.37 port 53272 Apr 23 05:54:07 ip-172-31-29-215 sshd[2136485]: Connection closed by invalid user testuser 183.60.172.37 port 53272 [preauth] Apr 23 05:54:08 ip-172-31-29-215 sshd[2136487]: Invalid user devopsuser from 183.60.172.37 port 55490 Apr 23 05:54:08 ip-172-31-29-215 sshd[2136487]: Connection closed by invalid user devopsuser 183.60.172.37 port 55490 [preauth] Apr 23 05:54:09 ip-172-31-29-215 sshd[2136489]: Invalid user a from 183.60.172.37 port 56668 Apr 23 05:54:09 ip-172-31-29-215 sshd[2136489]: Connection closed by invalid user a 183.60.172.37 port 56668 [preauth] Apr 23 05:54:10 ip-172-31-29-215 sshd[2136491]: Invalid user devops from 183.60.172.37 port 57868 Apr 23 05:54:11 ip-172-31-29-215 sshd[2136491]: Connection closed by invalid user devops 183.60.172.37 port 57868 [preauth] Apr 23 05:54:12 ip-172-31-29-215 sshd[2136493]: Invalid user dev from 183.60.172.37 port 58742 Apr 23 05:54:12 ip-172-31-29-215 sshd[2136493]: Connection closed by invalid user dev 183.60.172.37 port 58742 [preauth] Apr 23 05:54:14 ip-172-31-29-215 sshd[2136495]: Invalid user deploy from 183.60.172.37 port 59536 Apr 23 05:54:14 ip-172-31-29-215 sshd[2136495]: Connection closed by invalid user deploy 183.60.172.37 port 59536 [preauth] Apr 23 05:54:15 ip-172-31-29-215 sshd[2136497]: Invalid user hduser from 183.60.172.37 port 32976 Apr 23 05:54:15 ip-172-31-29-215 sshd[2136497]: Connection closed by invalid user hduser 183.60.172.37 port 32976 [preauth] Apr 23 05:54:16 ip-172-31-29-215 sshd[2136499]: Invalid user redhat from 183.60.172.37 port 34106 Apr 23 05:54:16 ip-172-31-29-215 sshd[2136499]: Connection closed by invalid user redhat 183.60.172.37 port 34106 [preauth] Apr 23 05:54:18 ip-172-31-29-215 sshd[2136501]: Invalid user vyos from 183.60.172.37 port 35280 Apr 23 05:54:18 ip-172-31-29-215 sshd[2136501]: Connection closed by invalid user vyos 183.60.172.37 port 35280 [preauth] Apr 23 05:54:20 ip-172-31-29-215 sshd[2136503]: Connection closed by authenticating user root 183.60.172.37 port 36996 [preauth] Apr 23 05:54:22 ip-172-31-29-215 sshd[2136505]: Invalid user linux from 183.60.172.37 port 38624 Apr 23 05:54:23 ip-172-31-29-215 sshd[2136505]: Connection closed by invalid user linux 183.60.172.37 port 38624 [preauth] Apr 23 05:54:24 ip-172-31-29-215 sshd[2136507]: Connection closed by authenticating user root 183.60.172.37 port 40916 [preauth] Apr 23 05:54:26 ip-172-31-29-215 sshd[2136509]: Connection closed by authenticating user root 183.60.172.37 port 42208 [preauth] Apr 23 05:54:27 ip-172-31-29-215 sshd[2136511]: Connection closed by authenticating user ubuntu 183.60.172.37 port 43970 [preauth] Apr 23 05:54:28 ip-172-31-29-215 sshd[2136513]: Connection closed by authenticating user root 183.60.172.37 port 45322 [preauth] Apr 23 05:54:30 ip-172-31-29-215 sshd[2136515]: Connection closed by authenticating user root 183.60.172.37 port 46612 [preauth] Apr 23 05:54:32 ip-172-31-29-215 sshd[2136517]: Connection closed by authenticating user root 183.60.172.37 port 47894 [preauth] Apr 23 05:54:35 ip-172-31-29-215 sshd[2136519]: Invalid user odoo from 183.60.172.37 port 50200 Apr 23 05:54:35 ip-172-31-29-215 sshd[2136519]: Connection closed by invalid user odoo 183.60.172.37 port 50200 [preauth] Apr 23 05:54:36 ip-172-31-29-215 sshd[2136521]: Invalid user odoo18 from 183.60.172.37 port 52822 Apr 23 05:54:36 ip-172-31-29-215 sshd[2136521]: Connection closed by invalid user odoo18 183.60.172.37 port 52822 [preauth] Apr 23 05:54:40 ip-172-31-29-215 sshd[2136523]: Connection closed by authenticating user root 183.60.172.37 port 54140 [preauth] Apr 23 05:54:41 ip-172-31-29-215 sshd[2136525]: Invalid user hadoop from 183.60.172.37 port 58526 Apr 23 05:54:42 ip-172-31-29-215 sshd[2136525]: Connection closed by invalid user hadoop 183.60.172.37 port 58526 [preauth] Apr 23 05:54:44 ip-172-31-29-215 sshd[2136527]: Invalid user devuser from 183.60.172.37 port 59880 Apr 23 05:54:44 ip-172-31-29-215 sshd[2136527]: Connection closed by invalid user devuser 183.60.172.37 port 59880 [preauth] Apr 23 05:54:46 ip-172-31-29-215 sshd[2136529]: Invalid user minecraft from 183.60.172.37 port 34612 Apr 23 05:54:46 ip-172-31-29-215 sshd[2136529]: Connection closed by invalid user minecraft 183.60.172.37 port 34612 [preauth] Apr 23 05:54:47 ip-172-31-29-215 sshd[2136531]: Invalid user mcserver from 183.60.172.37 port 35938 Apr 23 05:54:47 ip-172-31-29-215 sshd[2136531]: Connection closed by invalid user mcserver 183.60.172.37 port 35938 [preauth] Apr 23 05:54:49 ip-172-31-29-215 sshd[2136533]: Invalid user centos from 183.60.172.37 port 37296 Apr 23 05:54:50 ip-172-31-29-215 sshd[2136533]: Connection closed by invalid user centos 183.60.172.37 port 37296 [preauth] Apr 23 05:54:51 ip-172-31-29-215 sshd[2136535]: Invalid user deploy from 183.60.172.37 port 39984 Apr 23 05:54:51 ip-172-31-29-215 sshd[2136535]: Connection closed by invalid user deploy 183.60.172.37 port 39984 [preauth] Apr 23 05:54:52 ip-172-31-29-215 sshd[2136537]: Connection closed by authenticating user root 183.60.172.37 port 41378 [preauth] Apr 23 05:54:53 ip-172-31-29-215 sshd[2136539]: Invalid user kafka from 183.60.172.37 port 42796 Apr 23 05:54:54 ip-172-31-29-215 sshd[2136539]: Connection closed by invalid user kafka 183.60.172.37 port 42796 [preauth] Apr 23 05:54:55 ip-172-31-29-215 sshd[2136541]: Connection closed by authenticating user root 183.60.172.37 port 44168 [preauth] Apr 23 05:54:57 ip-172-31-29-215 sshd[2136543]: Connection closed by authenticating user root 183.60.172.37 port 46136 [preauth] Apr 23 05:54:58 ip-172-31-29-215 sshd[2136545]: Invalid user kali from 183.60.172.37 port 48288 Apr 23 05:54:59 ip-172-31-29-215 sshd[2136545]: Connection closed by invalid user kali 183.60.172.37 port 48288 [preauth] Apr 23 05:55:00 ip-172-31-29-215 sshd[2136547]: Invalid user ai from 183.60.172.37 port 49794 Apr 23 05:55:00 ip-172-31-29-215 sshd[2136547]: Connection closed by invalid user ai 183.60.172.37 port 49794 [preauth] Apr 23 05:55:01 ip-172-31-29-215 sshd[2136549]: Invalid user vpn from 183.60.172.37 port 51300 Apr 23 05:55:01 ip-172-31-29-215 sshd[2136549]: Connection closed by invalid user vpn 183.60.172.37 port 51300 [preauth] Apr 23 05:55:03 ip-172-31-29-215 sshd[2136551]: Connection closed by authenticating user root 183.60.172.37 port 52748 [preauth] Apr 23 05:55:04 ip-172-31-29-215 sshd[2136553]: Invalid user dev from 183.60.172.37 port 54304 Apr 23 05:55:04 ip-172-31-29-215 sshd[2136553]: Connection closed by invalid user dev 183.60.172.37 port 54304 [preauth] Apr 23 05:55:05 ip-172-31-29-215 sshd[2136555]: Connection closed by authenticating user root 183.60.172.37 port 55764 [preauth] Apr 23 05:55:08 ip-172-31-29-215 sshd[2136557]: Invalid user kali from 183.60.172.37 port 57356 Apr 23 05:55:09 ip-172-31-29-215 sshd[2136557]: Connection closed by invalid user kali 183.60.172.37 port 57356 [preauth] Apr 23 05:55:10 ip-172-31-29-215 sshd[2136559]: Invalid user pi from 183.60.172.37 port 32866 Apr 23 05:55:11 ip-172-31-29-215 sshd[2136559]: Connection closed by invalid user pi 183.60.172.37 port 32866 [preauth] Apr 23 05:55:12 ip-172-31-29-215 sshd[2136561]: Invalid user devopsadmin from 183.60.172.37 port 35832 Apr 23 05:55:12 ip-172-31-29-215 sshd[2136561]: Connection closed by invalid user devopsadmin 183.60.172.37 port 35832 [preauth] Apr 23 05:55:14 ip-172-31-29-215 sshd[2136563]: Invalid user demo from 183.60.172.37 port 37284 Apr 23 05:55:14 ip-172-31-29-215 sshd[2136563]: Connection closed by invalid user demo 183.60.172.37 port 37284 [preauth] Apr 23 05:55:16 ip-172-31-29-215 sshd[2136565]: Invalid user test from 183.60.172.37 port 38832 Apr 23 05:55:17 ip-172-31-29-215 sshd[2136565]: Connection closed by invalid user test 183.60.172.37 port 38832 [preauth] Apr 23 05:55:18 ip-172-31-29-215 sshd[2136567]: Invalid user pi from 183.60.172.37 port 42240 Apr 23 05:55:19 ip-172-31-29-215 sshd[2136567]: Connection closed by invalid user pi 183.60.172.37 port 42240 [preauth] Apr 23 06:00:01 ip-172-31-29-215 CRON[2136574]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 06:00:01 ip-172-31-29-215 CRON[2136574]: pam_unix(cron:session): session closed for user smmsp Apr 23 06:09:01 ip-172-31-29-215 CRON[2136600]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 06:09:01 ip-172-31-29-215 CRON[2136600]: pam_unix(cron:session): session closed for user root Apr 23 06:10:45 ip-172-31-29-215 sshd[2136662]: Connection closed by 100.53.3.126 port 20494 [preauth] Apr 23 06:17:01 ip-172-31-29-215 CRON[2136665]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 06:17:01 ip-172-31-29-215 CRON[2136665]: pam_unix(cron:session): session closed for user root Apr 23 06:19:26 ip-172-31-29-215 sshd[2136670]: Connection closed by authenticating user root 172.94.9.57 port 39518 [preauth] Apr 23 06:20:01 ip-172-31-29-215 CRON[2136673]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 06:20:01 ip-172-31-29-215 CRON[2136673]: pam_unix(cron:session): session closed for user smmsp Apr 23 06:23:25 ip-172-31-29-215 sshd[2136697]: Invalid user aptuslegal from 45.127.5.158 port 57430 Apr 23 06:23:27 ip-172-31-29-215 sshd[2136697]: Connection closed by invalid user aptuslegal 45.127.5.158 port 57430 [preauth] Apr 23 06:25:01 ip-172-31-29-215 CRON[2136699]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 06:25:01 ip-172-31-29-215 CRON[2136699]: pam_unix(cron:session): session closed for user root Apr 23 06:26:55 ip-172-31-29-215 sshd[2136791]: Invalid user aptuslegal from 64.227.150.168 port 37208 Apr 23 06:26:55 ip-172-31-29-215 sshd[2136791]: Connection closed by invalid user aptuslegal 64.227.150.168 port 37208 [preauth] Apr 23 06:39:01 ip-172-31-29-215 CRON[2136798]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 06:39:01 ip-172-31-29-215 CRON[2136798]: pam_unix(cron:session): session closed for user root Apr 23 06:40:01 ip-172-31-29-215 CRON[2137041]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 06:40:01 ip-172-31-29-215 CRON[2137041]: pam_unix(cron:session): session closed for user smmsp Apr 23 06:58:30 ip-172-31-29-215 sshd[2137183]: Invalid user aptuslegal from 42.96.16.250 port 33776 Apr 23 06:58:30 ip-172-31-29-215 sshd[2137183]: Connection closed by invalid user aptuslegal 42.96.16.250 port 33776 [preauth] Apr 23 07:00:01 ip-172-31-29-215 CRON[2137187]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 07:00:01 ip-172-31-29-215 CRON[2137187]: pam_unix(cron:session): session closed for user smmsp Apr 23 07:01:00 ip-172-31-29-215 sshd[2137211]: error: kex_exchange_identification: Connection closed by remote host Apr 23 07:08:13 ip-172-31-29-215 sshd[2137217]: Connection closed by authenticating user root 77.90.185.48 port 44462 [preauth] Apr 23 07:09:01 ip-172-31-29-215 CRON[2137220]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 07:09:01 ip-172-31-29-215 CRON[2137220]: pam_unix(cron:session): session closed for user root Apr 23 07:09:38 ip-172-31-29-215 sshd[2137277]: Invalid user aptuslegal from 185.93.89.103 port 48014 Apr 23 07:09:38 ip-172-31-29-215 sshd[2137277]: Connection closed by invalid user aptuslegal 185.93.89.103 port 48014 [preauth] Apr 23 07:13:11 ip-172-31-29-215 sshd[2137279]: Connection closed by authenticating user root 14.225.206.111 port 37628 [preauth] Apr 23 07:17:01 ip-172-31-29-215 CRON[2137297]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 07:17:01 ip-172-31-29-215 CRON[2137297]: pam_unix(cron:session): session closed for user root Apr 23 07:18:15 ip-172-31-29-215 sshd[2137301]: Invalid user aptuslegal from 192.253.248.130 port 48704 Apr 23 07:18:15 ip-172-31-29-215 sshd[2137301]: Connection closed by invalid user aptuslegal 192.253.248.130 port 48704 [preauth] Apr 23 07:19:41 ip-172-31-29-215 sshd[2137305]: Invalid user aptuslegal from 171.244.61.223 port 58964 Apr 23 07:19:41 ip-172-31-29-215 sshd[2137305]: Connection closed by invalid user aptuslegal 171.244.61.223 port 58964 [preauth] Apr 23 07:20:01 ip-172-31-29-215 CRON[2137307]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 07:20:01 ip-172-31-29-215 CRON[2137307]: pam_unix(cron:session): session closed for user smmsp Apr 23 07:21:29 ip-172-31-29-215 sshd[2137329]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_3.22.251.217_22" Apr 23 07:24:56 ip-172-31-29-215 sshd[2137331]: Connection closed by authenticating user root 172.94.9.64 port 55670 [preauth] Apr 23 07:29:10 ip-172-31-29-215 sshd[2137336]: Invalid user aptuslegal from 172.94.9.61 port 54552 Apr 23 07:29:10 ip-172-31-29-215 sshd[2137336]: Connection closed by invalid user aptuslegal 172.94.9.61 port 54552 [preauth] Apr 23 07:35:55 ip-172-31-29-215 sshd[2137341]: Connection closed by authenticating user root 213.177.179.39 port 42972 [preauth] Apr 23 07:39:01 ip-172-31-29-215 CRON[2137344]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 07:39:01 ip-172-31-29-215 CRON[2137344]: pam_unix(cron:session): session closed for user root Apr 23 07:40:01 ip-172-31-29-215 CRON[2137402]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 07:40:01 ip-172-31-29-215 CRON[2137402]: pam_unix(cron:session): session closed for user smmsp Apr 23 08:00:01 ip-172-31-29-215 CRON[2137451]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 08:00:01 ip-172-31-29-215 CRON[2137451]: pam_unix(cron:session): session closed for user smmsp Apr 23 08:08:59 ip-172-31-29-215 sshd[2137478]: Connection closed by authenticating user root 213.177.179.26 port 59320 [preauth] Apr 23 08:09:01 ip-172-31-29-215 CRON[2137480]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 08:09:01 ip-172-31-29-215 CRON[2137480]: pam_unix(cron:session): session closed for user root Apr 23 08:12:08 ip-172-31-29-215 sshd[2137538]: Connection closed by authenticating user root 192.253.248.133 port 54154 [preauth] Apr 23 08:12:19 ip-172-31-29-215 sshd[2137540]: Connection closed by authenticating user root 87.106.255.77 port 49890 [preauth] Apr 23 08:17:01 ip-172-31-29-215 CRON[2137543]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 08:17:01 ip-172-31-29-215 CRON[2137543]: pam_unix(cron:session): session closed for user root Apr 23 08:17:25 ip-172-31-29-215 sshd[2137546]: Connection closed by authenticating user root 192.253.248.136 port 56556 [preauth] Apr 23 08:20:01 ip-172-31-29-215 CRON[2137550]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 08:20:01 ip-172-31-29-215 CRON[2137550]: pam_unix(cron:session): session closed for user smmsp Apr 23 08:38:38 ip-172-31-29-215 sshd[2137594]: Invalid user aptuslegal from 95.174.97.156 port 50518 Apr 23 08:38:38 ip-172-31-29-215 sshd[2137594]: Connection closed by invalid user aptuslegal 95.174.97.156 port 50518 [preauth] Apr 23 08:39:01 ip-172-31-29-215 CRON[2137596]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 08:39:01 ip-172-31-29-215 CRON[2137596]: pam_unix(cron:session): session closed for user root Apr 23 08:40:01 ip-172-31-29-215 CRON[2137653]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 08:40:01 ip-172-31-29-215 CRON[2137653]: pam_unix(cron:session): session closed for user smmsp Apr 23 09:00:01 ip-172-31-29-215 CRON[2137945]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 09:00:01 ip-172-31-29-215 CRON[2137945]: pam_unix(cron:session): session closed for user smmsp Apr 23 09:09:01 ip-172-31-29-215 CRON[2137972]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 09:09:01 ip-172-31-29-215 CRON[2137972]: pam_unix(cron:session): session closed for user root Apr 23 09:09:07 ip-172-31-29-215 sshd[2137974]: Connection closed by authenticating user root 64.227.150.168 port 59568 [preauth] Apr 23 09:12:12 ip-172-31-29-215 sshd[2138031]: Connection closed by authenticating user root 192.210.243.165 port 52312 [preauth] Apr 23 09:17:01 ip-172-31-29-215 CRON[2138034]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 09:17:01 ip-172-31-29-215 CRON[2138034]: pam_unix(cron:session): session closed for user root Apr 23 09:20:01 ip-172-31-29-215 CRON[2138039]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 09:20:01 ip-172-31-29-215 CRON[2138039]: pam_unix(cron:session): session closed for user smmsp Apr 23 09:21:15 ip-172-31-29-215 sshd[2138062]: Connection closed by authenticating user root 34.138.135.178 port 58168 [preauth] Apr 23 09:34:50 ip-172-31-29-215 sshd[2138068]: Connection closed by authenticating user root 172.94.9.128 port 55692 [preauth] Apr 23 09:39:01 ip-172-31-29-215 CRON[2138079]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 09:39:01 ip-172-31-29-215 CRON[2138079]: pam_unix(cron:session): session closed for user root Apr 23 09:40:01 ip-172-31-29-215 CRON[2138138]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 09:40:02 ip-172-31-29-215 CRON[2138138]: pam_unix(cron:session): session closed for user smmsp Apr 23 09:44:05 ip-172-31-29-215 sshd[2138161]: Connection closed by authenticating user root 115.190.73.244 port 56212 [preauth] Apr 23 09:46:10 ip-172-31-29-215 sshd[2138166]: Connection closed by authenticating user root 115.190.73.244 port 54342 [preauth] Apr 23 09:46:12 ip-172-31-29-215 sshd[2138168]: Connection closed by authenticating user root 115.190.73.244 port 54354 [preauth] Apr 23 09:46:17 ip-172-31-29-215 sshd[2138170]: Connection closed by authenticating user root 115.190.73.244 port 40138 [preauth] Apr 23 09:46:20 ip-172-31-29-215 sshd[2138172]: Connection closed by authenticating user root 115.190.73.244 port 40146 [preauth] Apr 23 09:46:24 ip-172-31-29-215 sshd[2138176]: Connection closed by authenticating user root 115.190.73.244 port 57408 [preauth] Apr 23 09:46:24 ip-172-31-29-215 sshd[2138174]: Connection closed by authenticating user root 115.190.73.244 port 40154 [preauth] Apr 23 09:46:27 ip-172-31-29-215 sshd[2138178]: Connection closed by authenticating user root 115.190.73.244 port 57418 [preauth] Apr 23 09:46:31 ip-172-31-29-215 sshd[2138180]: Connection closed by authenticating user root 115.190.73.244 port 57430 [preauth] Apr 23 09:46:45 ip-172-31-29-215 sshd[2138182]: Connection closed by authenticating user root 115.190.73.244 port 57446 [preauth] Apr 23 09:46:48 ip-172-31-29-215 sshd[2138184]: Connection closed by authenticating user root 115.190.73.244 port 50812 [preauth] Apr 23 09:46:52 ip-172-31-29-215 sshd[2138186]: Connection closed by authenticating user root 115.190.73.244 port 50816 [preauth] Apr 23 09:47:02 ip-172-31-29-215 sshd[2138188]: Connection closed by authenticating user root 115.190.73.244 port 55102 [preauth] Apr 23 09:47:04 ip-172-31-29-215 sshd[2138190]: Connection closed by authenticating user root 115.190.73.244 port 48172 [preauth] Apr 23 09:47:09 ip-172-31-29-215 sshd[2138192]: Connection closed by authenticating user root 115.190.73.244 port 48180 [preauth] Apr 23 09:47:12 ip-172-31-29-215 sshd[2138194]: Connection closed by authenticating user root 115.190.73.244 port 48188 [preauth] Apr 23 10:00:01 ip-172-31-29-215 CRON[2138222]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 10:00:01 ip-172-31-29-215 CRON[2138222]: pam_unix(cron:session): session closed for user smmsp Apr 23 10:03:24 ip-172-31-29-215 sshd[2138247]: Connection closed by authenticating user root 192.253.248.123 port 40724 [preauth] Apr 23 10:09:01 ip-172-31-29-215 CRON[2138277]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:09:01 ip-172-31-29-215 CRON[2138277]: pam_unix(cron:session): session closed for user root Apr 23 10:13:26 ip-172-31-29-215 sshd[2138385]: Connection closed by authenticating user root 192.253.248.93 port 60874 [preauth] Apr 23 10:17:01 ip-172-31-29-215 CRON[2138420]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:17:01 ip-172-31-29-215 CRON[2138420]: pam_unix(cron:session): session closed for user root Apr 23 10:18:55 ip-172-31-29-215 sshd[2138450]: Invalid user aptuslegal from 43.225.52.87 port 56250 Apr 23 10:18:55 ip-172-31-29-215 sshd[2138450]: Connection closed by invalid user aptuslegal 43.225.52.87 port 56250 [preauth] Apr 23 10:20:01 ip-172-31-29-215 CRON[2138492]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 10:20:01 ip-172-31-29-215 CRON[2138492]: pam_unix(cron:session): session closed for user smmsp Apr 23 10:23:11 ip-172-31-29-215 sshd[2138557]: Invalid user aptuslegal from 172.94.9.158 port 43222 Apr 23 10:23:11 ip-172-31-29-215 sshd[2138557]: Connection closed by invalid user aptuslegal 172.94.9.158 port 43222 [preauth] Apr 23 10:24:08 ip-172-31-29-215 sshd[2138560]: Connection closed by authenticating user root 192.253.248.132 port 37900 [preauth] Apr 23 10:35:16 ip-172-31-29-215 sshd[2138589]: Invalid user aptuslegal from 72.167.34.120 port 35064 Apr 23 10:35:16 ip-172-31-29-215 sshd[2138589]: Connection closed by invalid user aptuslegal 72.167.34.120 port 35064 [preauth] Apr 23 10:39:01 ip-172-31-29-215 CRON[2138600]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:39:01 ip-172-31-29-215 CRON[2138600]: pam_unix(cron:session): session closed for user root Apr 23 10:40:01 ip-172-31-29-215 CRON[2138657]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 10:40:01 ip-172-31-29-215 CRON[2138657]: pam_unix(cron:session): session closed for user smmsp Apr 23 11:00:01 ip-172-31-29-215 CRON[2138992]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 11:00:01 ip-172-31-29-215 CRON[2138992]: pam_unix(cron:session): session closed for user smmsp Apr 23 11:04:13 ip-172-31-29-215 sshd[2139051]: Connection reset by 205.210.31.110 port 60898 [preauth] Apr 23 11:09:01 ip-172-31-29-215 CRON[2139070]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 11:09:01 ip-172-31-29-215 CRON[2139070]: pam_unix(cron:session): session closed for user root Apr 23 11:17:01 ip-172-31-29-215 CRON[2139148]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 11:17:01 ip-172-31-29-215 CRON[2139148]: pam_unix(cron:session): session closed for user root Apr 23 11:20:01 ip-172-31-29-215 CRON[2139937]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 11:20:01 ip-172-31-29-215 CRON[2139937]: pam_unix(cron:session): session closed for user smmsp Apr 23 11:39:01 ip-172-31-29-215 CRON[2140026]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 11:39:01 ip-172-31-29-215 CRON[2140026]: pam_unix(cron:session): session closed for user root Apr 23 11:40:01 ip-172-31-29-215 CRON[2140091]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 11:40:01 ip-172-31-29-215 CRON[2140091]: pam_unix(cron:session): session closed for user smmsp Apr 23 11:47:41 ip-172-31-29-215 sshd[2140114]: Invalid user aptuslegal from 213.209.159.13 port 56284 Apr 23 11:47:41 ip-172-31-29-215 sshd[2140114]: Connection closed by invalid user aptuslegal 213.209.159.13 port 56284 [preauth] Apr 23 12:00:01 ip-172-31-29-215 CRON[2140171]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 12:00:01 ip-172-31-29-215 CRON[2140172]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 12:00:01 ip-172-31-29-215 CRON[2140171]: pam_unix(cron:session): session closed for user root Apr 23 12:00:01 ip-172-31-29-215 CRON[2140172]: pam_unix(cron:session): session closed for user smmsp Apr 23 12:00:07 ip-172-31-29-215 sshd[2140195]: Connection closed by authenticating user root 185.93.89.103 port 59670 [preauth] Apr 23 12:06:58 ip-172-31-29-215 sshd[2140231]: Invalid user aptuslegal from 77.90.185.48 port 55014 Apr 23 12:06:59 ip-172-31-29-215 sshd[2140231]: Connection closed by invalid user aptuslegal 77.90.185.48 port 55014 [preauth] Apr 23 12:09:01 ip-172-31-29-215 CRON[2140234]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 12:09:01 ip-172-31-29-215 CRON[2140234]: pam_unix(cron:session): session closed for user root Apr 23 12:10:02 ip-172-31-29-215 sshd[2140291]: Connection closed by authenticating user root 185.93.89.70 port 40594 [preauth] Apr 23 12:17:01 ip-172-31-29-215 CRON[2140339]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 12:17:01 ip-172-31-29-215 CRON[2140339]: pam_unix(cron:session): session closed for user root Apr 23 12:20:01 ip-172-31-29-215 CRON[2140354]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 12:20:01 ip-172-31-29-215 CRON[2140354]: pam_unix(cron:session): session closed for user smmsp Apr 23 12:39:01 ip-172-31-29-215 CRON[2140469]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 12:39:01 ip-172-31-29-215 CRON[2140469]: pam_unix(cron:session): session closed for user root Apr 23 12:40:01 ip-172-31-29-215 CRON[2140588]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 12:40:01 ip-172-31-29-215 CRON[2140588]: pam_unix(cron:session): session closed for user smmsp Apr 23 12:45:14 ip-172-31-29-215 sshd[2140912]: Connection closed by authenticating user root 192.253.248.96 port 50246 [preauth] Apr 23 13:00:01 ip-172-31-29-215 CRON[2141188]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 13:00:01 ip-172-31-29-215 CRON[2141188]: pam_unix(cron:session): session closed for user smmsp Apr 23 13:01:06 ip-172-31-29-215 sshd[2141240]: Connection closed by authenticating user root 34.138.135.178 port 34042 [preauth] Apr 23 13:09:01 ip-172-31-29-215 CRON[2141314]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 13:09:01 ip-172-31-29-215 CRON[2141314]: pam_unix(cron:session): session closed for user root Apr 23 13:17:01 ip-172-31-29-215 CRON[2141449]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 13:17:01 ip-172-31-29-215 CRON[2141449]: pam_unix(cron:session): session closed for user root Apr 23 13:17:57 ip-172-31-29-215 sshd[2141498]: Connection closed by authenticating user root 185.93.89.128 port 33052 [preauth] Apr 23 13:20:01 ip-172-31-29-215 CRON[2141622]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 13:20:01 ip-172-31-29-215 CRON[2141622]: pam_unix(cron:session): session closed for user smmsp Apr 23 13:28:49 ip-172-31-29-215 sshd[2141795]: Invalid user aptuslegal from 172.94.9.57 port 59102 Apr 23 13:28:49 ip-172-31-29-215 sshd[2141795]: Connection closed by invalid user aptuslegal 172.94.9.57 port 59102 [preauth] Apr 23 13:30:59 ip-172-31-29-215 sshd[2141809]: Invalid user aptuslegal from 87.106.255.77 port 55360 Apr 23 13:30:59 ip-172-31-29-215 sshd[2141809]: Connection closed by invalid user aptuslegal 87.106.255.77 port 55360 [preauth] Apr 23 13:39:01 ip-172-31-29-215 CRON[2141830]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 13:39:01 ip-172-31-29-215 CRON[2141830]: pam_unix(cron:session): session closed for user root Apr 23 13:40:01 ip-172-31-29-215 CRON[2141891]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 13:40:01 ip-172-31-29-215 CRON[2141891]: pam_unix(cron:session): session closed for user smmsp Apr 23 13:44:48 ip-172-31-29-215 sshd[2142028]: Invalid user aptuslegal from 66.116.199.61 port 52556 Apr 23 13:44:48 ip-172-31-29-215 sshd[2142028]: Connection closed by invalid user aptuslegal 66.116.199.61 port 52556 [preauth] Apr 23 14:00:01 ip-172-31-29-215 CRON[2142090]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 14:00:01 ip-172-31-29-215 CRON[2142090]: pam_unix(cron:session): session closed for user smmsp Apr 23 14:03:04 ip-172-31-29-215 sshd[2142115]: error: kex_exchange_identification: read: Connection reset by peer Apr 23 14:03:19 ip-172-31-29-215 sshd[2142116]: Connection closed by authenticating user root 185.93.89.48 port 47040 [preauth] Apr 23 14:06:23 ip-172-31-29-215 sshd[2142119]: Connection closed by authenticating user root 161.132.38.88 port 43284 [preauth] Apr 23 14:09:01 ip-172-31-29-215 CRON[2142122]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 14:09:01 ip-172-31-29-215 CRON[2142122]: pam_unix(cron:session): session closed for user root Apr 23 14:15:05 ip-172-31-29-215 sshd[2142184]: Invalid user aptuslegal from 77.90.185.105 port 36406 Apr 23 14:15:05 ip-172-31-29-215 sshd[2142184]: Connection closed by invalid user aptuslegal 77.90.185.105 port 36406 [preauth] Apr 23 14:17:01 ip-172-31-29-215 CRON[2142187]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 14:17:01 ip-172-31-29-215 CRON[2142187]: pam_unix(cron:session): session closed for user root Apr 23 14:17:11 ip-172-31-29-215 sshd[2142190]: Invalid user aptuslegal from 77.90.185.87 port 53318 Apr 23 14:17:11 ip-172-31-29-215 sshd[2142190]: Connection closed by invalid user aptuslegal 77.90.185.87 port 53318 [preauth] Apr 23 14:20:01 ip-172-31-29-215 CRON[2142194]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 14:20:01 ip-172-31-29-215 CRON[2142194]: pam_unix(cron:session): session closed for user smmsp Apr 23 14:25:47 ip-172-31-29-215 sshd[2142217]: Invalid user aptuslegal from 68.178.169.200 port 38730 Apr 23 14:25:50 ip-172-31-29-215 sshd[2142217]: Connection closed by invalid user aptuslegal 68.178.169.200 port 38730 [preauth] Apr 23 14:26:50 ip-172-31-29-215 sshd[2142219]: Invalid user aptuslegal from 103.106.104.187 port 36536 Apr 23 14:26:50 ip-172-31-29-215 sshd[2142219]: Connection closed by invalid user aptuslegal 103.106.104.187 port 36536 [preauth] Apr 23 14:34:52 ip-172-31-29-215 sshd[2142226]: Connection closed by authenticating user root 172.94.9.64 port 35064 [preauth] Apr 23 14:34:58 ip-172-31-29-215 sshd[2142228]: Connection closed by authenticating user root 172.94.9.48 port 45872 [preauth] Apr 23 14:39:01 ip-172-31-29-215 CRON[2142273]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 14:39:01 ip-172-31-29-215 CRON[2142273]: pam_unix(cron:session): session closed for user root Apr 23 14:40:01 ip-172-31-29-215 CRON[2142331]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 14:40:01 ip-172-31-29-215 CRON[2142331]: pam_unix(cron:session): session closed for user smmsp Apr 23 14:45:00 ip-172-31-29-215 sshd[2142367]: Invalid user aptuslegal from 172.94.9.61 port 50700 Apr 23 14:45:00 ip-172-31-29-215 sshd[2142367]: Connection closed by invalid user aptuslegal 172.94.9.61 port 50700 [preauth] Apr 23 15:00:01 ip-172-31-29-215 CRON[2142652]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 15:00:01 ip-172-31-29-215 CRON[2142652]: pam_unix(cron:session): session closed for user smmsp Apr 23 15:05:35 ip-172-31-29-215 sshd[2142710]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 57112 ssh2 [preauth] Apr 23 15:05:35 ip-172-31-29-215 sshd[2142710]: Disconnecting authenticating user root 47.185.144.12 port 57112: Too many authentication failures [preauth] Apr 23 15:05:37 ip-172-31-29-215 sshd[2142713]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 57128 ssh2 [preauth] Apr 23 15:05:37 ip-172-31-29-215 sshd[2142713]: Disconnecting authenticating user root 47.185.144.12 port 57128: Too many authentication failures [preauth] Apr 23 15:05:40 ip-172-31-29-215 sshd[2142715]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 57140 ssh2 [preauth] Apr 23 15:05:40 ip-172-31-29-215 sshd[2142715]: Disconnecting authenticating user root 47.185.144.12 port 57140: Too many authentication failures [preauth] Apr 23 15:05:41 ip-172-31-29-215 sshd[2142717]: Received disconnect from 47.185.144.12 port 50822:11: disconnected by user [preauth] Apr 23 15:05:41 ip-172-31-29-215 sshd[2142717]: Disconnected from authenticating user root 47.185.144.12 port 50822 [preauth] Apr 23 15:05:42 ip-172-31-29-215 sshd[2142719]: Invalid user admin from 47.185.144.12 port 50832 Apr 23 15:05:42 ip-172-31-29-215 sshd[2142719]: error: maximum authentication attempts exceeded for invalid user admin from 47.185.144.12 port 50832 ssh2 [preauth] Apr 23 15:05:42 ip-172-31-29-215 sshd[2142719]: Disconnecting invalid user admin 47.185.144.12 port 50832: Too many authentication failures [preauth] Apr 23 15:05:43 ip-172-31-29-215 sshd[2142721]: Invalid user admin from 47.185.144.12 port 50842 Apr 23 15:05:44 ip-172-31-29-215 sshd[2142721]: error: maximum authentication attempts exceeded for invalid user admin from 47.185.144.12 port 50842 ssh2 [preauth] Apr 23 15:05:44 ip-172-31-29-215 sshd[2142721]: Disconnecting invalid user admin 47.185.144.12 port 50842: Too many authentication failures [preauth] Apr 23 15:05:45 ip-172-31-29-215 sshd[2142723]: Invalid user admin from 47.185.144.12 port 50844 Apr 23 15:05:45 ip-172-31-29-215 sshd[2142723]: Received disconnect from 47.185.144.12 port 50844:11: disconnected by user [preauth] Apr 23 15:05:45 ip-172-31-29-215 sshd[2142723]: Disconnected from invalid user admin 47.185.144.12 port 50844 [preauth] Apr 23 15:05:48 ip-172-31-29-215 sshd[2142725]: Invalid user oracle from 47.185.144.12 port 50848 Apr 23 15:05:48 ip-172-31-29-215 sshd[2142725]: error: maximum authentication attempts exceeded for invalid user oracle from 47.185.144.12 port 50848 ssh2 [preauth] Apr 23 15:05:48 ip-172-31-29-215 sshd[2142725]: Disconnecting invalid user oracle 47.185.144.12 port 50848: Too many authentication failures [preauth] Apr 23 15:05:50 ip-172-31-29-215 sshd[2142727]: Invalid user oracle from 47.185.144.12 port 50864 Apr 23 15:05:50 ip-172-31-29-215 sshd[2142727]: error: maximum authentication attempts exceeded for invalid user oracle from 47.185.144.12 port 50864 ssh2 [preauth] Apr 23 15:05:50 ip-172-31-29-215 sshd[2142727]: Disconnecting invalid user oracle 47.185.144.12 port 50864: Too many authentication failures [preauth] Apr 23 15:05:51 ip-172-31-29-215 sshd[2142729]: Invalid user oracle from 47.185.144.12 port 36606 Apr 23 15:05:51 ip-172-31-29-215 sshd[2142729]: Received disconnect from 47.185.144.12 port 36606:11: disconnected by user [preauth] Apr 23 15:05:51 ip-172-31-29-215 sshd[2142729]: Disconnected from invalid user oracle 47.185.144.12 port 36606 [preauth] Apr 23 15:05:51 ip-172-31-29-215 sshd[2142731]: Invalid user usuario from 47.185.144.12 port 36616 Apr 23 15:05:52 ip-172-31-29-215 sshd[2142731]: error: maximum authentication attempts exceeded for invalid user usuario from 47.185.144.12 port 36616 ssh2 [preauth] Apr 23 15:05:52 ip-172-31-29-215 sshd[2142731]: Disconnecting invalid user usuario 47.185.144.12 port 36616: Too many authentication failures [preauth] Apr 23 15:05:52 ip-172-31-29-215 sshd[2142733]: Invalid user usuario from 47.185.144.12 port 36630 Apr 23 15:05:52 ip-172-31-29-215 sshd[2142733]: error: maximum authentication attempts exceeded for invalid user usuario from 47.185.144.12 port 36630 ssh2 [preauth] Apr 23 15:05:52 ip-172-31-29-215 sshd[2142733]: Disconnecting invalid user usuario 47.185.144.12 port 36630: Too many authentication failures [preauth] Apr 23 15:05:53 ip-172-31-29-215 sshd[2142735]: Invalid user usuario from 47.185.144.12 port 36634 Apr 23 15:05:53 ip-172-31-29-215 sshd[2142735]: Received disconnect from 47.185.144.12 port 36634:11: disconnected by user [preauth] Apr 23 15:05:53 ip-172-31-29-215 sshd[2142735]: Disconnected from invalid user usuario 47.185.144.12 port 36634 [preauth] Apr 23 15:05:53 ip-172-31-29-215 sshd[2142737]: Invalid user test from 47.185.144.12 port 36644 Apr 23 15:05:54 ip-172-31-29-215 sshd[2142737]: error: maximum authentication attempts exceeded for invalid user test from 47.185.144.12 port 36644 ssh2 [preauth] Apr 23 15:05:54 ip-172-31-29-215 sshd[2142737]: Disconnecting invalid user test 47.185.144.12 port 36644: Too many authentication failures [preauth] Apr 23 15:05:54 ip-172-31-29-215 sshd[2142739]: Invalid user test from 47.185.144.12 port 36652 Apr 23 15:05:54 ip-172-31-29-215 sshd[2142739]: error: maximum authentication attempts exceeded for invalid user test from 47.185.144.12 port 36652 ssh2 [preauth] Apr 23 15:05:54 ip-172-31-29-215 sshd[2142739]: Disconnecting invalid user test 47.185.144.12 port 36652: Too many authentication failures [preauth] Apr 23 15:05:56 ip-172-31-29-215 sshd[2142741]: Invalid user test from 47.185.144.12 port 36658 Apr 23 15:05:56 ip-172-31-29-215 sshd[2142741]: Received disconnect from 47.185.144.12 port 36658:11: disconnected by user [preauth] Apr 23 15:05:56 ip-172-31-29-215 sshd[2142741]: Disconnected from invalid user test 47.185.144.12 port 36658 [preauth] Apr 23 15:05:57 ip-172-31-29-215 sshd[2142743]: Invalid user user from 47.185.144.12 port 36672 Apr 23 15:05:57 ip-172-31-29-215 sshd[2142743]: error: maximum authentication attempts exceeded for invalid user user from 47.185.144.12 port 36672 ssh2 [preauth] Apr 23 15:05:57 ip-172-31-29-215 sshd[2142743]: Disconnecting invalid user user 47.185.144.12 port 36672: Too many authentication failures [preauth] Apr 23 15:05:58 ip-172-31-29-215 sshd[2142745]: Invalid user user from 47.185.144.12 port 36678 Apr 23 15:05:58 ip-172-31-29-215 sshd[2142745]: error: maximum authentication attempts exceeded for invalid user user from 47.185.144.12 port 36678 ssh2 [preauth] Apr 23 15:05:58 ip-172-31-29-215 sshd[2142745]: Disconnecting invalid user user 47.185.144.12 port 36678: Too many authentication failures [preauth] Apr 23 15:05:59 ip-172-31-29-215 sshd[2142747]: Invalid user user from 47.185.144.12 port 37156 Apr 23 15:05:59 ip-172-31-29-215 sshd[2142747]: Received disconnect from 47.185.144.12 port 37156:11: disconnected by user [preauth] Apr 23 15:05:59 ip-172-31-29-215 sshd[2142747]: Disconnected from invalid user user 47.185.144.12 port 37156 [preauth] Apr 23 15:05:59 ip-172-31-29-215 sshd[2142749]: Invalid user ftpuser from 47.185.144.12 port 37166 Apr 23 15:05:59 ip-172-31-29-215 sshd[2142749]: error: maximum authentication attempts exceeded for invalid user ftpuser from 47.185.144.12 port 37166 ssh2 [preauth] Apr 23 15:05:59 ip-172-31-29-215 sshd[2142749]: Disconnecting invalid user ftpuser 47.185.144.12 port 37166: Too many authentication failures [preauth] Apr 23 15:06:00 ip-172-31-29-215 sshd[2142751]: Invalid user ftpuser from 47.185.144.12 port 37170 Apr 23 15:06:00 ip-172-31-29-215 sshd[2142751]: error: maximum authentication attempts exceeded for invalid user ftpuser from 47.185.144.12 port 37170 ssh2 [preauth] Apr 23 15:06:00 ip-172-31-29-215 sshd[2142751]: Disconnecting invalid user ftpuser 47.185.144.12 port 37170: Too many authentication failures [preauth] Apr 23 15:06:01 ip-172-31-29-215 sshd[2142753]: Invalid user ftpuser from 47.185.144.12 port 37180 Apr 23 15:06:01 ip-172-31-29-215 sshd[2142753]: Received disconnect from 47.185.144.12 port 37180:11: disconnected by user [preauth] Apr 23 15:06:01 ip-172-31-29-215 sshd[2142753]: Disconnected from invalid user ftpuser 47.185.144.12 port 37180 [preauth] Apr 23 15:06:02 ip-172-31-29-215 sshd[2142755]: Invalid user test1 from 47.185.144.12 port 37182 Apr 23 15:06:02 ip-172-31-29-215 sshd[2142755]: error: maximum authentication attempts exceeded for invalid user test1 from 47.185.144.12 port 37182 ssh2 [preauth] Apr 23 15:06:02 ip-172-31-29-215 sshd[2142755]: Disconnecting invalid user test1 47.185.144.12 port 37182: Too many authentication failures [preauth] Apr 23 15:06:04 ip-172-31-29-215 sshd[2142757]: Invalid user test1 from 47.185.144.12 port 37184 Apr 23 15:06:05 ip-172-31-29-215 sshd[2142757]: error: maximum authentication attempts exceeded for invalid user test1 from 47.185.144.12 port 37184 ssh2 [preauth] Apr 23 15:06:05 ip-172-31-29-215 sshd[2142757]: Disconnecting invalid user test1 47.185.144.12 port 37184: Too many authentication failures [preauth] Apr 23 15:06:05 ip-172-31-29-215 sshd[2142759]: Invalid user test1 from 47.185.144.12 port 37192 Apr 23 15:06:06 ip-172-31-29-215 sshd[2142759]: Received disconnect from 47.185.144.12 port 37192:11: disconnected by user [preauth] Apr 23 15:06:06 ip-172-31-29-215 sshd[2142759]: Disconnected from invalid user test1 47.185.144.12 port 37192 [preauth] Apr 23 15:06:06 ip-172-31-29-215 sshd[2142761]: Invalid user test2 from 47.185.144.12 port 37196 Apr 23 15:06:06 ip-172-31-29-215 sshd[2142761]: error: maximum authentication attempts exceeded for invalid user test2 from 47.185.144.12 port 37196 ssh2 [preauth] Apr 23 15:06:06 ip-172-31-29-215 sshd[2142761]: Disconnecting invalid user test2 47.185.144.12 port 37196: Too many authentication failures [preauth] Apr 23 15:06:07 ip-172-31-29-215 sshd[2142763]: Invalid user test2 from 47.185.144.12 port 37210 Apr 23 15:06:07 ip-172-31-29-215 sshd[2142763]: error: maximum authentication attempts exceeded for invalid user test2 from 47.185.144.12 port 37210 ssh2 [preauth] Apr 23 15:06:07 ip-172-31-29-215 sshd[2142763]: Disconnecting invalid user test2 47.185.144.12 port 37210: Too many authentication failures [preauth] Apr 23 15:06:08 ip-172-31-29-215 sshd[2142765]: Invalid user test2 from 47.185.144.12 port 37214 Apr 23 15:06:08 ip-172-31-29-215 sshd[2142765]: Received disconnect from 47.185.144.12 port 37214:11: disconnected by user [preauth] Apr 23 15:06:08 ip-172-31-29-215 sshd[2142765]: Disconnected from invalid user test2 47.185.144.12 port 37214 [preauth] Apr 23 15:06:10 ip-172-31-29-215 sshd[2142767]: error: maximum authentication attempts exceeded for ubuntu from 47.185.144.12 port 37228 ssh2 [preauth] Apr 23 15:06:10 ip-172-31-29-215 sshd[2142767]: Disconnecting authenticating user ubuntu 47.185.144.12 port 37228: Too many authentication failures [preauth] Apr 23 15:06:11 ip-172-31-29-215 sshd[2142769]: error: maximum authentication attempts exceeded for ubuntu from 47.185.144.12 port 33906 ssh2 [preauth] Apr 23 15:06:11 ip-172-31-29-215 sshd[2142769]: Disconnecting authenticating user ubuntu 47.185.144.12 port 33906: Too many authentication failures [preauth] Apr 23 15:06:11 ip-172-31-29-215 sshd[2142771]: Received disconnect from 47.185.144.12 port 33908:11: disconnected by user [preauth] Apr 23 15:06:11 ip-172-31-29-215 sshd[2142771]: Disconnected from authenticating user ubuntu 47.185.144.12 port 33908 [preauth] Apr 23 15:06:12 ip-172-31-29-215 sshd[2142773]: Invalid user pi from 47.185.144.12 port 33924 Apr 23 15:06:12 ip-172-31-29-215 sshd[2142773]: Received disconnect from 47.185.144.12 port 33924:11: disconnected by user [preauth] Apr 23 15:06:12 ip-172-31-29-215 sshd[2142773]: Disconnected from invalid user pi 47.185.144.12 port 33924 [preauth] Apr 23 15:06:13 ip-172-31-29-215 sshd[2142775]: Invalid user baikal from 47.185.144.12 port 33928 Apr 23 15:06:13 ip-172-31-29-215 sshd[2142775]: Received disconnect from 47.185.144.12 port 33928:11: disconnected by user [preauth] Apr 23 15:06:13 ip-172-31-29-215 sshd[2142775]: Disconnected from invalid user baikal 47.185.144.12 port 33928 [preauth] Apr 23 15:09:01 ip-172-31-29-215 CRON[2142778]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 15:09:01 ip-172-31-29-215 CRON[2142778]: pam_unix(cron:session): session closed for user root Apr 23 15:15:57 ip-172-31-29-215 sshd[2142847]: error: kex_exchange_identification: Connection closed by remote host Apr 23 15:17:01 ip-172-31-29-215 CRON[2142848]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 15:17:01 ip-172-31-29-215 CRON[2142848]: pam_unix(cron:session): session closed for user root Apr 23 15:20:01 ip-172-31-29-215 CRON[2142855]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 15:20:01 ip-172-31-29-215 CRON[2142855]: pam_unix(cron:session): session closed for user smmsp Apr 23 15:24:31 ip-172-31-29-215 sshd[2142887]: Invalid user aptuslegal from 192.253.248.133 port 41626 Apr 23 15:24:31 ip-172-31-29-215 sshd[2142887]: Connection closed by invalid user aptuslegal 192.253.248.133 port 41626 [preauth] Apr 23 15:28:14 ip-172-31-29-215 sshd[2143010]: Connection closed by authenticating user root 72.167.34.120 port 56836 [preauth] Apr 23 15:31:01 ip-172-31-29-215 sshd[2143023]: Connection closed by authenticating user root 172.94.9.63 port 45892 [preauth] Apr 23 15:32:26 ip-172-31-29-215 sshd[2143026]: Invalid user aptuslegal from 213.177.179.26 port 50582 Apr 23 15:32:26 ip-172-31-29-215 sshd[2143026]: Connection closed by invalid user aptuslegal 213.177.179.26 port 50582 [preauth] Apr 23 15:34:43 ip-172-31-29-215 sshd[2143029]: Invalid user aptuslegal from 192.253.248.136 port 42454 Apr 23 15:34:43 ip-172-31-29-215 sshd[2143029]: Connection closed by invalid user aptuslegal 192.253.248.136 port 42454 [preauth] Apr 23 15:39:01 ip-172-31-29-215 CRON[2143066]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 15:39:01 ip-172-31-29-215 CRON[2143066]: pam_unix(cron:session): session closed for user root Apr 23 15:40:01 ip-172-31-29-215 CRON[2143123]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 15:40:01 ip-172-31-29-215 CRON[2143123]: pam_unix(cron:session): session closed for user smmsp Apr 23 15:55:31 ip-172-31-29-215 sshd[2143227]: Connection closed by authenticating user root 42.96.16.250 port 48120 [preauth] Apr 23 16:00:01 ip-172-31-29-215 CRON[2143408]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 16:00:01 ip-172-31-29-215 CRON[2143408]: pam_unix(cron:session): session closed for user smmsp Apr 23 16:05:42 ip-172-31-29-215 sshd[2143557]: Invalid user aptuslegal from 171.244.61.223 port 59350 Apr 23 16:05:45 ip-172-31-29-215 sshd[2143557]: Connection closed by invalid user aptuslegal 171.244.61.223 port 59350 [preauth] Apr 23 16:09:01 ip-172-31-29-215 CRON[2143572]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 16:09:01 ip-172-31-29-215 CRON[2143572]: pam_unix(cron:session): session closed for user root Apr 23 16:15:17 ip-172-31-29-215 sshd[2143640]: Connection closed by authenticating user root 103.90.227.178 port 45114 [preauth] Apr 23 16:17:01 ip-172-31-29-215 CRON[2143654]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 16:17:01 ip-172-31-29-215 CRON[2143654]: pam_unix(cron:session): session closed for user root Apr 23 16:20:01 ip-172-31-29-215 CRON[2143695]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 16:20:01 ip-172-31-29-215 CRON[2143695]: pam_unix(cron:session): session closed for user smmsp Apr 23 16:25:43 ip-172-31-29-215 sshd[2143765]: error: kex_exchange_identification: Connection closed by remote host Apr 23 16:25:45 ip-172-31-29-215 sshd[2143766]: Connection closed by authenticating user root 112.47.128.74 port 40792 [preauth] Apr 23 16:36:52 ip-172-31-29-215 sshd[2143892]: Connection closed by authenticating user root 66.116.199.61 port 38954 [preauth] Apr 23 16:39:01 ip-172-31-29-215 CRON[2143898]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 16:39:01 ip-172-31-29-215 CRON[2143898]: pam_unix(cron:session): session closed for user root Apr 23 16:40:01 ip-172-31-29-215 CRON[2143955]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 16:40:01 ip-172-31-29-215 CRON[2143955]: pam_unix(cron:session): session closed for user smmsp Apr 23 16:49:01 ip-172-31-29-215 sshd[2144232]: Connection closed by authenticating user root 172.94.9.128 port 39464 [preauth] Apr 23 16:52:51 ip-172-31-29-215 sshd[2144251]: Invalid user aptuslegal from 213.209.159.13 port 35706 Apr 23 16:52:51 ip-172-31-29-215 sshd[2144251]: Connection closed by invalid user aptuslegal 213.209.159.13 port 35706 [preauth] Apr 23 16:54:01 ip-172-31-29-215 CRON[2144269]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 16:54:01 ip-172-31-29-215 CRON[2144269]: pam_unix(cron:session): session closed for user root Apr 23 17:00:01 ip-172-31-29-215 CRON[2144354]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 17:00:01 ip-172-31-29-215 CRON[2144354]: pam_unix(cron:session): session closed for user smmsp Apr 23 17:02:20 ip-172-31-29-215 sshd[2144417]: Invalid user aptuslegal from 95.174.97.156 port 38740 Apr 23 17:02:21 ip-172-31-29-215 sshd[2144417]: Connection closed by invalid user aptuslegal 95.174.97.156 port 38740 [preauth] Apr 23 17:07:34 ip-172-31-29-215 sshd[2144481]: Connection closed by authenticating user root 34.138.135.178 port 41908 [preauth] Apr 23 17:09:01 ip-172-31-29-215 CRON[2144502]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 17:09:01 ip-172-31-29-215 CRON[2144502]: pam_unix(cron:session): session closed for user root Apr 23 17:10:29 ip-172-31-29-215 sshd[2144559]: Invalid user aptuslegal from 185.93.89.29 port 51990 Apr 23 17:10:30 ip-172-31-29-215 sshd[2144559]: Connection closed by invalid user aptuslegal 185.93.89.29 port 51990 [preauth] Apr 23 17:13:48 ip-172-31-29-215 sshd[2144562]: Invalid user aptuslegal from 185.93.89.70 port 43818 Apr 23 17:13:49 ip-172-31-29-215 sshd[2144562]: Connection closed by invalid user aptuslegal 185.93.89.70 port 43818 [preauth] Apr 23 17:17:01 ip-172-31-29-215 CRON[2144582]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 17:17:01 ip-172-31-29-215 CRON[2144582]: pam_unix(cron:session): session closed for user root Apr 23 17:17:22 ip-172-31-29-215 sshd[2144585]: Invalid user aptuslegal from 192.253.248.130 port 57796 Apr 23 17:17:24 ip-172-31-29-215 sshd[2144585]: Connection closed by invalid user aptuslegal 192.253.248.130 port 57796 [preauth] Apr 23 17:20:01 ip-172-31-29-215 CRON[2144622]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 17:20:02 ip-172-31-29-215 CRON[2144622]: pam_unix(cron:session): session closed for user smmsp Apr 23 17:37:53 ip-172-31-29-215 sshd[2144781]: Connection closed by authenticating user root 172.94.9.61 port 33728 [preauth] Apr 23 17:39:01 ip-172-31-29-215 CRON[2144789]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 17:39:01 ip-172-31-29-215 CRON[2144789]: pam_unix(cron:session): session closed for user root Apr 23 17:40:01 ip-172-31-29-215 CRON[2144877]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 17:40:01 ip-172-31-29-215 CRON[2144877]: pam_unix(cron:session): session closed for user smmsp Apr 23 17:51:38 ip-172-31-29-215 sshd[2145072]: Connection closed by authenticating user root 213.177.179.39 port 45314 [preauth] Apr 23 18:00:01 ip-172-31-29-215 CRON[2145095]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 18:00:01 ip-172-31-29-215 CRON[2145095]: pam_unix(cron:session): session closed for user smmsp Apr 23 18:05:56 ip-172-31-29-215 sshd[2145119]: Connection closed by authenticating user root 36.212.132.184 port 39616 [preauth] Apr 23 18:09:01 ip-172-31-29-215 CRON[2145123]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 18:09:01 ip-172-31-29-215 CRON[2145123]: pam_unix(cron:session): session closed for user root Apr 23 18:17:01 ip-172-31-29-215 CRON[2145180]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 18:17:01 ip-172-31-29-215 CRON[2145180]: pam_unix(cron:session): session closed for user root Apr 23 18:20:01 ip-172-31-29-215 CRON[2145185]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 18:20:01 ip-172-31-29-215 CRON[2145185]: pam_unix(cron:session): session closed for user smmsp Apr 23 18:27:46 ip-172-31-29-215 sshd[2145216]: Invalid user aptuslegal from 192.253.248.133 port 45358 Apr 23 18:27:46 ip-172-31-29-215 sshd[2145216]: Connection closed by invalid user aptuslegal 192.253.248.133 port 45358 [preauth] Apr 23 18:32:05 ip-172-31-29-215 sshd[2145222]: error: kex_exchange_identification: read: Connection reset by peer Apr 23 18:39:01 ip-172-31-29-215 CRON[2145225]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 18:39:01 ip-172-31-29-215 CRON[2145225]: pam_unix(cron:session): session closed for user root Apr 23 18:40:01 ip-172-31-29-215 CRON[2145283]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 18:40:01 ip-172-31-29-215 CRON[2145283]: pam_unix(cron:session): session closed for user smmsp Apr 23 18:40:55 ip-172-31-29-215 sshd[2145305]: Connection closed by authenticating user root 43.225.52.87 port 55122 [preauth] Apr 23 18:49:24 ip-172-31-29-215 sshd[2145533]: Connection closed by authenticating user root 64.227.150.168 port 35504 [preauth] Apr 23 19:00:01 ip-172-31-29-215 CRON[2145540]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 19:00:01 ip-172-31-29-215 CRON[2145540]: pam_unix(cron:session): session closed for user smmsp Apr 23 19:00:38 ip-172-31-29-215 sshd[2145563]: Invalid user aptuslegal from 87.106.255.77 port 45268 Apr 23 19:00:38 ip-172-31-29-215 sshd[2145563]: Connection closed by invalid user aptuslegal 87.106.255.77 port 45268 [preauth] Apr 23 19:02:51 ip-172-31-29-215 sshd[2145567]: Connection closed by authenticating user root 42.96.16.250 port 53978 [preauth] Apr 23 19:05:19 ip-172-31-29-215 sshd[2145571]: Invalid user aptuslegal from 103.106.104.187 port 36268 Apr 23 19:05:21 ip-172-31-29-215 sshd[2145571]: Connection closed by invalid user aptuslegal 103.106.104.187 port 36268 [preauth] Apr 23 19:09:01 ip-172-31-29-215 CRON[2145576]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 19:09:01 ip-172-31-29-215 CRON[2145576]: pam_unix(cron:session): session closed for user root Apr 23 19:10:33 ip-172-31-29-215 sshd[2145633]: Connection closed by authenticating user root 162.240.167.229 port 40666 [preauth] Apr 23 19:17:01 ip-172-31-29-215 CRON[2145637]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 19:17:01 ip-172-31-29-215 CRON[2145637]: pam_unix(cron:session): session closed for user root Apr 23 19:20:01 ip-172-31-29-215 CRON[2145642]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 19:20:01 ip-172-31-29-215 CRON[2145642]: pam_unix(cron:session): session closed for user smmsp Apr 23 19:33:17 ip-172-31-29-215 sshd[2145670]: error: kex_exchange_identification: read: Connection reset by peer Apr 23 19:39:01 ip-172-31-29-215 CRON[2145685]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 19:39:01 ip-172-31-29-215 CRON[2145685]: pam_unix(cron:session): session closed for user root Apr 23 19:40:01 ip-172-31-29-215 CRON[2145754]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 19:40:01 ip-172-31-29-215 CRON[2145754]: pam_unix(cron:session): session closed for user smmsp Apr 23 19:54:12 ip-172-31-29-215 sshd[2145836]: Invalid user aptuslegal from 213.209.159.13 port 51990 Apr 23 19:54:12 ip-172-31-29-215 sshd[2145836]: Connection closed by invalid user aptuslegal 213.209.159.13 port 51990 [preauth] Apr 23 19:54:19 ip-172-31-29-215 sshd[2145838]: Connection closed by authenticating user root 172.94.9.128 port 51460 [preauth] Apr 23 19:58:46 ip-172-31-29-215 sshd[2145843]: error: kex_exchange_identification: client sent invalid protocol identifier "" Apr 23 19:58:46 ip-172-31-29-215 sshd[2145844]: error: kex_exchange_identification: Connection closed by remote host Apr 23 19:59:17 ip-172-31-29-215 sshd[2145845]: error: kex_exchange_identification: Connection closed by remote host Apr 23 20:00:01 ip-172-31-29-215 CRON[2145847]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 20:00:01 ip-172-31-29-215 CRON[2145847]: pam_unix(cron:session): session closed for user smmsp Apr 23 20:01:28 ip-172-31-29-215 sshd[2145870]: error: kex_exchange_identification: banner line contains invalid characters Apr 23 20:02:10 ip-172-31-29-215 sshd[2145871]: Connection closed by 16.58.56.214 port 46124 [preauth] Apr 23 20:02:47 ip-172-31-29-215 sshd[2145873]: error: kex_exchange_identification: banner line contains invalid characters Apr 23 20:05:01 ip-172-31-29-215 sshd[2145875]: Invalid user aptuslegal from 185.93.89.103 port 33678 Apr 23 20:05:01 ip-172-31-29-215 sshd[2145875]: Connection closed by invalid user aptuslegal 185.93.89.103 port 33678 [preauth] Apr 23 20:09:01 ip-172-31-29-215 CRON[2145879]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 20:09:01 ip-172-31-29-215 CRON[2145879]: pam_unix(cron:session): session closed for user root Apr 23 20:10:49 ip-172-31-29-215 sshd[2145937]: Invalid user aptuslegal from 192.253.248.130 port 59304 Apr 23 20:10:49 ip-172-31-29-215 sshd[2145937]: Connection closed by invalid user aptuslegal 192.253.248.130 port 59304 [preauth] Apr 23 20:17:01 ip-172-31-29-215 CRON[2145941]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 20:17:01 ip-172-31-29-215 CRON[2145941]: pam_unix(cron:session): session closed for user root Apr 23 20:20:01 ip-172-31-29-215 CRON[2145946]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 20:20:01 ip-172-31-29-215 CRON[2145946]: pam_unix(cron:session): session closed for user smmsp Apr 23 20:24:20 ip-172-31-29-215 sshd[2145969]: Invalid user aptuslegal from 164.126.161.177 port 42106 Apr 23 20:24:23 ip-172-31-29-215 sshd[2145969]: Connection closed by invalid user aptuslegal 164.126.161.177 port 42106 [preauth] Apr 23 20:26:24 ip-172-31-29-215 sshd[2145971]: Invalid user aptuslegal from 77.90.185.45 port 36178 Apr 23 20:26:24 ip-172-31-29-215 sshd[2145971]: Connection closed by invalid user aptuslegal 77.90.185.45 port 36178 [preauth] Apr 23 20:32:57 ip-172-31-29-215 sshd[2145977]: error: kex_exchange_identification: read: Connection reset by peer Apr 23 20:34:52 ip-172-31-29-215 sshd[2145980]: Connection closed by authenticating user root 172.94.9.158 port 44984 [preauth] Apr 23 20:38:35 ip-172-31-29-215 sshd[2145984]: Connection closed by authenticating user root 172.94.9.127 port 40336 [preauth] Apr 23 20:39:01 ip-172-31-29-215 CRON[2145986]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 20:39:01 ip-172-31-29-215 CRON[2145986]: pam_unix(cron:session): session closed for user root Apr 23 20:40:01 ip-172-31-29-215 CRON[2146043]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 20:40:01 ip-172-31-29-215 CRON[2146043]: pam_unix(cron:session): session closed for user smmsp Apr 23 20:51:08 ip-172-31-29-215 sshd[2146295]: Invalid user aptuslegal from 172.94.9.63 port 41278 Apr 23 20:51:09 ip-172-31-29-215 sshd[2146295]: Connection closed by invalid user aptuslegal 172.94.9.63 port 41278 [preauth] Apr 23 21:00:01 ip-172-31-29-215 CRON[2146301]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 21:00:01 ip-172-31-29-215 CRON[2146301]: pam_unix(cron:session): session closed for user smmsp Apr 23 21:09:01 ip-172-31-29-215 CRON[2146328]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 21:09:01 ip-172-31-29-215 CRON[2146328]: pam_unix(cron:session): session closed for user root Apr 23 21:17:01 ip-172-31-29-215 CRON[2146387]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 21:17:01 ip-172-31-29-215 CRON[2146387]: pam_unix(cron:session): session closed for user root Apr 23 21:17:24 ip-172-31-29-215 sshd[2146390]: error: kex_exchange_identification: Connection closed by remote host Apr 23 21:17:26 ip-172-31-29-215 sshd[2146391]: Connection closed by authenticating user root 120.48.24.187 port 33528 [preauth] Apr 23 21:20:01 ip-172-31-29-215 CRON[2146396]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 21:20:01 ip-172-31-29-215 CRON[2146396]: pam_unix(cron:session): session closed for user smmsp Apr 23 21:39:01 ip-172-31-29-215 CRON[2146432]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 21:39:01 ip-172-31-29-215 CRON[2146432]: pam_unix(cron:session): session closed for user root Apr 23 21:40:01 ip-172-31-29-215 CRON[2146490]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 21:40:01 ip-172-31-29-215 CRON[2146490]: pam_unix(cron:session): session closed for user smmsp Apr 23 21:56:11 ip-172-31-29-215 sshd[2146527]: Invalid user aptuslegal from 185.93.89.29 port 48816 Apr 23 21:56:11 ip-172-31-29-215 sshd[2146527]: Connection closed by invalid user aptuslegal 185.93.89.29 port 48816 [preauth] Apr 23 21:58:14 ip-172-31-29-215 sshd[2146564]: Invalid user aptuslegal from 87.106.255.77 port 33216 Apr 23 21:58:14 ip-172-31-29-215 sshd[2146564]: Connection closed by invalid user aptuslegal 87.106.255.77 port 33216 [preauth] Apr 23 22:00:01 ip-172-31-29-215 CRON[2146568]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 22:00:01 ip-172-31-29-215 CRON[2146568]: pam_unix(cron:session): session closed for user smmsp Apr 23 22:09:01 ip-172-31-29-215 CRON[2146593]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 22:09:01 ip-172-31-29-215 CRON[2146593]: pam_unix(cron:session): session closed for user root Apr 23 22:17:01 ip-172-31-29-215 CRON[2146652]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 22:17:01 ip-172-31-29-215 CRON[2146652]: pam_unix(cron:session): session closed for user root Apr 23 22:20:01 ip-172-31-29-215 CRON[2146657]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 22:20:01 ip-172-31-29-215 CRON[2146657]: pam_unix(cron:session): session closed for user smmsp Apr 23 22:26:13 ip-172-31-29-215 sshd[2146680]: Connection closed by authenticating user root 172.94.9.158 port 51344 [preauth] Apr 23 22:39:01 ip-172-31-29-215 CRON[2146695]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 22:39:01 ip-172-31-29-215 CRON[2146695]: pam_unix(cron:session): session closed for user root Apr 23 22:40:01 ip-172-31-29-215 CRON[2146752]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 22:40:01 ip-172-31-29-215 CRON[2146752]: pam_unix(cron:session): session closed for user smmsp Apr 23 23:00:01 ip-172-31-29-215 CRON[2147004]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 23:00:01 ip-172-31-29-215 CRON[2147004]: pam_unix(cron:session): session closed for user smmsp Apr 23 23:09:01 ip-172-31-29-215 CRON[2147029]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 23:09:01 ip-172-31-29-215 CRON[2147029]: pam_unix(cron:session): session closed for user root Apr 23 23:10:51 ip-172-31-29-215 sshd[2147086]: Invalid user aptuslegal from 77.90.185.45 port 38484 Apr 23 23:10:51 ip-172-31-29-215 sshd[2147086]: Connection closed by invalid user aptuslegal 77.90.185.45 port 38484 [preauth] Apr 23 23:16:41 ip-172-31-29-215 sshd[2147089]: Invalid user aptuslegal from 103.90.227.178 port 50232 Apr 23 23:16:44 ip-172-31-29-215 sshd[2147089]: Connection closed by invalid user aptuslegal 103.90.227.178 port 50232 [preauth] Apr 23 23:17:01 ip-172-31-29-215 CRON[2147091]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 23:17:01 ip-172-31-29-215 CRON[2147091]: pam_unix(cron:session): session closed for user root Apr 23 23:20:01 ip-172-31-29-215 CRON[2147097]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 23:20:01 ip-172-31-29-215 CRON[2147097]: pam_unix(cron:session): session closed for user smmsp Apr 23 23:31:31 ip-172-31-29-215 sshd[2147136]: Connection closed by authenticating user root 185.93.89.48 port 47314 [preauth] Apr 23 23:37:02 ip-172-31-29-215 sshd[2147139]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Apr 23 23:37:02 ip-172-31-29-215 sshd[2147140]: error: kex_exchange_identification: banner line contains invalid characters Apr 23 23:39:01 ip-172-31-29-215 CRON[2147143]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 23:39:01 ip-172-31-29-215 CRON[2147143]: pam_unix(cron:session): session closed for user root Apr 23 23:39:17 ip-172-31-29-215 sshd[2147199]: Connection closed by authenticating user root 172.94.9.128 port 42160 [preauth] Apr 23 23:40:01 ip-172-31-29-215 CRON[2147202]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 23 23:40:01 ip-172-31-29-215 CRON[2147202]: pam_unix(cron:session): session closed for user smmsp Apr 23 23:48:50 ip-172-31-29-215 sshd[2147226]: Invalid user aptuslegal from 77.90.185.28 port 50470 Apr 23 23:48:51 ip-172-31-29-215 sshd[2147226]: Connection closed by invalid user aptuslegal 77.90.185.28 port 50470 [preauth] Apr 24 00:00:01 ip-172-31-29-215 CRON[2147234]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 00:00:01 ip-172-31-29-215 CRON[2147234]: pam_unix(cron:session): session closed for user root Apr 24 00:00:01 ip-172-31-29-215 CRON[2147235]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 00:00:01 ip-172-31-29-215 CRON[2147235]: pam_unix(cron:session): session closed for user smmsp Apr 24 00:09:01 ip-172-31-29-215 CRON[2147307]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 00:09:01 ip-172-31-29-215 CRON[2147307]: pam_unix(cron:session): session closed for user root Apr 24 00:17:01 ip-172-31-29-215 CRON[2147363]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 00:17:01 ip-172-31-29-215 CRON[2147363]: pam_unix(cron:session): session closed for user root Apr 24 00:20:01 ip-172-31-29-215 CRON[2147370]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 00:20:01 ip-172-31-29-215 CRON[2147370]: pam_unix(cron:session): session closed for user smmsp Apr 24 00:22:11 ip-172-31-29-215 sshd[2147393]: Invalid user aptuslegal from 172.94.9.158 port 52216 Apr 24 00:22:11 ip-172-31-29-215 sshd[2147393]: Connection closed by invalid user aptuslegal 172.94.9.158 port 52216 [preauth] Apr 24 00:32:23 ip-172-31-29-215 sshd[2147400]: Connection closed by authenticating user root 213.177.179.26 port 51686 [preauth] Apr 24 00:33:39 ip-172-31-29-215 sshd[2147402]: Connection closed by authenticating user root 192.253.248.93 port 51664 [preauth] Apr 24 00:38:45 ip-172-31-29-215 sshd[2147406]: Connection closed by authenticating user root 172.94.9.63 port 51158 [preauth] Apr 24 00:39:01 ip-172-31-29-215 CRON[2147408]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 00:39:01 ip-172-31-29-215 CRON[2147408]: pam_unix(cron:session): session closed for user root Apr 24 00:40:01 ip-172-31-29-215 CRON[2147464]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 00:40:01 ip-172-31-29-215 CRON[2147464]: pam_unix(cron:session): session closed for user smmsp Apr 24 01:00:02 ip-172-31-29-215 CRON[2147716]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 01:00:02 ip-172-31-29-215 CRON[2147716]: pam_unix(cron:session): session closed for user smmsp Apr 24 01:02:18 ip-172-31-29-215 sshd[2147739]: Connection closed by authenticating user root 87.106.255.77 port 51654 [preauth] Apr 24 01:03:41 ip-172-31-29-215 sshd[2147742]: Invalid user aptuslegal from 164.126.161.177 port 54608 Apr 24 01:03:42 ip-172-31-29-215 sshd[2147742]: Connection closed by invalid user aptuslegal 164.126.161.177 port 54608 [preauth] Apr 24 01:09:01 ip-172-31-29-215 CRON[2147746]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 01:09:01 ip-172-31-29-215 CRON[2147746]: pam_unix(cron:session): session closed for user root Apr 24 01:14:36 ip-172-31-29-215 sshd[2147803]: Connection closed by authenticating user root 34.138.135.178 port 60972 [preauth] Apr 24 01:17:01 ip-172-31-29-215 CRON[2147806]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 01:17:01 ip-172-31-29-215 CRON[2147806]: pam_unix(cron:session): session closed for user root Apr 24 01:20:01 ip-172-31-29-215 CRON[2147813]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 01:20:01 ip-172-31-29-215 CRON[2147813]: pam_unix(cron:session): session closed for user smmsp Apr 24 01:35:44 ip-172-31-29-215 sshd[2147840]: Invalid user aptuslegal from 192.210.243.165 port 59620 Apr 24 01:35:47 ip-172-31-29-215 sshd[2147840]: Connection closed by invalid user aptuslegal 192.210.243.165 port 59620 [preauth] Apr 24 01:36:27 ip-172-31-29-215 sshd[2147842]: Connection closed by authenticating user root 213.209.159.13 port 34692 [preauth] Apr 24 01:36:28 ip-172-31-29-215 sshd[2147844]: Invalid user aptuslegal from 172.94.9.128 port 38828 Apr 24 01:36:28 ip-172-31-29-215 sshd[2147844]: Connection closed by invalid user aptuslegal 172.94.9.128 port 38828 [preauth] Apr 24 01:39:01 ip-172-31-29-215 CRON[2147847]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 01:39:01 ip-172-31-29-215 CRON[2147847]: pam_unix(cron:session): session closed for user root Apr 24 01:40:01 ip-172-31-29-215 CRON[2147902]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 01:40:01 ip-172-31-29-215 CRON[2147902]: pam_unix(cron:session): session closed for user smmsp Apr 24 01:53:27 ip-172-31-29-215 sshd[2147930]: Connection closed by authenticating user root 185.93.89.29 port 46470 [preauth] Apr 24 02:00:01 ip-172-31-29-215 CRON[2147935]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 02:00:01 ip-172-31-29-215 CRON[2147935]: pam_unix(cron:session): session closed for user smmsp Apr 24 02:09:01 ip-172-31-29-215 CRON[2147965]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 02:09:01 ip-172-31-29-215 CRON[2147965]: pam_unix(cron:session): session closed for user root Apr 24 02:16:31 ip-172-31-29-215 sshd[2148023]: Invalid user aptuslegal from 64.227.150.168 port 48654 Apr 24 02:16:37 ip-172-31-29-215 sshd[2148023]: Connection closed by invalid user aptuslegal 64.227.150.168 port 48654 [preauth] Apr 24 02:17:01 ip-172-31-29-215 CRON[2148025]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 02:17:01 ip-172-31-29-215 CRON[2148025]: pam_unix(cron:session): session closed for user root Apr 24 02:20:01 ip-172-31-29-215 CRON[2148031]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 02:20:01 ip-172-31-29-215 CRON[2148031]: pam_unix(cron:session): session closed for user smmsp Apr 24 02:22:20 ip-172-31-29-215 sshd[2148054]: Connection closed by authenticating user root 172.94.9.158 port 32950 [preauth] Apr 24 02:38:45 ip-172-31-29-215 sshd[2148063]: Connection closed by authenticating user root 172.94.9.63 port 45308 [preauth] Apr 24 02:39:01 ip-172-31-29-215 CRON[2148065]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 02:39:01 ip-172-31-29-215 CRON[2148065]: pam_unix(cron:session): session closed for user root Apr 24 02:40:01 ip-172-31-29-215 CRON[2148120]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 02:40:01 ip-172-31-29-215 CRON[2148120]: pam_unix(cron:session): session closed for user smmsp Apr 24 02:40:45 ip-172-31-29-215 sshd[2148142]: Connection closed by authenticating user root 192.253.248.96 port 52696 [preauth] Apr 24 03:00:01 ip-172-31-29-215 CRON[2148373]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 03:00:01 ip-172-31-29-215 CRON[2148373]: pam_unix(cron:session): session closed for user smmsp Apr 24 03:09:01 ip-172-31-29-215 CRON[2148400]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 03:09:01 ip-172-31-29-215 CRON[2148400]: pam_unix(cron:session): session closed for user root Apr 24 03:10:01 ip-172-31-29-215 CRON[2148456]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 03:10:01 ip-172-31-29-215 CRON[2148456]: pam_unix(cron:session): session closed for user root Apr 24 03:17:01 ip-172-31-29-215 CRON[2148459]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 03:17:01 ip-172-31-29-215 CRON[2148459]: pam_unix(cron:session): session closed for user root Apr 24 03:20:01 ip-172-31-29-215 CRON[2148465]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 03:20:01 ip-172-31-29-215 CRON[2148465]: pam_unix(cron:session): session closed for user smmsp Apr 24 03:36:57 ip-172-31-29-215 sshd[2148493]: Invalid user aptuslegal from 213.209.159.13 port 53548 Apr 24 03:36:57 ip-172-31-29-215 sshd[2148493]: Connection closed by invalid user aptuslegal 213.209.159.13 port 53548 [preauth] Apr 24 03:39:01 ip-172-31-29-215 CRON[2148497]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 03:39:01 ip-172-31-29-215 CRON[2148497]: pam_unix(cron:session): session closed for user root Apr 24 03:40:01 ip-172-31-29-215 CRON[2148552]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 03:40:01 ip-172-31-29-215 CRON[2148552]: pam_unix(cron:session): session closed for user smmsp Apr 24 03:47:07 ip-172-31-29-215 sshd[2148576]: Invalid user aptuslegal from 77.90.185.105 port 55392 Apr 24 03:47:07 ip-172-31-29-215 sshd[2148576]: Connection closed by invalid user aptuslegal 77.90.185.105 port 55392 [preauth] Apr 24 03:56:40 ip-172-31-29-215 sshd[2148584]: Connection closed by authenticating user root 185.93.89.29 port 60260 [preauth] Apr 24 04:00:01 ip-172-31-29-215 CRON[2148590]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 04:00:01 ip-172-31-29-215 CRON[2148590]: pam_unix(cron:session): session closed for user smmsp Apr 24 04:03:59 ip-172-31-29-215 sshd[2148614]: Invalid user aptuslegal from 87.106.255.77 port 51074 Apr 24 04:03:59 ip-172-31-29-215 sshd[2148614]: Connection closed by invalid user aptuslegal 87.106.255.77 port 51074 [preauth] Apr 24 04:09:01 ip-172-31-29-215 CRON[2148619]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 04:09:01 ip-172-31-29-215 CRON[2148619]: pam_unix(cron:session): session closed for user root Apr 24 04:17:01 ip-172-31-29-215 CRON[2148710]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 04:17:01 ip-172-31-29-215 CRON[2148710]: pam_unix(cron:session): session closed for user root Apr 24 04:19:34 ip-172-31-29-215 sshd[2148715]: Invalid user aptuslegal from 161.132.38.88 port 49516 Apr 24 04:19:36 ip-172-31-29-215 sshd[2148715]: Connection closed by invalid user aptuslegal 161.132.38.88 port 49516 [preauth] Apr 24 04:20:01 ip-172-31-29-215 CRON[2148718]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 04:20:01 ip-172-31-29-215 CRON[2148718]: pam_unix(cron:session): session closed for user smmsp Apr 24 04:39:01 ip-172-31-29-215 CRON[2148749]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 04:39:01 ip-172-31-29-215 CRON[2148749]: pam_unix(cron:session): session closed for user root Apr 24 04:40:01 ip-172-31-29-215 CRON[2148804]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 04:40:01 ip-172-31-29-215 CRON[2148804]: pam_unix(cron:session): session closed for user smmsp Apr 24 04:46:08 ip-172-31-29-215 sshd[2148828]: Invalid user aptuslegal from 192.253.248.96 port 49500 Apr 24 04:46:08 ip-172-31-29-215 sshd[2148828]: Connection closed by invalid user aptuslegal 192.253.248.96 port 49500 [preauth] Apr 24 04:58:35 ip-172-31-29-215 sshd[2149058]: Connection closed by authenticating user root 77.90.185.36 port 35242 [preauth] Apr 24 05:00:01 ip-172-31-29-215 CRON[2149063]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 05:00:01 ip-172-31-29-215 CRON[2149063]: pam_unix(cron:session): session closed for user smmsp Apr 24 05:01:10 ip-172-31-29-215 sshd[2149087]: Invalid user admin from 104.223.84.94 port 54996 Apr 24 05:01:10 ip-172-31-29-215 sshd[2149087]: Connection closed by invalid user admin 104.223.84.94 port 54996 [preauth] Apr 24 05:01:43 ip-172-31-29-215 sshd[2149089]: Invalid user orangepi from 104.223.84.94 port 41664 Apr 24 05:01:43 ip-172-31-29-215 sshd[2149089]: Connection closed by invalid user orangepi 104.223.84.94 port 41664 [preauth] Apr 24 05:02:21 ip-172-31-29-215 sshd[2149091]: Connection closed by authenticating user root 104.223.84.94 port 52128 [preauth] Apr 24 05:02:53 ip-172-31-29-215 sshd[2149093]: Connection closed by authenticating user root 104.223.84.94 port 50772 [preauth] Apr 24 05:03:26 ip-172-31-29-215 sshd[2149095]: Connection closed by authenticating user root 104.223.84.94 port 39952 [preauth] Apr 24 05:04:03 ip-172-31-29-215 sshd[2149097]: Connection closed by authenticating user root 104.223.84.94 port 40796 [preauth] Apr 24 05:04:55 ip-172-31-29-215 sshd[2149099]: Connection closed by authenticating user root 104.223.84.94 port 49658 [preauth] Apr 24 05:05:31 ip-172-31-29-215 sshd[2149102]: Connection closed by authenticating user root 104.223.84.94 port 48942 [preauth] Apr 24 05:06:04 ip-172-31-29-215 sshd[2149104]: Invalid user test from 104.223.84.94 port 49028 Apr 24 05:06:04 ip-172-31-29-215 sshd[2149104]: Connection closed by invalid user test 104.223.84.94 port 49028 [preauth] Apr 24 05:06:37 ip-172-31-29-215 sshd[2149107]: Invalid user user from 104.223.84.94 port 57146 Apr 24 05:06:37 ip-172-31-29-215 sshd[2149107]: Connection closed by invalid user user 104.223.84.94 port 57146 [preauth] Apr 24 05:07:10 ip-172-31-29-215 sshd[2149109]: Connection closed by authenticating user root 104.223.84.94 port 53324 [preauth] Apr 24 05:07:43 ip-172-31-29-215 sshd[2149111]: Invalid user admin from 104.223.84.94 port 52878 Apr 24 05:07:44 ip-172-31-29-215 sshd[2149111]: Connection closed by invalid user admin 104.223.84.94 port 52878 [preauth] Apr 24 05:08:17 ip-172-31-29-215 sshd[2149114]: Invalid user cirros from 104.223.84.94 port 53488 Apr 24 05:08:17 ip-172-31-29-215 sshd[2149114]: Connection closed by invalid user cirros 104.223.84.94 port 53488 [preauth] Apr 24 05:08:56 ip-172-31-29-215 sshd[2149116]: Connection closed by authenticating user root 104.223.84.94 port 41098 [preauth] Apr 24 05:09:01 ip-172-31-29-215 CRON[2149118]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 05:09:01 ip-172-31-29-215 CRON[2149118]: pam_unix(cron:session): session closed for user root Apr 24 05:09:31 ip-172-31-29-215 sshd[2149172]: Connection closed by authenticating user root 104.223.84.94 port 46712 [preauth] Apr 24 05:10:04 ip-172-31-29-215 sshd[2149175]: Invalid user admin from 104.223.84.94 port 42820 Apr 24 05:10:04 ip-172-31-29-215 sshd[2149175]: Connection closed by invalid user admin 104.223.84.94 port 42820 [preauth] Apr 24 05:10:28 ip-172-31-29-215 sshd[2149177]: Invalid user aptuslegal from 185.93.89.128 port 50692 Apr 24 05:10:29 ip-172-31-29-215 sshd[2149177]: Connection closed by invalid user aptuslegal 185.93.89.128 port 50692 [preauth] Apr 24 05:10:42 ip-172-31-29-215 sshd[2149180]: Connection closed by authenticating user root 104.223.84.94 port 44766 [preauth] Apr 24 05:11:20 ip-172-31-29-215 sshd[2149182]: Invalid user rpc from 104.223.84.94 port 47182 Apr 24 05:11:21 ip-172-31-29-215 sshd[2149182]: Connection closed by invalid user rpc 104.223.84.94 port 47182 [preauth] Apr 24 05:11:54 ip-172-31-29-215 sshd[2149184]: Connection closed by authenticating user root 104.223.84.94 port 55696 [preauth] Apr 24 05:12:34 ip-172-31-29-215 sshd[2149186]: Connection closed by authenticating user root 104.223.84.94 port 39068 [preauth] Apr 24 05:13:11 ip-172-31-29-215 sshd[2149188]: Connection closed by authenticating user root 104.223.84.94 port 40078 [preauth] Apr 24 05:13:44 ip-172-31-29-215 sshd[2149191]: Invalid user user1 from 104.223.84.94 port 35596 Apr 24 05:13:44 ip-172-31-29-215 sshd[2149191]: Connection closed by invalid user user1 104.223.84.94 port 35596 [preauth] Apr 24 05:14:26 ip-172-31-29-215 sshd[2149193]: Connection closed by authenticating user root 104.223.84.94 port 47776 [preauth] Apr 24 05:15:22 ip-172-31-29-215 sshd[2149195]: Connection closed by authenticating user root 104.223.84.94 port 50900 [preauth] Apr 24 05:15:54 ip-172-31-29-215 sshd[2149198]: Connection closed by authenticating user nobody 104.223.84.94 port 45682 [preauth] Apr 24 05:16:36 ip-172-31-29-215 sshd[2149200]: Invalid user kali from 104.223.84.94 port 39486 Apr 24 05:16:37 ip-172-31-29-215 sshd[2149200]: Connection closed by invalid user kali 104.223.84.94 port 39486 [preauth] Apr 24 05:17:01 ip-172-31-29-215 CRON[2149202]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 05:17:01 ip-172-31-29-215 CRON[2149202]: pam_unix(cron:session): session closed for user root Apr 24 05:17:08 ip-172-31-29-215 sshd[2149205]: Invalid user linaro from 104.223.84.94 port 35800 Apr 24 05:17:08 ip-172-31-29-215 sshd[2149205]: Connection closed by invalid user linaro 104.223.84.94 port 35800 [preauth] Apr 24 05:17:43 ip-172-31-29-215 sshd[2149207]: Connection closed by authenticating user root 104.223.84.94 port 39576 [preauth] Apr 24 05:18:23 ip-172-31-29-215 sshd[2149210]: Connection closed by authenticating user root 104.223.84.94 port 49050 [preauth] Apr 24 05:18:57 ip-172-31-29-215 sshd[2149219]: Connection closed by authenticating user root 104.223.84.94 port 56886 [preauth] Apr 24 05:19:37 ip-172-31-29-215 sshd[2149222]: Connection closed by authenticating user root 104.223.84.94 port 53084 [preauth] Apr 24 05:20:01 ip-172-31-29-215 CRON[2149225]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 05:20:01 ip-172-31-29-215 CRON[2149225]: pam_unix(cron:session): session closed for user smmsp Apr 24 05:20:16 ip-172-31-29-215 sshd[2149247]: Connection closed by authenticating user root 104.223.84.94 port 49032 [preauth] Apr 24 05:20:52 ip-172-31-29-215 sshd[2149263]: Connection closed by authenticating user root 104.223.84.94 port 35034 [preauth] Apr 24 05:21:27 ip-172-31-29-215 sshd[2149287]: Invalid user admin from 104.223.84.94 port 44352 Apr 24 05:21:27 ip-172-31-29-215 sshd[2149287]: Connection closed by invalid user admin 104.223.84.94 port 44352 [preauth] Apr 24 05:22:05 ip-172-31-29-215 sshd[2149289]: Connection closed by authenticating user root 104.223.84.94 port 56986 [preauth] Apr 24 05:22:38 ip-172-31-29-215 sshd[2149291]: Connection closed by authenticating user root 104.223.84.94 port 54102 [preauth] Apr 24 05:23:11 ip-172-31-29-215 sshd[2149293]: Connection closed by authenticating user root 104.223.84.94 port 42688 [preauth] Apr 24 05:23:47 ip-172-31-29-215 sshd[2149295]: Connection closed by authenticating user root 104.223.84.94 port 41176 [preauth] Apr 24 05:23:47 ip-172-31-29-215 sshd[2149297]: Invalid user aptuslegal from 77.90.185.28 port 50994 Apr 24 05:23:47 ip-172-31-29-215 sshd[2149297]: Connection closed by invalid user aptuslegal 77.90.185.28 port 50994 [preauth] Apr 24 05:24:20 ip-172-31-29-215 sshd[2149299]: Invalid user admin from 104.223.84.94 port 60304 Apr 24 05:24:21 ip-172-31-29-215 sshd[2149299]: Connection closed by invalid user admin 104.223.84.94 port 60304 [preauth] Apr 24 05:25:04 ip-172-31-29-215 sshd[2149301]: Invalid user user from 104.223.84.94 port 59626 Apr 24 05:25:05 ip-172-31-29-215 sshd[2149301]: Connection closed by invalid user user 104.223.84.94 port 59626 [preauth] Apr 24 05:25:53 ip-172-31-29-215 sshd[2149303]: Connection closed by authenticating user root 104.223.84.94 port 34736 [preauth] Apr 24 05:26:35 ip-172-31-29-215 sshd[2149309]: Connection closed by authenticating user root 104.223.84.94 port 42636 [preauth] Apr 24 05:27:09 ip-172-31-29-215 sshd[2149312]: Invalid user admin from 104.223.84.94 port 57870 Apr 24 05:27:09 ip-172-31-29-215 sshd[2149312]: Connection closed by invalid user admin 104.223.84.94 port 57870 [preauth] Apr 24 05:27:50 ip-172-31-29-215 sshd[2149314]: Connection closed by authenticating user root 104.223.84.94 port 39504 [preauth] Apr 24 05:28:25 ip-172-31-29-215 sshd[2149317]: Connection closed by authenticating user root 104.223.84.94 port 45650 [preauth] Apr 24 05:28:57 ip-172-31-29-215 sshd[2149319]: Invalid user postgres from 104.223.84.94 port 60602 Apr 24 05:28:57 ip-172-31-29-215 sshd[2149319]: Connection closed by invalid user postgres 104.223.84.94 port 60602 [preauth] Apr 24 05:29:39 ip-172-31-29-215 sshd[2149321]: Connection closed by authenticating user root 104.223.84.94 port 33676 [preauth] Apr 24 05:30:17 ip-172-31-29-215 sshd[2149324]: Connection closed by authenticating user root 104.223.84.94 port 58212 [preauth] Apr 24 05:30:50 ip-172-31-29-215 sshd[2149327]: Invalid user openhabian from 104.223.84.94 port 55536 Apr 24 05:30:50 ip-172-31-29-215 sshd[2149327]: Connection closed by invalid user openhabian 104.223.84.94 port 55536 [preauth] Apr 24 05:31:32 ip-172-31-29-215 sshd[2149340]: Connection closed by authenticating user root 104.223.84.94 port 37950 [preauth] Apr 24 05:32:06 ip-172-31-29-215 sshd[2149343]: Invalid user sshadmin from 104.223.84.94 port 52010 Apr 24 05:32:06 ip-172-31-29-215 sshd[2149343]: Connection closed by invalid user sshadmin 104.223.84.94 port 52010 [preauth] Apr 24 05:32:44 ip-172-31-29-215 sshd[2149345]: Connection closed by authenticating user root 104.223.84.94 port 40726 [preauth] Apr 24 05:33:18 ip-172-31-29-215 sshd[2149347]: Invalid user frappe from 104.223.84.94 port 46868 Apr 24 05:33:18 ip-172-31-29-215 sshd[2149347]: Connection closed by invalid user frappe 104.223.84.94 port 46868 [preauth] Apr 24 05:33:50 ip-172-31-29-215 sshd[2149349]: Invalid user huawei from 104.223.84.94 port 45660 Apr 24 05:33:50 ip-172-31-29-215 sshd[2149349]: Connection closed by invalid user huawei 104.223.84.94 port 45660 [preauth] Apr 24 05:34:32 ip-172-31-29-215 sshd[2149351]: Connection closed by authenticating user ubuntu 104.223.84.94 port 57298 [preauth] Apr 24 05:35:24 ip-172-31-29-215 sshd[2149354]: Invalid user vyos from 104.223.84.94 port 41952 Apr 24 05:35:25 ip-172-31-29-215 sshd[2149354]: Connection closed by invalid user vyos 104.223.84.94 port 41952 [preauth] Apr 24 05:36:00 ip-172-31-29-215 sshd[2149356]: Connection closed by authenticating user root 104.223.84.94 port 33094 [preauth] Apr 24 05:36:36 ip-172-31-29-215 sshd[2149358]: Connection closed by authenticating user root 104.223.84.94 port 52606 [preauth] Apr 24 05:37:13 ip-172-31-29-215 sshd[2149360]: Invalid user admin from 104.223.84.94 port 53056 Apr 24 05:37:13 ip-172-31-29-215 sshd[2149360]: Connection closed by invalid user admin 104.223.84.94 port 53056 [preauth] Apr 24 05:37:45 ip-172-31-29-215 sshd[2149363]: Invalid user p from 104.223.84.94 port 51736 Apr 24 05:37:45 ip-172-31-29-215 sshd[2149363]: Connection closed by invalid user p 104.223.84.94 port 51736 [preauth] Apr 24 05:38:25 ip-172-31-29-215 sshd[2149366]: Connection closed by authenticating user root 104.223.84.94 port 39066 [preauth] Apr 24 05:38:57 ip-172-31-29-215 sshd[2149368]: Invalid user public from 104.223.84.94 port 44350 Apr 24 05:38:57 ip-172-31-29-215 sshd[2149368]: Connection closed by invalid user public 104.223.84.94 port 44350 [preauth] Apr 24 05:39:01 ip-172-31-29-215 CRON[2149370]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 05:39:01 ip-172-31-29-215 CRON[2149370]: pam_unix(cron:session): session closed for user root Apr 24 05:39:34 ip-172-31-29-215 sshd[2149424]: Invalid user debian from 104.223.84.94 port 34268 Apr 24 05:39:35 ip-172-31-29-215 sshd[2149424]: Connection closed by invalid user debian 104.223.84.94 port 34268 [preauth] Apr 24 05:40:01 ip-172-31-29-215 CRON[2149427]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 05:40:01 ip-172-31-29-215 CRON[2149427]: pam_unix(cron:session): session closed for user smmsp Apr 24 05:40:08 ip-172-31-29-215 sshd[2149449]: Connection closed by authenticating user root 104.223.84.94 port 42368 [preauth] Apr 24 05:40:30 ip-172-31-29-215 sshd[2149451]: Connection closed by authenticating user root 213.209.159.13 port 39850 [preauth] Apr 24 05:40:48 ip-172-31-29-215 sshd[2149453]: Invalid user steam from 104.223.84.94 port 49322 Apr 24 05:40:48 ip-172-31-29-215 sshd[2149453]: Connection closed by invalid user steam 104.223.84.94 port 49322 [preauth] Apr 24 05:41:25 ip-172-31-29-215 sshd[2149456]: Connection closed by authenticating user root 104.223.84.94 port 54838 [preauth] Apr 24 05:41:57 ip-172-31-29-215 sshd[2149458]: Connection closed by authenticating user root 104.223.84.94 port 48720 [preauth] Apr 24 05:42:36 ip-172-31-29-215 sshd[2149461]: Connection closed by authenticating user root 104.223.84.94 port 36860 [preauth] Apr 24 05:43:16 ip-172-31-29-215 sshd[2149463]: Connection closed by authenticating user root 104.223.84.94 port 56330 [preauth] Apr 24 05:43:48 ip-172-31-29-215 sshd[2149465]: Connection closed by authenticating user root 104.223.84.94 port 37340 [preauth] Apr 24 05:44:29 ip-172-31-29-215 sshd[2149467]: Connection closed by authenticating user root 104.223.84.94 port 42796 [preauth] Apr 24 05:45:01 ip-172-31-29-215 sshd[2149469]: Connection closed by authenticating user root 104.223.84.94 port 40892 [preauth] Apr 24 05:45:51 ip-172-31-29-215 sshd[2149471]: Connection closed by authenticating user root 104.223.84.94 port 53886 [preauth] Apr 24 05:46:34 ip-172-31-29-215 sshd[2149473]: Invalid user nvidia from 104.223.84.94 port 48678 Apr 24 05:46:35 ip-172-31-29-215 sshd[2149473]: Connection closed by invalid user nvidia 104.223.84.94 port 48678 [preauth] Apr 24 05:47:21 ip-172-31-29-215 sshd[2149475]: Connection closed by authenticating user root 104.223.84.94 port 42502 [preauth] Apr 24 05:47:39 ip-172-31-29-215 sshd[2149479]: Invalid user aptuslegal from 103.90.227.178 port 49350 Apr 24 05:47:40 ip-172-31-29-215 sshd[2149479]: Connection closed by invalid user aptuslegal 103.90.227.178 port 49350 [preauth] Apr 24 05:47:52 ip-172-31-29-215 sshd[2149482]: Invalid user admin from 104.223.84.94 port 43152 Apr 24 05:47:52 ip-172-31-29-215 sshd[2149482]: Connection closed by invalid user admin 104.223.84.94 port 43152 [preauth] Apr 24 05:48:33 ip-172-31-29-215 sshd[2149485]: Connection closed by authenticating user root 104.223.84.94 port 42026 [preauth] Apr 24 05:49:12 ip-172-31-29-215 sshd[2149487]: Connection closed by authenticating user root 104.223.84.94 port 39372 [preauth] Apr 24 05:49:45 ip-172-31-29-215 sshd[2149493]: Invalid user test from 104.223.84.94 port 34358 Apr 24 05:49:45 ip-172-31-29-215 sshd[2149491]: Connection closed by authenticating user root 164.126.161.177 port 51444 [preauth] Apr 24 05:49:45 ip-172-31-29-215 sshd[2149493]: Connection closed by invalid user test 104.223.84.94 port 34358 [preauth] Apr 24 05:50:27 ip-172-31-29-215 sshd[2149495]: Connection closed by authenticating user root 104.223.84.94 port 51960 [preauth] Apr 24 05:51:00 ip-172-31-29-215 sshd[2149544]: Connection closed by authenticating user root 104.223.84.94 port 56822 [preauth] Apr 24 05:51:39 ip-172-31-29-215 sshd[2149546]: Invalid user guest from 104.223.84.94 port 52468 Apr 24 05:51:40 ip-172-31-29-215 sshd[2149546]: Connection closed by invalid user guest 104.223.84.94 port 52468 [preauth] Apr 24 05:52:17 ip-172-31-29-215 sshd[2149548]: Connection closed by authenticating user root 104.223.84.94 port 39608 [preauth] Apr 24 05:52:49 ip-172-31-29-215 sshd[2149551]: Invalid user admin from 104.223.84.94 port 58928 Apr 24 05:52:49 ip-172-31-29-215 sshd[2149551]: Connection closed by invalid user admin 104.223.84.94 port 58928 [preauth] Apr 24 05:53:31 ip-172-31-29-215 sshd[2149553]: Connection closed by authenticating user root 104.223.84.94 port 59212 [preauth] Apr 24 05:53:55 ip-172-31-29-215 sshd[2149562]: Connection closed by authenticating user root 172.94.9.64 port 49960 [preauth] Apr 24 05:54:04 ip-172-31-29-215 sshd[2149564]: Connection closed by authenticating user root 104.223.84.94 port 60378 [preauth] Apr 24 05:54:19 ip-172-31-29-215 sshd[2149566]: Connection closed by authenticating user root 77.90.185.92 port 46644 [preauth] Apr 24 05:54:39 ip-172-31-29-215 sshd[2149568]: Invalid user demo from 104.223.84.94 port 38722 Apr 24 05:54:39 ip-172-31-29-215 sshd[2149568]: Connection closed by invalid user demo 104.223.84.94 port 38722 [preauth] Apr 24 05:55:11 ip-172-31-29-215 sshd[2149570]: Connection closed by authenticating user root 104.223.84.94 port 40652 [preauth] Apr 24 05:56:21 ip-172-31-29-215 sshd[2149573]: Connection closed by authenticating user root 104.223.84.94 port 60104 [preauth] Apr 24 05:57:35 ip-172-31-29-215 sshd[2149575]: Connection closed by authenticating user root 104.223.84.94 port 59314 [preauth] Apr 24 05:58:43 ip-172-31-29-215 sshd[2149579]: Connection closed by authenticating user root 104.223.84.94 port 40376 [preauth] Apr 24 05:59:51 ip-172-31-29-215 sshd[2149581]: Connection closed by authenticating user root 104.223.84.94 port 38166 [preauth] Apr 24 06:00:01 ip-172-31-29-215 CRON[2149584]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 06:00:01 ip-172-31-29-215 CRON[2149584]: pam_unix(cron:session): session closed for user smmsp Apr 24 06:00:27 ip-172-31-29-215 sshd[2149607]: Connection closed by authenticating user root 104.223.84.94 port 54574 [preauth] Apr 24 06:01:01 ip-172-31-29-215 sshd[2149609]: Connection closed by authenticating user root 104.223.84.94 port 58544 [preauth] Apr 24 06:01:41 ip-172-31-29-215 sshd[2149611]: Invalid user vpn from 104.223.84.94 port 41196 Apr 24 06:01:41 ip-172-31-29-215 sshd[2149611]: Connection closed by invalid user vpn 104.223.84.94 port 41196 [preauth] Apr 24 06:02:17 ip-172-31-29-215 sshd[2149613]: Connection closed by authenticating user root 104.223.84.94 port 56838 [preauth] Apr 24 06:02:50 ip-172-31-29-215 sshd[2149615]: Invalid user deploy from 104.223.84.94 port 51572 Apr 24 06:02:50 ip-172-31-29-215 sshd[2149615]: Connection closed by invalid user deploy 104.223.84.94 port 51572 [preauth] Apr 24 06:03:30 ip-172-31-29-215 sshd[2149617]: Connection closed by authenticating user root 104.223.84.94 port 33452 [preauth] Apr 24 06:04:03 ip-172-31-29-215 sshd[2149620]: Connection closed by authenticating user root 104.223.84.94 port 53748 [preauth] Apr 24 06:04:44 ip-172-31-29-215 sshd[2149622]: Connection closed by authenticating user root 104.223.84.94 port 40164 [preauth] Apr 24 06:05:17 ip-172-31-29-215 sshd[2149624]: Connection closed by authenticating user root 104.223.84.94 port 46568 [preauth] Apr 24 06:06:18 ip-172-31-29-215 sshd[2149626]: Connection closed by authenticating user root 104.223.84.94 port 39678 [preauth] Apr 24 06:06:52 ip-172-31-29-215 sshd[2149628]: Invalid user admin from 104.223.84.94 port 41612 Apr 24 06:06:53 ip-172-31-29-215 sshd[2149628]: Connection closed by invalid user admin 104.223.84.94 port 41612 [preauth] Apr 24 06:07:34 ip-172-31-29-215 sshd[2149630]: Invalid user alan from 104.223.84.94 port 50620 Apr 24 06:07:34 ip-172-31-29-215 sshd[2149630]: Connection closed by invalid user alan 104.223.84.94 port 50620 [preauth] Apr 24 06:08:09 ip-172-31-29-215 sshd[2149633]: Invalid user admin from 104.223.84.94 port 36926 Apr 24 06:08:10 ip-172-31-29-215 sshd[2149633]: Connection closed by invalid user admin 104.223.84.94 port 36926 [preauth] Apr 24 06:08:44 ip-172-31-29-215 sshd[2149635]: Connection closed by authenticating user root 104.223.84.94 port 47356 [preauth] Apr 24 06:09:01 ip-172-31-29-215 CRON[2149638]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 06:09:01 ip-172-31-29-215 CRON[2149638]: pam_unix(cron:session): session closed for user root Apr 24 06:09:22 ip-172-31-29-215 sshd[2149695]: Connection closed by authenticating user root 104.223.84.94 port 58266 [preauth] Apr 24 06:09:54 ip-172-31-29-215 sshd[2149698]: Connection closed by authenticating user root 104.223.84.94 port 53292 [preauth] Apr 24 06:10:19 ip-172-31-29-215 sshd[2149700]: Connection closed by 54.208.25.95 port 19088 [preauth] Apr 24 06:10:34 ip-172-31-29-215 sshd[2149702]: Invalid user username from 104.223.84.94 port 58438 Apr 24 06:10:35 ip-172-31-29-215 sshd[2149702]: Connection closed by invalid user username 104.223.84.94 port 58438 [preauth] Apr 24 06:11:11 ip-172-31-29-215 sshd[2149708]: Connection closed by authenticating user root 104.223.84.94 port 34524 [preauth] Apr 24 06:11:48 ip-172-31-29-215 sshd[2149710]: Connection closed by authenticating user root 104.223.84.94 port 50116 [preauth] Apr 24 06:12:05 ip-172-31-29-215 sshd[2149712]: Connection closed by authenticating user root 192.253.248.130 port 59120 [preauth] Apr 24 06:12:27 ip-172-31-29-215 sshd[2149722]: Connection closed by authenticating user root 104.223.84.94 port 36142 [preauth] Apr 24 06:12:33 ip-172-31-29-215 sshd[2149724]: Connection closed by authenticating user root 185.93.89.70 port 52534 [preauth] Apr 24 06:12:58 ip-172-31-29-215 sshd[2149793]: Connection closed by authenticating user root 104.223.84.94 port 37760 [preauth] Apr 24 06:13:36 ip-172-31-29-215 sshd[2149795]: Invalid user rema from 104.223.84.94 port 58884 Apr 24 06:13:36 ip-172-31-29-215 sshd[2149795]: Connection closed by invalid user rema 104.223.84.94 port 58884 [preauth] Apr 24 06:14:17 ip-172-31-29-215 sshd[2149797]: Connection closed by authenticating user root 104.223.84.94 port 50422 [preauth] Apr 24 06:14:48 ip-172-31-29-215 sshd[2149800]: Connection closed by authenticating user root 104.223.84.94 port 58296 [preauth] Apr 24 06:15:27 ip-172-31-29-215 sshd[2149802]: Invalid user test from 104.223.84.94 port 43696 Apr 24 06:15:28 ip-172-31-29-215 sshd[2149802]: Connection closed by invalid user test 104.223.84.94 port 43696 [preauth] Apr 24 06:16:31 ip-172-31-29-215 sshd[2149804]: Invalid user odroid from 104.223.84.94 port 54066 Apr 24 06:16:33 ip-172-31-29-215 sshd[2149804]: Connection closed by invalid user odroid 104.223.84.94 port 54066 [preauth] Apr 24 06:17:01 ip-172-31-29-215 CRON[2149806]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 06:17:01 ip-172-31-29-215 CRON[2149806]: pam_unix(cron:session): session closed for user root Apr 24 06:17:56 ip-172-31-29-215 sshd[2149810]: Invalid user ftpuser from 104.223.84.94 port 60108 Apr 24 06:17:59 ip-172-31-29-215 sshd[2149810]: Connection closed by invalid user ftpuser 104.223.84.94 port 60108 [preauth] Apr 24 06:19:11 ip-172-31-29-215 sshd[2149813]: Connection closed by authenticating user root 104.223.84.94 port 36576 [preauth] Apr 24 06:20:01 ip-172-31-29-215 CRON[2149820]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 06:20:01 ip-172-31-29-215 CRON[2149820]: pam_unix(cron:session): session closed for user smmsp Apr 24 06:20:20 ip-172-31-29-215 sshd[2149842]: Invalid user ftpuser from 104.223.84.94 port 50626 Apr 24 06:20:21 ip-172-31-29-215 sshd[2149842]: Connection closed by invalid user ftpuser 104.223.84.94 port 50626 [preauth] Apr 24 06:20:58 ip-172-31-29-215 sshd[2149845]: Connection closed by authenticating user root 104.223.84.94 port 55734 [preauth] Apr 24 06:21:43 ip-172-31-29-215 sshd[2149847]: Connection closed by authenticating user root 104.223.84.94 port 38786 [preauth] Apr 24 06:22:28 ip-172-31-29-215 sshd[2149849]: Invalid user oracle from 104.223.84.94 port 57290 Apr 24 06:22:29 ip-172-31-29-215 sshd[2149849]: Connection closed by invalid user oracle 104.223.84.94 port 57290 [preauth] Apr 24 06:23:02 ip-172-31-29-215 sshd[2149851]: Connection closed by authenticating user root 104.223.84.94 port 37162 [preauth] Apr 24 06:23:44 ip-172-31-29-215 sshd[2149853]: Connection closed by authenticating user root 104.223.84.94 port 53868 [preauth] Apr 24 06:24:23 ip-172-31-29-215 sshd[2149855]: Invalid user aaa from 104.223.84.94 port 38694 Apr 24 06:24:25 ip-172-31-29-215 sshd[2149855]: Connection closed by invalid user aaa 104.223.84.94 port 38694 [preauth] Apr 24 06:25:01 ip-172-31-29-215 CRON[2149859]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 06:25:02 ip-172-31-29-215 CRON[2149859]: pam_unix(cron:session): session closed for user root Apr 24 06:25:02 ip-172-31-29-215 sshd[2149857]: Invalid user debian from 104.223.84.94 port 50166 Apr 24 06:25:03 ip-172-31-29-215 sshd[2149857]: Connection closed by invalid user debian 104.223.84.94 port 50166 [preauth] Apr 24 06:25:38 ip-172-31-29-215 sshd[2149952]: Invalid user user from 104.223.84.94 port 38158 Apr 24 06:25:38 ip-172-31-29-215 sshd[2149952]: Connection closed by invalid user user 104.223.84.94 port 38158 [preauth] Apr 24 06:26:19 ip-172-31-29-215 sshd[2149954]: Connection closed by authenticating user root 104.223.84.94 port 58858 [preauth] Apr 24 06:26:57 ip-172-31-29-215 sshd[2149956]: Invalid user vagrant from 104.223.84.94 port 40524 Apr 24 06:26:57 ip-172-31-29-215 sshd[2149956]: Connection closed by invalid user vagrant 104.223.84.94 port 40524 [preauth] Apr 24 06:27:34 ip-172-31-29-215 sshd[2149959]: Connection closed by authenticating user root 104.223.84.94 port 59834 [preauth] Apr 24 06:28:19 ip-172-31-29-215 sshd[2149962]: Connection closed by authenticating user root 104.223.84.94 port 41850 [preauth] Apr 24 06:28:57 ip-172-31-29-215 sshd[2149964]: Connection closed by authenticating user root 104.223.84.94 port 36984 [preauth] Apr 24 06:29:40 ip-172-31-29-215 sshd[2149966]: Connection closed by authenticating user root 104.223.84.94 port 34620 [preauth] Apr 24 06:30:24 ip-172-31-29-215 sshd[2149970]: Invalid user test from 104.223.84.94 port 43694 Apr 24 06:30:26 ip-172-31-29-215 sshd[2149970]: Connection closed by invalid user test 104.223.84.94 port 43694 [preauth] Apr 24 06:30:51 ip-172-31-29-215 sshd[2149973]: Connection closed by authenticating user root 213.177.179.39 port 49618 [preauth] Apr 24 06:31:01 ip-172-31-29-215 sshd[2149975]: Connection closed by authenticating user root 104.223.84.94 port 40406 [preauth] Apr 24 06:31:44 ip-172-31-29-215 sshd[2149977]: Connection closed by authenticating user root 104.223.84.94 port 58222 [preauth] Apr 24 06:32:19 ip-172-31-29-215 sshd[2149979]: Invalid user debian from 104.223.84.94 port 51816 Apr 24 06:32:20 ip-172-31-29-215 sshd[2149979]: Connection closed by invalid user debian 104.223.84.94 port 51816 [preauth] Apr 24 06:33:08 ip-172-31-29-215 sshd[2149981]: Connection closed by authenticating user root 104.223.84.94 port 46888 [preauth] Apr 24 06:33:54 ip-172-31-29-215 sshd[2149983]: Invalid user admin from 104.223.84.94 port 46486 Apr 24 06:33:55 ip-172-31-29-215 sshd[2149983]: Connection closed by invalid user admin 104.223.84.94 port 46486 [preauth] Apr 24 06:34:38 ip-172-31-29-215 sshd[2149986]: Connection closed by authenticating user root 104.223.84.94 port 51198 [preauth] Apr 24 06:35:12 ip-172-31-29-215 sshd[2149988]: Connection closed by authenticating user root 104.223.84.94 port 37366 [preauth] Apr 24 06:35:49 ip-172-31-29-215 sshd[2149991]: Connection closed by authenticating user root 104.223.84.94 port 39226 [preauth] Apr 24 06:36:31 ip-172-31-29-215 sshd[2149993]: Connection closed by authenticating user root 104.223.84.94 port 42454 [preauth] Apr 24 06:37:18 ip-172-31-29-215 sshd[2149995]: Connection closed by authenticating user root 104.223.84.94 port 44606 [preauth] Apr 24 06:37:52 ip-172-31-29-215 sshd[2149997]: Invalid user ansible from 104.223.84.94 port 53478 Apr 24 06:37:52 ip-172-31-29-215 sshd[2149997]: Connection closed by invalid user ansible 104.223.84.94 port 53478 [preauth] Apr 24 06:38:37 ip-172-31-29-215 sshd[2150000]: Connection closed by authenticating user root 104.223.84.94 port 56522 [preauth] Apr 24 06:39:01 ip-172-31-29-215 CRON[2150002]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 06:39:01 ip-172-31-29-215 CRON[2150002]: pam_unix(cron:session): session closed for user root Apr 24 06:39:18 ip-172-31-29-215 sshd[2150004]: Connection closed by authenticating user root 104.223.84.94 port 48134 [preauth] Apr 24 06:40:00 ip-172-31-29-215 sshd[2150060]: Connection closed by authenticating user root 104.223.84.94 port 59590 [preauth] Apr 24 06:40:01 ip-172-31-29-215 CRON[2150062]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 06:40:01 ip-172-31-29-215 CRON[2150062]: pam_unix(cron:session): session closed for user smmsp Apr 24 06:40:39 ip-172-31-29-215 sshd[2150084]: Connection closed by authenticating user root 104.223.84.94 port 37488 [preauth] Apr 24 06:41:20 ip-172-31-29-215 sshd[2150087]: Connection closed by authenticating user root 104.223.84.94 port 33988 [preauth] Apr 24 06:42:02 ip-172-31-29-215 sshd[2150096]: Invalid user testuser from 104.223.84.94 port 45374 Apr 24 06:42:04 ip-172-31-29-215 sshd[2150096]: Connection closed by invalid user testuser 104.223.84.94 port 45374 [preauth] Apr 24 06:42:39 ip-172-31-29-215 sshd[2150098]: Connection closed by authenticating user root 104.223.84.94 port 44226 [preauth] Apr 24 06:43:16 ip-172-31-29-215 sshd[2150100]: Connection closed by authenticating user root 104.223.84.94 port 39220 [preauth] Apr 24 06:43:54 ip-172-31-29-215 sshd[2150102]: Invalid user test1 from 104.223.84.94 port 59522 Apr 24 06:43:55 ip-172-31-29-215 sshd[2150102]: Connection closed by invalid user test1 104.223.84.94 port 59522 [preauth] Apr 24 06:44:41 ip-172-31-29-215 sshd[2150104]: Connection closed by authenticating user root 104.223.84.94 port 46232 [preauth] Apr 24 06:45:15 ip-172-31-29-215 sshd[2150107]: Connection closed by authenticating user root 104.223.84.94 port 33994 [preauth] Apr 24 06:45:57 ip-172-31-29-215 sshd[2150109]: Invalid user ali from 104.223.84.94 port 54258 Apr 24 06:45:58 ip-172-31-29-215 sshd[2150109]: Connection closed by invalid user ali 104.223.84.94 port 54258 [preauth] Apr 24 06:46:41 ip-172-31-29-215 sshd[2150112]: Connection closed by authenticating user root 104.223.84.94 port 43524 [preauth] Apr 24 06:47:16 ip-172-31-29-215 sshd[2150114]: Invalid user teste from 104.223.84.94 port 46836 Apr 24 06:47:17 ip-172-31-29-215 sshd[2150114]: Connection closed by invalid user teste 104.223.84.94 port 46836 [preauth] Apr 24 06:47:54 ip-172-31-29-215 sshd[2150116]: Invalid user admin from 104.223.84.94 port 42832 Apr 24 06:47:56 ip-172-31-29-215 sshd[2150116]: Connection closed by invalid user admin 104.223.84.94 port 42832 [preauth] Apr 24 06:48:31 ip-172-31-29-215 sshd[2150119]: Connection closed by authenticating user root 104.223.84.94 port 45244 [preauth] Apr 24 06:49:13 ip-172-31-29-215 sshd[2150121]: Invalid user user from 104.223.84.94 port 35596 Apr 24 06:49:14 ip-172-31-29-215 sshd[2150121]: Connection closed by invalid user user 104.223.84.94 port 35596 [preauth] Apr 24 06:49:49 ip-172-31-29-215 sshd[2150124]: Connection closed by authenticating user root 104.223.84.94 port 59722 [preauth] Apr 24 06:50:29 ip-172-31-29-215 sshd[2150127]: Invalid user pi from 104.223.84.94 port 48580 Apr 24 06:50:29 ip-172-31-29-215 sshd[2150127]: Connection closed by invalid user pi 104.223.84.94 port 48580 [preauth] Apr 24 06:51:09 ip-172-31-29-215 sshd[2150129]: Invalid user httpadmin from 104.223.84.94 port 51730 Apr 24 06:51:10 ip-172-31-29-215 sshd[2150129]: Connection closed by invalid user httpadmin 104.223.84.94 port 51730 [preauth] Apr 24 06:51:49 ip-172-31-29-215 sshd[2150132]: Invalid user admin from 104.223.84.94 port 38838 Apr 24 06:51:50 ip-172-31-29-215 sshd[2150132]: Connection closed by invalid user admin 104.223.84.94 port 38838 [preauth] Apr 24 06:52:30 ip-172-31-29-215 sshd[2150135]: Invalid user teamspeak from 104.223.84.94 port 40650 Apr 24 06:52:31 ip-172-31-29-215 sshd[2150135]: Connection closed by invalid user teamspeak 104.223.84.94 port 40650 [preauth] Apr 24 06:53:07 ip-172-31-29-215 sshd[2150137]: Connection closed by authenticating user root 104.223.84.94 port 43670 [preauth] Apr 24 06:53:44 ip-172-31-29-215 sshd[2150139]: Connection closed by authenticating user root 104.223.84.94 port 46080 [preauth] Apr 24 06:54:29 ip-172-31-29-215 sshd[2150141]: Connection closed by authenticating user root 104.223.84.94 port 60596 [preauth] Apr 24 06:55:05 ip-172-31-29-215 sshd[2150257]: Connection closed by authenticating user root 104.223.84.94 port 34622 [preauth] Apr 24 06:55:50 ip-172-31-29-215 sshd[2150368]: Connection closed by authenticating user root 104.223.84.94 port 60844 [preauth] Apr 24 06:56:29 ip-172-31-29-215 sshd[2150371]: Connection closed by authenticating user root 104.223.84.94 port 51442 [preauth] Apr 24 06:57:07 ip-172-31-29-215 sshd[2150374]: Connection closed by authenticating user root 104.223.84.94 port 50028 [preauth] Apr 24 06:57:43 ip-172-31-29-215 sshd[2150376]: Invalid user admin from 104.223.84.94 port 39584 Apr 24 06:57:44 ip-172-31-29-215 sshd[2150376]: Connection closed by invalid user admin 104.223.84.94 port 39584 [preauth] Apr 24 06:58:24 ip-172-31-29-215 sshd[2150379]: Invalid user admin from 104.223.84.94 port 49298 Apr 24 06:58:24 ip-172-31-29-215 sshd[2150379]: Connection closed by invalid user admin 104.223.84.94 port 49298 [preauth] Apr 24 06:58:57 ip-172-31-29-215 sshd[2150381]: Connection closed by authenticating user root 104.223.84.94 port 37096 [preauth] Apr 24 06:59:33 ip-172-31-29-215 sshd[2150383]: Connection closed by authenticating user root 104.223.84.94 port 35334 [preauth] Apr 24 07:00:01 ip-172-31-29-215 CRON[2150386]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 07:00:01 ip-172-31-29-215 CRON[2150386]: pam_unix(cron:session): session closed for user smmsp Apr 24 07:00:13 ip-172-31-29-215 sshd[2150408]: Connection closed by authenticating user root 104.223.84.94 port 57930 [preauth] Apr 24 07:00:47 ip-172-31-29-215 sshd[2150411]: Connection closed by authenticating user root 104.223.84.94 port 50458 [preauth] Apr 24 07:01:26 ip-172-31-29-215 sshd[2150413]: Connection closed by authenticating user root 104.223.84.94 port 59154 [preauth] Apr 24 07:02:05 ip-172-31-29-215 sshd[2150415]: Invalid user pi from 104.223.84.94 port 54806 Apr 24 07:02:06 ip-172-31-29-215 sshd[2150415]: Connection closed by invalid user pi 104.223.84.94 port 54806 [preauth] Apr 24 07:02:44 ip-172-31-29-215 sshd[2150418]: Invalid user admin from 104.223.84.94 port 35922 Apr 24 07:02:44 ip-172-31-29-215 sshd[2150418]: Connection closed by invalid user admin 104.223.84.94 port 35922 [preauth] Apr 24 07:03:21 ip-172-31-29-215 sshd[2150420]: Invalid user user from 104.223.84.94 port 42908 Apr 24 07:03:22 ip-172-31-29-215 sshd[2150420]: Connection closed by invalid user user 104.223.84.94 port 42908 [preauth] Apr 24 07:03:55 ip-172-31-29-215 sshd[2150422]: Invalid user server from 104.223.84.94 port 48114 Apr 24 07:03:56 ip-172-31-29-215 sshd[2150422]: Connection closed by invalid user server 104.223.84.94 port 48114 [preauth] Apr 24 07:04:34 ip-172-31-29-215 sshd[2150424]: Connection closed by authenticating user root 104.223.84.94 port 48468 [preauth] Apr 24 07:05:10 ip-172-31-29-215 sshd[2150426]: Connection closed by authenticating user root 104.223.84.94 port 52826 [preauth] Apr 24 07:05:43 ip-172-31-29-215 sshd[2150428]: Connection closed by authenticating user root 104.223.84.94 port 48046 [preauth] Apr 24 07:06:15 ip-172-31-29-215 sshd[2150430]: Connection closed by authenticating user root 104.223.84.94 port 39968 [preauth] Apr 24 07:07:21 ip-172-31-29-215 sshd[2150432]: Connection closed by authenticating user root 104.223.84.94 port 49484 [preauth] Apr 24 07:08:02 ip-172-31-29-215 sshd[2150443]: Connection closed by authenticating user root 104.223.84.94 port 34004 [preauth] Apr 24 07:08:36 ip-172-31-29-215 sshd[2150446]: Connection closed by authenticating user ftp 104.223.84.94 port 39496 [preauth] Apr 24 07:09:01 ip-172-31-29-215 CRON[2150448]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 07:09:01 ip-172-31-29-215 CRON[2150448]: pam_unix(cron:session): session closed for user root Apr 24 07:09:15 ip-172-31-29-215 sshd[2150450]: Connection closed by authenticating user root 104.223.84.94 port 58576 [preauth] Apr 24 07:09:48 ip-172-31-29-215 sshd[2150506]: Connection closed by authenticating user root 104.223.84.94 port 42154 [preauth] Apr 24 07:10:26 ip-172-31-29-215 sshd[2150508]: Connection closed by authenticating user root 104.223.84.94 port 35528 [preauth] Apr 24 07:11:02 ip-172-31-29-215 sshd[2150510]: Invalid user minecraft from 104.223.84.94 port 39832 Apr 24 07:11:03 ip-172-31-29-215 sshd[2150510]: Connection closed by invalid user minecraft 104.223.84.94 port 39832 [preauth] Apr 24 07:11:37 ip-172-31-29-215 sshd[2150512]: Invalid user huawei from 104.223.84.94 port 54160 Apr 24 07:11:38 ip-172-31-29-215 sshd[2150512]: Connection closed by invalid user huawei 104.223.84.94 port 54160 [preauth] Apr 24 07:12:17 ip-172-31-29-215 sshd[2150514]: Invalid user student from 104.223.84.94 port 55884 Apr 24 07:12:18 ip-172-31-29-215 sshd[2150514]: Connection closed by invalid user student 104.223.84.94 port 55884 [preauth] Apr 24 07:12:52 ip-172-31-29-215 sshd[2150516]: Connection closed by authenticating user root 104.223.84.94 port 41740 [preauth] Apr 24 07:13:33 ip-172-31-29-215 sshd[2150520]: Connection closed by authenticating user root 104.223.84.94 port 59566 [preauth] Apr 24 07:14:06 ip-172-31-29-215 sshd[2150522]: Connection closed by authenticating user root 104.223.84.94 port 42628 [preauth] Apr 24 07:14:43 ip-172-31-29-215 sshd[2150524]: Connection closed by authenticating user root 104.223.84.94 port 39616 [preauth] Apr 24 07:15:19 ip-172-31-29-215 sshd[2150526]: Connection closed by authenticating user root 104.223.84.94 port 38734 [preauth] Apr 24 07:15:59 ip-172-31-29-215 sshd[2150528]: Connection closed by authenticating user root 104.223.84.94 port 53420 [preauth] Apr 24 07:16:50 ip-172-31-29-215 sshd[2150530]: Invalid user test from 104.223.84.94 port 58330 Apr 24 07:16:50 ip-172-31-29-215 sshd[2150530]: Connection closed by invalid user test 104.223.84.94 port 58330 [preauth] Apr 24 07:17:01 ip-172-31-29-215 CRON[2150532]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 07:17:01 ip-172-31-29-215 CRON[2150532]: pam_unix(cron:session): session closed for user root Apr 24 07:17:29 ip-172-31-29-215 sshd[2150535]: Connection closed by authenticating user root 104.223.84.94 port 52866 [preauth] Apr 24 07:18:02 ip-172-31-29-215 sshd[2150538]: Connection closed by authenticating user root 104.223.84.94 port 45976 [preauth] Apr 24 07:18:39 ip-172-31-29-215 sshd[2150574]: Connection closed by authenticating user root 104.223.84.94 port 45966 [preauth] Apr 24 07:19:21 ip-172-31-29-215 sshd[2150577]: Connection closed by authenticating user root 104.223.84.94 port 54976 [preauth] Apr 24 07:19:58 ip-172-31-29-215 sshd[2150580]: Connection closed by authenticating user root 104.223.84.94 port 45706 [preauth] Apr 24 07:20:01 ip-172-31-29-215 CRON[2150582]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 07:20:01 ip-172-31-29-215 CRON[2150582]: pam_unix(cron:session): session closed for user smmsp Apr 24 07:20:35 ip-172-31-29-215 sshd[2150604]: Invalid user test from 104.223.84.94 port 49238 Apr 24 07:20:35 ip-172-31-29-215 sshd[2150604]: Connection closed by invalid user test 104.223.84.94 port 49238 [preauth] Apr 24 07:21:17 ip-172-31-29-215 sshd[2150606]: Invalid user test from 104.223.84.94 port 36860 Apr 24 07:21:18 ip-172-31-29-215 sshd[2150606]: Connection closed by invalid user test 104.223.84.94 port 36860 [preauth] Apr 24 07:21:52 ip-172-31-29-215 sshd[2150608]: Connection closed by authenticating user root 104.223.84.94 port 47136 [preauth] Apr 24 07:21:53 ip-172-31-29-215 sshd[2150610]: Invalid user aptuslegal from 87.106.255.77 port 43918 Apr 24 07:21:53 ip-172-31-29-215 sshd[2150610]: Connection closed by invalid user aptuslegal 87.106.255.77 port 43918 [preauth] Apr 24 07:22:28 ip-172-31-29-215 sshd[2150612]: Connection closed by authenticating user root 104.223.84.94 port 53126 [preauth] Apr 24 07:23:01 ip-172-31-29-215 sshd[2150614]: Invalid user postgres from 104.223.84.94 port 33518 Apr 24 07:23:01 ip-172-31-29-215 sshd[2150614]: Connection closed by invalid user postgres 104.223.84.94 port 33518 [preauth] Apr 24 07:23:40 ip-172-31-29-215 sshd[2150616]: Invalid user jenkins from 104.223.84.94 port 55668 Apr 24 07:23:41 ip-172-31-29-215 sshd[2150616]: Connection closed by invalid user jenkins 104.223.84.94 port 55668 [preauth] Apr 24 07:24:19 ip-172-31-29-215 sshd[2150619]: Connection closed by authenticating user root 104.223.84.94 port 33804 [preauth] Apr 24 07:24:58 ip-172-31-29-215 sshd[2150621]: Connection closed by authenticating user root 104.223.84.94 port 60526 [preauth] Apr 24 07:25:31 ip-172-31-29-215 sshd[2150624]: Connection closed by authenticating user root 104.223.84.94 port 59978 [preauth] Apr 24 07:26:08 ip-172-31-29-215 sshd[2150626]: Connection closed by authenticating user root 104.223.84.94 port 56516 [preauth] Apr 24 07:27:06 ip-172-31-29-215 sshd[2150628]: Connection closed by authenticating user root 104.223.84.94 port 53422 [preauth] Apr 24 07:27:54 ip-172-31-29-215 sshd[2150630]: Connection closed by authenticating user ubuntu 104.223.84.94 port 42096 [preauth] Apr 24 07:28:29 ip-172-31-29-215 sshd[2150633]: Invalid user test2 from 104.223.84.94 port 44442 Apr 24 07:28:30 ip-172-31-29-215 sshd[2150633]: Connection closed by invalid user test2 104.223.84.94 port 44442 [preauth] Apr 24 07:29:06 ip-172-31-29-215 sshd[2150636]: Connection closed by authenticating user root 104.223.84.94 port 33970 [preauth] Apr 24 07:29:17 ip-172-31-29-215 sshd[2150638]: Connection closed by authenticating user root 36.212.132.184 port 60484 [preauth] Apr 24 07:29:44 ip-172-31-29-215 sshd[2150640]: Connection closed by authenticating user root 104.223.84.94 port 35734 [preauth] Apr 24 07:30:18 ip-172-31-29-215 sshd[2150643]: Connection closed by authenticating user root 104.223.84.94 port 42242 [preauth] Apr 24 07:30:52 ip-172-31-29-215 sshd[2150647]: Connection closed by authenticating user root 104.223.84.94 port 55228 [preauth] Apr 24 07:31:35 ip-172-31-29-215 sshd[2150649]: Connection closed by authenticating user root 104.223.84.94 port 54322 [preauth] Apr 24 07:32:07 ip-172-31-29-215 sshd[2150651]: Invalid user zjw from 104.223.84.94 port 59094 Apr 24 07:32:08 ip-172-31-29-215 sshd[2150651]: Connection closed by invalid user zjw 104.223.84.94 port 59094 [preauth] Apr 24 07:32:51 ip-172-31-29-215 sshd[2150653]: Connection closed by authenticating user root 104.223.84.94 port 46074 [preauth] Apr 24 07:33:25 ip-172-31-29-215 sshd[2150655]: Connection closed by authenticating user root 104.223.84.94 port 37038 [preauth] Apr 24 07:34:02 ip-172-31-29-215 sshd[2150657]: Connection closed by authenticating user root 104.223.84.94 port 37618 [preauth] Apr 24 07:34:35 ip-172-31-29-215 sshd[2150660]: Invalid user admin from 104.223.84.94 port 35714 Apr 24 07:34:36 ip-172-31-29-215 sshd[2150660]: Connection closed by invalid user admin 104.223.84.94 port 35714 [preauth] Apr 24 07:35:15 ip-172-31-29-215 sshd[2150662]: Invalid user user from 104.223.84.94 port 47262 Apr 24 07:35:16 ip-172-31-29-215 sshd[2150662]: Connection closed by invalid user user 104.223.84.94 port 47262 [preauth] Apr 24 07:35:51 ip-172-31-29-215 sshd[2150664]: Connection closed by authenticating user root 104.223.84.94 port 46964 [preauth] Apr 24 07:36:32 ip-172-31-29-215 sshd[2150666]: Connection closed by authenticating user root 104.223.84.94 port 57710 [preauth] Apr 24 07:37:38 ip-172-31-29-215 sshd[2150668]: Invalid user admin from 104.223.84.94 port 34452 Apr 24 07:37:42 ip-172-31-29-215 sshd[2150668]: Connection closed by invalid user admin 104.223.84.94 port 34452 [preauth] Apr 24 07:38:58 ip-172-31-29-215 sshd[2150671]: Connection closed by authenticating user root 104.223.84.94 port 38538 [preauth] Apr 24 07:39:01 ip-172-31-29-215 CRON[2150673]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 07:39:01 ip-172-31-29-215 CRON[2150673]: pam_unix(cron:session): session closed for user root Apr 24 07:40:01 ip-172-31-29-215 CRON[2150733]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 07:40:01 ip-172-31-29-215 CRON[2150733]: pam_unix(cron:session): session closed for user smmsp Apr 24 07:40:08 ip-172-31-29-215 sshd[2150731]: Connection closed by authenticating user root 104.223.84.94 port 38022 [preauth] Apr 24 07:41:04 ip-172-31-29-215 sshd[2150755]: Connection closed by authenticating user root 104.223.84.94 port 37612 [preauth] Apr 24 07:41:39 ip-172-31-29-215 sshd[2150757]: Invalid user testuser from 104.223.84.94 port 50674 Apr 24 07:41:40 ip-172-31-29-215 sshd[2150757]: Connection closed by invalid user testuser 104.223.84.94 port 50674 [preauth] Apr 24 07:42:22 ip-172-31-29-215 sshd[2150759]: Connection closed by authenticating user root 104.223.84.94 port 52952 [preauth] Apr 24 07:42:55 ip-172-31-29-215 sshd[2150761]: Connection closed by authenticating user root 104.223.84.94 port 54046 [preauth] Apr 24 07:43:39 ip-172-31-29-215 sshd[2150763]: Connection closed by authenticating user backup 104.223.84.94 port 43864 [preauth] Apr 24 07:44:12 ip-172-31-29-215 sshd[2150765]: Invalid user admin from 104.223.84.94 port 58898 Apr 24 07:44:13 ip-172-31-29-215 sshd[2150765]: Connection closed by invalid user admin 104.223.84.94 port 58898 [preauth] Apr 24 07:44:51 ip-172-31-29-215 sshd[2150767]: Connection closed by authenticating user root 104.223.84.94 port 46340 [preauth] Apr 24 07:45:25 ip-172-31-29-215 sshd[2150771]: Connection closed by authenticating user root 104.223.84.94 port 49502 [preauth] Apr 24 07:46:07 ip-172-31-29-215 sshd[2150773]: Connection closed by authenticating user root 104.223.84.94 port 47850 [preauth] Apr 24 07:46:41 ip-172-31-29-215 sshd[2150776]: Connection closed by authenticating user root 104.223.84.94 port 47536 [preauth] Apr 24 07:47:46 ip-172-31-29-215 sshd[2150778]: Invalid user linuxadmin from 104.223.84.94 port 56856 Apr 24 07:47:51 ip-172-31-29-215 sshd[2150778]: Connection closed by invalid user linuxadmin 104.223.84.94 port 56856 [preauth] Apr 24 07:48:27 ip-172-31-29-215 sshd[2150782]: Invalid user ftpuser from 104.223.84.94 port 43366 Apr 24 07:48:28 ip-172-31-29-215 sshd[2150782]: Connection closed by invalid user ftpuser 104.223.84.94 port 43366 [preauth] Apr 24 07:49:09 ip-172-31-29-215 sshd[2150784]: Invalid user useradmin from 104.223.84.94 port 55938 Apr 24 07:49:10 ip-172-31-29-215 sshd[2150784]: Connection closed by invalid user useradmin 104.223.84.94 port 55938 [preauth] Apr 24 07:49:42 ip-172-31-29-215 sshd[2150787]: Connection closed by authenticating user root 104.223.84.94 port 41012 [preauth] Apr 24 07:50:27 ip-172-31-29-215 sshd[2150789]: Connection closed by authenticating user root 104.223.84.94 port 55692 [preauth] Apr 24 07:50:59 ip-172-31-29-215 sshd[2150796]: Invalid user ftptest from 104.223.84.94 port 47550 Apr 24 07:50:59 ip-172-31-29-215 sshd[2150796]: Connection closed by invalid user ftptest 104.223.84.94 port 47550 [preauth] Apr 24 07:51:38 ip-172-31-29-215 sshd[2150798]: Connection closed by authenticating user root 104.223.84.94 port 56924 [preauth] Apr 24 07:52:15 ip-172-31-29-215 sshd[2150800]: Connection closed by authenticating user root 104.223.84.94 port 54126 [preauth] Apr 24 07:52:45 ip-172-31-29-215 sshd[2150802]: Invalid user aptuslegal from 77.90.185.36 port 35570 Apr 24 07:52:46 ip-172-31-29-215 sshd[2150802]: Connection closed by invalid user aptuslegal 77.90.185.36 port 35570 [preauth] Apr 24 07:52:50 ip-172-31-29-215 sshd[2150804]: Connection closed by authenticating user root 104.223.84.94 port 50346 [preauth] Apr 24 07:53:31 ip-172-31-29-215 sshd[2150806]: Connection closed by authenticating user root 104.223.84.94 port 41456 [preauth] Apr 24 07:54:06 ip-172-31-29-215 sshd[2150808]: Invalid user node from 104.223.84.94 port 42338 Apr 24 07:54:06 ip-172-31-29-215 sshd[2150808]: Connection closed by invalid user node 104.223.84.94 port 42338 [preauth] Apr 24 07:54:44 ip-172-31-29-215 sshd[2150810]: Invalid user builder from 104.223.84.94 port 39788 Apr 24 07:54:44 ip-172-31-29-215 sshd[2150810]: Connection closed by invalid user builder 104.223.84.94 port 39788 [preauth] Apr 24 07:55:20 ip-172-31-29-215 sshd[2150812]: Connection closed by authenticating user root 104.223.84.94 port 46312 [preauth] Apr 24 07:55:57 ip-172-31-29-215 sshd[2150815]: Invalid user postgres from 104.223.84.94 port 38072 Apr 24 07:55:58 ip-172-31-29-215 sshd[2150815]: Connection closed by invalid user postgres 104.223.84.94 port 38072 [preauth] Apr 24 07:56:33 ip-172-31-29-215 sshd[2150817]: Invalid user lab from 104.223.84.94 port 47544 Apr 24 07:56:35 ip-172-31-29-215 sshd[2150817]: Connection closed by invalid user lab 104.223.84.94 port 47544 [preauth] Apr 24 07:57:06 ip-172-31-29-215 sshd[2150819]: Invalid user sftpuser from 104.223.84.94 port 40114 Apr 24 07:57:06 ip-172-31-29-215 sshd[2150819]: Connection closed by invalid user sftpuser 104.223.84.94 port 40114 [preauth] Apr 24 07:57:57 ip-172-31-29-215 sshd[2150822]: Connection closed by authenticating user root 104.223.84.94 port 40828 [preauth] Apr 24 07:58:40 ip-172-31-29-215 sshd[2150825]: Connection closed by authenticating user root 104.223.84.94 port 54716 [preauth] Apr 24 07:59:25 ip-172-31-29-215 sshd[2150827]: Invalid user 1234 from 104.223.84.94 port 50438 Apr 24 07:59:26 ip-172-31-29-215 sshd[2150827]: Connection closed by invalid user 1234 104.223.84.94 port 50438 [preauth] Apr 24 08:00:01 ip-172-31-29-215 CRON[2150831]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 08:00:01 ip-172-31-29-215 CRON[2150831]: pam_unix(cron:session): session closed for user smmsp Apr 24 08:00:10 ip-172-31-29-215 sshd[2150830]: Connection closed by authenticating user root 104.223.84.94 port 37530 [preauth] Apr 24 08:00:56 ip-172-31-29-215 sshd[2150855]: Connection closed by authenticating user root 104.223.84.94 port 32930 [preauth] Apr 24 08:01:32 ip-172-31-29-215 sshd[2150858]: Invalid user admin from 104.223.84.94 port 50936 Apr 24 08:01:33 ip-172-31-29-215 sshd[2150858]: Connection closed by invalid user admin 104.223.84.94 port 50936 [preauth] Apr 24 08:02:07 ip-172-31-29-215 sshd[2150860]: Connection closed by authenticating user root 104.223.84.94 port 57888 [preauth] Apr 24 08:02:49 ip-172-31-29-215 sshd[2150862]: Connection closed by authenticating user root 104.223.84.94 port 40224 [preauth] Apr 24 08:03:25 ip-172-31-29-215 sshd[2150864]: Connection closed by authenticating user root 104.223.84.94 port 47718 [preauth] Apr 24 08:04:05 ip-172-31-29-215 sshd[2150867]: Invalid user a from 104.223.84.94 port 43098 Apr 24 08:04:06 ip-172-31-29-215 sshd[2150867]: Connection closed by invalid user a 104.223.84.94 port 43098 [preauth] Apr 24 08:04:39 ip-172-31-29-215 sshd[2150869]: Invalid user test123 from 104.223.84.94 port 57240 Apr 24 08:04:39 ip-172-31-29-215 sshd[2150869]: Connection closed by invalid user test123 104.223.84.94 port 57240 [preauth] Apr 24 08:05:20 ip-172-31-29-215 sshd[2150871]: Connection closed by authenticating user root 104.223.84.94 port 42496 [preauth] Apr 24 08:05:57 ip-172-31-29-215 sshd[2150878]: Connection closed by authenticating user root 104.223.84.94 port 33530 [preauth] Apr 24 08:06:38 ip-172-31-29-215 sshd[2150880]: Connection closed by authenticating user root 104.223.84.94 port 36954 [preauth] Apr 24 08:07:11 ip-172-31-29-215 sshd[2150883]: Connection closed by authenticating user root 104.223.84.94 port 54844 [preauth] Apr 24 08:08:17 ip-172-31-29-215 sshd[2150886]: Connection closed by authenticating user root 104.223.84.94 port 51298 [preauth] Apr 24 08:09:01 ip-172-31-29-215 CRON[2150888]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 08:09:01 ip-172-31-29-215 CRON[2150888]: pam_unix(cron:session): session closed for user root Apr 24 08:09:13 ip-172-31-29-215 sshd[2150890]: Connection closed by authenticating user root 104.223.84.94 port 53666 [preauth] Apr 24 08:10:01 ip-172-31-29-215 sshd[2150948]: Connection closed by authenticating user root 104.223.84.94 port 46576 [preauth] Apr 24 08:10:49 ip-172-31-29-215 sshd[2150950]: Connection closed by authenticating user root 104.223.84.94 port 52728 [preauth] Apr 24 08:11:21 ip-172-31-29-215 sshd[2150952]: Connection closed by authenticating user root 104.223.84.94 port 42472 [preauth] Apr 24 08:12:00 ip-172-31-29-215 sshd[2150955]: Connection closed by authenticating user root 104.223.84.94 port 35670 [preauth] Apr 24 08:12:41 ip-172-31-29-215 sshd[2150957]: Connection closed by authenticating user root 104.223.84.94 port 59936 [preauth] Apr 24 08:13:17 ip-172-31-29-215 sshd[2150959]: Connection closed by authenticating user root 104.223.84.94 port 55924 [preauth] Apr 24 08:13:59 ip-172-31-29-215 sshd[2150961]: Invalid user git from 104.223.84.94 port 56258 Apr 24 08:14:00 ip-172-31-29-215 sshd[2150961]: Connection closed by invalid user git 104.223.84.94 port 56258 [preauth] Apr 24 08:14:36 ip-172-31-29-215 sshd[2150963]: Invalid user admin from 104.223.84.94 port 44190 Apr 24 08:14:37 ip-172-31-29-215 sshd[2150963]: Connection closed by invalid user admin 104.223.84.94 port 44190 [preauth] Apr 24 08:15:18 ip-172-31-29-215 sshd[2150966]: Invalid user user from 104.223.84.94 port 49362 Apr 24 08:15:18 ip-172-31-29-215 sshd[2150966]: Connection closed by invalid user user 104.223.84.94 port 49362 [preauth] Apr 24 08:15:55 ip-172-31-29-215 sshd[2150968]: Connection closed by authenticating user root 104.223.84.94 port 58478 [preauth] Apr 24 08:16:36 ip-172-31-29-215 sshd[2150970]: Connection closed by authenticating user root 104.223.84.94 port 56344 [preauth] Apr 24 08:17:01 ip-172-31-29-215 CRON[2150973]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 08:17:01 ip-172-31-29-215 CRON[2150973]: pam_unix(cron:session): session closed for user root Apr 24 08:17:11 ip-172-31-29-215 sshd[2150976]: Connection closed by authenticating user root 104.223.84.94 port 57574 [preauth] Apr 24 08:18:11 ip-172-31-29-215 sshd[2150978]: Connection closed by authenticating user root 104.223.84.94 port 33034 [preauth] Apr 24 08:19:12 ip-172-31-29-215 sshd[2150981]: Connection closed by authenticating user root 104.223.84.94 port 55850 [preauth] Apr 24 08:20:01 ip-172-31-29-215 CRON[2150985]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 08:20:01 ip-172-31-29-215 CRON[2150985]: pam_unix(cron:session): session closed for user smmsp Apr 24 08:20:12 ip-172-31-29-215 sshd[2150984]: Connection closed by authenticating user root 104.223.84.94 port 60476 [preauth] Apr 24 08:21:14 ip-172-31-29-215 sshd[2151010]: Connection closed by authenticating user root 104.223.84.94 port 40732 [preauth] Apr 24 08:22:14 ip-172-31-29-215 sshd[2151013]: Invalid user deployer from 104.223.84.94 port 34332 Apr 24 08:22:17 ip-172-31-29-215 sshd[2151013]: Connection closed by invalid user deployer 104.223.84.94 port 34332 [preauth] Apr 24 08:23:07 ip-172-31-29-215 sshd[2151015]: Invalid user 1 from 104.223.84.94 port 59440 Apr 24 08:23:08 ip-172-31-29-215 sshd[2151015]: Connection closed by invalid user 1 104.223.84.94 port 59440 [preauth] Apr 24 08:23:41 ip-172-31-29-215 sshd[2151017]: Invalid user test1 from 104.223.84.94 port 51148 Apr 24 08:23:41 ip-172-31-29-215 sshd[2151017]: Connection closed by invalid user test1 104.223.84.94 port 51148 [preauth] Apr 24 08:24:25 ip-172-31-29-215 sshd[2151019]: Connection closed by authenticating user root 104.223.84.94 port 39676 [preauth] Apr 24 08:25:02 ip-172-31-29-215 sshd[2151021]: Connection closed by authenticating user root 104.223.84.94 port 55502 [preauth] Apr 24 08:25:37 ip-172-31-29-215 sshd[2151023]: Connection closed by authenticating user root 104.223.84.94 port 55090 [preauth] Apr 24 08:26:17 ip-172-31-29-215 sshd[2151025]: Connection closed by authenticating user root 104.223.84.94 port 52540 [preauth] Apr 24 08:26:53 ip-172-31-29-215 sshd[2151027]: Connection closed by authenticating user root 104.223.84.94 port 55652 [preauth] Apr 24 08:27:27 ip-172-31-29-215 sshd[2151030]: Connection closed by authenticating user root 104.223.84.94 port 42780 [preauth] Apr 24 08:28:37 ip-172-31-29-215 sshd[2151033]: Connection closed by authenticating user root 104.223.84.94 port 57660 [preauth] Apr 24 08:29:29 ip-172-31-29-215 sshd[2151035]: Connection closed by authenticating user root 104.223.84.94 port 50992 [preauth] Apr 24 08:30:36 ip-172-31-29-215 sshd[2151039]: Connection closed by authenticating user root 104.223.84.94 port 42718 [preauth] Apr 24 08:31:43 ip-172-31-29-215 sshd[2151041]: Invalid user alex from 104.223.84.94 port 35646 Apr 24 08:31:45 ip-172-31-29-215 sshd[2151041]: Connection closed by invalid user alex 104.223.84.94 port 35646 [preauth] Apr 24 08:32:49 ip-172-31-29-215 sshd[2151043]: Invalid user sammy from 104.223.84.94 port 45606 Apr 24 08:32:51 ip-172-31-29-215 sshd[2151043]: Connection closed by invalid user sammy 104.223.84.94 port 45606 [preauth] Apr 24 08:33:52 ip-172-31-29-215 sshd[2151046]: Connection closed by authenticating user root 104.223.84.94 port 53210 [preauth] Apr 24 08:34:38 ip-172-31-29-215 sshd[2151049]: Connection closed by authenticating user root 104.223.84.94 port 59970 [preauth] Apr 24 08:34:52 ip-172-31-29-215 sshd[2151051]: Connection closed by authenticating user root 14.225.206.111 port 33084 [preauth] Apr 24 08:35:15 ip-172-31-29-215 sshd[2151053]: Connection closed by authenticating user root 104.223.84.94 port 33406 [preauth] Apr 24 08:35:57 ip-172-31-29-215 sshd[2151055]: Invalid user postgres from 104.223.84.94 port 50288 Apr 24 08:35:58 ip-172-31-29-215 sshd[2151055]: Connection closed by invalid user postgres 104.223.84.94 port 50288 [preauth] Apr 24 08:36:32 ip-172-31-29-215 sshd[2151058]: Connection closed by authenticating user mysql 104.223.84.94 port 41398 [preauth] Apr 24 08:37:16 ip-172-31-29-215 sshd[2151060]: Invalid user mc from 104.223.84.94 port 33134 Apr 24 08:37:17 ip-172-31-29-215 sshd[2151060]: Connection closed by invalid user mc 104.223.84.94 port 33134 [preauth] Apr 24 08:38:12 ip-172-31-29-215 sshd[2151063]: Invalid user tester from 104.223.84.94 port 46618 Apr 24 08:38:14 ip-172-31-29-215 sshd[2151063]: Connection closed by invalid user tester 104.223.84.94 port 46618 [preauth] Apr 24 08:39:01 ip-172-31-29-215 CRON[2151066]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 08:39:01 ip-172-31-29-215 CRON[2151066]: pam_unix(cron:session): session closed for user root Apr 24 08:39:27 ip-172-31-29-215 sshd[2151122]: Invalid user temp from 104.223.84.94 port 33684 Apr 24 08:39:29 ip-172-31-29-215 sshd[2151122]: Connection closed by invalid user temp 104.223.84.94 port 33684 [preauth] Apr 24 08:40:01 ip-172-31-29-215 CRON[2151125]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 08:40:01 ip-172-31-29-215 CRON[2151125]: pam_unix(cron:session): session closed for user smmsp Apr 24 08:40:34 ip-172-31-29-215 sshd[2151148]: Connection closed by authenticating user root 104.223.84.94 port 43746 [preauth] Apr 24 08:41:51 ip-172-31-29-215 sshd[2151150]: Connection closed by authenticating user root 104.223.84.94 port 46952 [preauth] Apr 24 08:42:49 ip-172-31-29-215 sshd[2151152]: Connection closed by authenticating user root 104.223.84.94 port 56132 [preauth] Apr 24 08:43:25 ip-172-31-29-215 sshd[2151156]: Connection closed by authenticating user root 104.223.84.94 port 48462 [preauth] Apr 24 08:44:02 ip-172-31-29-215 sshd[2151158]: Connection closed by authenticating user root 104.223.84.94 port 49236 [preauth] Apr 24 08:44:40 ip-172-31-29-215 sshd[2151160]: Connection closed by authenticating user root 104.223.84.94 port 58156 [preauth] Apr 24 08:45:18 ip-172-31-29-215 sshd[2151162]: Connection closed by authenticating user root 104.223.84.94 port 50254 [preauth] Apr 24 08:45:50 ip-172-31-29-215 sshd[2151164]: Connection closed by authenticating user root 104.223.84.94 port 38394 [preauth] Apr 24 08:46:30 ip-172-31-29-215 sshd[2151167]: Connection closed by authenticating user root 104.223.84.94 port 42952 [preauth] Apr 24 08:47:04 ip-172-31-29-215 sshd[2151169]: Connection closed by authenticating user root 104.223.84.94 port 37218 [preauth] Apr 24 08:47:43 ip-172-31-29-215 sshd[2151171]: Connection closed by authenticating user root 104.223.84.94 port 35676 [preauth] Apr 24 08:48:54 ip-172-31-29-215 sshd[2151175]: Invalid user deploy from 104.223.84.94 port 46332 Apr 24 08:48:57 ip-172-31-29-215 sshd[2151175]: Connection closed by invalid user deploy 104.223.84.94 port 46332 [preauth] Apr 24 08:50:19 ip-172-31-29-215 sshd[2151178]: Connection closed by authenticating user root 104.223.84.94 port 53556 [preauth] Apr 24 08:51:41 ip-172-31-29-215 sshd[2151180]: Connection closed by authenticating user root 104.223.84.94 port 44060 [preauth] Apr 24 08:53:00 ip-172-31-29-215 sshd[2151190]: Connection closed by authenticating user root 104.223.84.94 port 35972 [preauth] Apr 24 08:54:17 ip-172-31-29-215 sshd[2151193]: Connection closed by authenticating user root 104.223.84.94 port 53876 [preauth] Apr 24 08:55:24 ip-172-31-29-215 sshd[2151195]: Connection closed by authenticating user root 104.223.84.94 port 33046 [preauth] Apr 24 08:56:01 ip-172-31-29-215 sshd[2151250]: Connection closed by authenticating user root 104.223.84.94 port 58632 [preauth] Apr 24 08:56:39 ip-172-31-29-215 sshd[2151365]: Connection closed by authenticating user root 104.223.84.94 port 45668 [preauth] Apr 24 08:57:16 ip-172-31-29-215 sshd[2151424]: Connection closed by authenticating user root 104.223.84.94 port 49364 [preauth] Apr 24 08:57:51 ip-172-31-29-215 sshd[2151426]: Invalid user odoo from 104.223.84.94 port 50988 Apr 24 08:57:51 ip-172-31-29-215 sshd[2151426]: Connection closed by invalid user odoo 104.223.84.94 port 50988 [preauth] Apr 24 08:58:59 ip-172-31-29-215 sshd[2151432]: Invalid user server from 104.223.84.94 port 52280 Apr 24 08:59:00 ip-172-31-29-215 sshd[2151432]: Connection closed by invalid user server 104.223.84.94 port 52280 [preauth] Apr 24 08:59:36 ip-172-31-29-215 sshd[2151440]: Connection closed by authenticating user root 104.223.84.94 port 50280 [preauth] Apr 24 09:00:01 ip-172-31-29-215 CRON[2151443]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 09:00:01 ip-172-31-29-215 CRON[2151443]: pam_unix(cron:session): session closed for user smmsp Apr 24 09:00:19 ip-172-31-29-215 sshd[2151465]: Connection closed by authenticating user root 104.223.84.94 port 56154 [preauth] Apr 24 09:00:55 ip-172-31-29-215 sshd[2151468]: Connection closed by authenticating user root 104.223.84.94 port 51320 [preauth] Apr 24 09:01:38 ip-172-31-29-215 sshd[2151470]: Connection closed by authenticating user root 104.223.84.94 port 34338 [preauth] Apr 24 09:02:11 ip-172-31-29-215 sshd[2151472]: Invalid user kafka from 104.223.84.94 port 55592 Apr 24 09:02:12 ip-172-31-29-215 sshd[2151472]: Connection closed by invalid user kafka 104.223.84.94 port 55592 [preauth] Apr 24 09:02:20 ip-172-31-29-215 sshd[2151475]: Connection closed by authenticating user root 77.90.185.92 port 47034 [preauth] Apr 24 09:02:50 ip-172-31-29-215 sshd[2151477]: Invalid user git from 104.223.84.94 port 52842 Apr 24 09:02:51 ip-172-31-29-215 sshd[2151477]: Connection closed by invalid user git 104.223.84.94 port 52842 [preauth] Apr 24 09:03:29 ip-172-31-29-215 sshd[2151479]: Invalid user dolphinscheduler from 104.223.84.94 port 44598 Apr 24 09:03:31 ip-172-31-29-215 sshd[2151479]: Connection closed by invalid user dolphinscheduler 104.223.84.94 port 44598 [preauth] Apr 24 09:04:07 ip-172-31-29-215 sshd[2151481]: Invalid user docker from 104.223.84.94 port 54342 Apr 24 09:04:07 ip-172-31-29-215 sshd[2151481]: Connection closed by invalid user docker 104.223.84.94 port 54342 [preauth] Apr 24 09:04:48 ip-172-31-29-215 sshd[2151484]: Invalid user test from 104.223.84.94 port 44304 Apr 24 09:04:49 ip-172-31-29-215 sshd[2151484]: Connection closed by invalid user test 104.223.84.94 port 44304 [preauth] Apr 24 09:05:22 ip-172-31-29-215 sshd[2151486]: Connection closed by authenticating user root 104.223.84.94 port 48460 [preauth] Apr 24 09:06:00 ip-172-31-29-215 sshd[2151488]: Connection closed by authenticating user root 104.223.84.94 port 35374 [preauth] Apr 24 09:06:41 ip-172-31-29-215 sshd[2151490]: Connection closed by authenticating user root 104.223.84.94 port 33748 [preauth] Apr 24 09:07:26 ip-172-31-29-215 sshd[2151492]: Connection closed by authenticating user root 104.223.84.94 port 46082 [preauth] Apr 24 09:07:58 ip-172-31-29-215 sshd[2151494]: Connection closed by authenticating user root 104.223.84.94 port 54768 [preauth] Apr 24 09:09:01 ip-172-31-29-215 CRON[2151499]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 09:09:01 ip-172-31-29-215 CRON[2151499]: pam_unix(cron:session): session closed for user root Apr 24 09:09:13 ip-172-31-29-215 sshd[2151497]: Connection closed by authenticating user root 104.223.84.94 port 44424 [preauth] Apr 24 09:10:28 ip-172-31-29-215 sshd[2151558]: Connection closed by authenticating user root 104.223.84.94 port 37678 [preauth] Apr 24 09:11:49 ip-172-31-29-215 sshd[2151562]: Connection closed by authenticating user root 104.223.84.94 port 42568 [preauth] Apr 24 09:13:03 ip-172-31-29-215 sshd[2151564]: Connection closed by authenticating user root 104.223.84.94 port 58370 [preauth] Apr 24 09:14:25 ip-172-31-29-215 sshd[2151566]: Connection closed by authenticating user root 104.223.84.94 port 33620 [preauth] Apr 24 09:15:39 ip-172-31-29-215 sshd[2151569]: Invalid user prueba from 104.223.84.94 port 41280 Apr 24 09:15:40 ip-172-31-29-215 sshd[2151569]: Connection closed by invalid user prueba 104.223.84.94 port 41280 [preauth] Apr 24 09:16:33 ip-172-31-29-215 sshd[2151575]: Invalid user user1 from 104.223.84.94 port 48344 Apr 24 09:16:34 ip-172-31-29-215 sshd[2151575]: Connection closed by invalid user user1 104.223.84.94 port 48344 [preauth] Apr 24 09:17:01 ip-172-31-29-215 CRON[2151577]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 09:17:01 ip-172-31-29-215 CRON[2151577]: pam_unix(cron:session): session closed for user root Apr 24 09:17:09 ip-172-31-29-215 sshd[2151580]: Invalid user support from 104.223.84.94 port 51528 Apr 24 09:17:11 ip-172-31-29-215 sshd[2151580]: Connection closed by invalid user support 104.223.84.94 port 51528 [preauth] Apr 24 09:17:49 ip-172-31-29-215 sshd[2151582]: Connection closed by authenticating user root 104.223.84.94 port 33790 [preauth] Apr 24 09:18:51 ip-172-31-29-215 sshd[2151585]: Connection closed by authenticating user root 104.223.84.94 port 45710 [preauth] Apr 24 09:20:01 ip-172-31-29-215 CRON[2151590]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 09:20:01 ip-172-31-29-215 CRON[2151590]: pam_unix(cron:session): session closed for user smmsp Apr 24 09:20:13 ip-172-31-29-215 sshd[2151588]: Connection closed by authenticating user root 104.223.84.94 port 50766 [preauth] Apr 24 09:37:25 ip-172-31-29-215 sshd[2151680]: Connection closed by authenticating user root 34.138.135.178 port 46408 [preauth] Apr 24 09:38:17 ip-172-31-29-215 sshd[2151692]: Invalid user aptuslegal from 77.90.185.87 port 34972 Apr 24 09:38:17 ip-172-31-29-215 sshd[2151692]: Connection closed by invalid user aptuslegal 77.90.185.87 port 34972 [preauth] Apr 24 09:39:01 ip-172-31-29-215 CRON[2151706]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 09:39:01 ip-172-31-29-215 CRON[2151706]: pam_unix(cron:session): session closed for user root Apr 24 09:40:01 ip-172-31-29-215 CRON[2151769]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 09:40:01 ip-172-31-29-215 CRON[2151769]: pam_unix(cron:session): session closed for user smmsp Apr 24 10:00:01 ip-172-31-29-215 CRON[2151936]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 10:00:01 ip-172-31-29-215 CRON[2151936]: pam_unix(cron:session): session closed for user smmsp Apr 24 10:09:01 ip-172-31-29-215 CRON[2152088]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 10:09:01 ip-172-31-29-215 CRON[2152088]: pam_unix(cron:session): session closed for user root Apr 24 10:17:01 ip-172-31-29-215 CRON[2152172]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 10:17:01 ip-172-31-29-215 CRON[2152172]: pam_unix(cron:session): session closed for user root Apr 24 10:20:01 ip-172-31-29-215 CRON[2152202]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 10:20:01 ip-172-31-29-215 CRON[2152202]: pam_unix(cron:session): session closed for user smmsp Apr 24 10:39:01 ip-172-31-29-215 CRON[2152330]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 10:39:01 ip-172-31-29-215 CRON[2152330]: pam_unix(cron:session): session closed for user root Apr 24 10:39:08 ip-172-31-29-215 sshd[2152332]: Invalid user admin from 72.167.34.120 port 40640 Apr 24 10:39:09 ip-172-31-29-215 sshd[2152332]: Connection closed by invalid user admin 72.167.34.120 port 40640 [preauth] Apr 24 10:40:01 ip-172-31-29-215 CRON[2152389]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 10:40:01 ip-172-31-29-215 CRON[2152389]: pam_unix(cron:session): session closed for user smmsp Apr 24 10:40:56 ip-172-31-29-215 sshd[2152411]: Invalid user aptuslegal from 103.106.104.187 port 40458 Apr 24 10:40:57 ip-172-31-29-215 sshd[2152411]: Connection closed by invalid user aptuslegal 103.106.104.187 port 40458 [preauth] Apr 24 10:48:18 ip-172-31-29-215 sshd[2152417]: Connection closed by authenticating user root 172.94.9.127 port 48258 [preauth] Apr 24 11:00:01 ip-172-31-29-215 CRON[2152668]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 11:00:01 ip-172-31-29-215 CRON[2152668]: pam_unix(cron:session): session closed for user smmsp Apr 24 11:08:43 ip-172-31-29-215 sshd[2152787]: error: kex_exchange_identification: Connection closed by remote host Apr 24 11:09:01 ip-172-31-29-215 CRON[2152806]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 11:09:01 ip-172-31-29-215 CRON[2152806]: pam_unix(cron:session): session closed for user root Apr 24 11:10:15 ip-172-31-29-215 sshd[2152895]: Received disconnect from 130.12.181.85 port 27972:11: Bye Bye [preauth] Apr 24 11:10:15 ip-172-31-29-215 sshd[2152895]: Disconnected from authenticating user root 130.12.181.85 port 27972 [preauth] Apr 24 11:17:01 ip-172-31-29-215 CRON[2152990]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 11:17:01 ip-172-31-29-215 CRON[2152990]: pam_unix(cron:session): session closed for user root Apr 24 11:20:01 ip-172-31-29-215 CRON[2153114]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 11:20:01 ip-172-31-29-215 CRON[2153114]: pam_unix(cron:session): session closed for user smmsp Apr 24 11:39:01 ip-172-31-29-215 CRON[2153420]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 11:39:01 ip-172-31-29-215 CRON[2153420]: pam_unix(cron:session): session closed for user root Apr 24 11:40:01 ip-172-31-29-215 CRON[2153491]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 11:40:01 ip-172-31-29-215 CRON[2153491]: pam_unix(cron:session): session closed for user smmsp Apr 24 11:56:05 ip-172-31-29-215 sshd[2153591]: Invalid user aptuslegal from 66.116.199.61 port 33194 Apr 24 11:56:05 ip-172-31-29-215 sshd[2153591]: Connection closed by invalid user aptuslegal 66.116.199.61 port 33194 [preauth] Apr 24 12:00:01 ip-172-31-29-215 CRON[2154358]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 12:00:01 ip-172-31-29-215 CRON[2154357]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 12:00:01 ip-172-31-29-215 CRON[2154357]: pam_unix(cron:session): session closed for user root Apr 24 12:00:01 ip-172-31-29-215 CRON[2154358]: pam_unix(cron:session): session closed for user smmsp Apr 24 12:09:01 ip-172-31-29-215 CRON[2154419]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 12:09:01 ip-172-31-29-215 CRON[2154419]: pam_unix(cron:session): session closed for user root Apr 24 12:12:52 ip-172-31-29-215 sshd[2154512]: Invalid user aptuslegal from 77.90.185.92 port 49376 Apr 24 12:12:52 ip-172-31-29-215 sshd[2154512]: Connection closed by invalid user aptuslegal 77.90.185.92 port 49376 [preauth] Apr 24 12:17:01 ip-172-31-29-215 CRON[2154576]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 12:17:01 ip-172-31-29-215 CRON[2154576]: pam_unix(cron:session): session closed for user root Apr 24 12:20:01 ip-172-31-29-215 CRON[2154600]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 12:20:01 ip-172-31-29-215 CRON[2154600]: pam_unix(cron:session): session closed for user smmsp Apr 24 12:39:01 ip-172-31-29-215 CRON[2154649]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 12:39:01 ip-172-31-29-215 CRON[2154649]: pam_unix(cron:session): session closed for user root Apr 24 12:40:01 ip-172-31-29-215 CRON[2154706]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 12:40:01 ip-172-31-29-215 CRON[2154706]: pam_unix(cron:session): session closed for user smmsp Apr 24 13:00:01 ip-172-31-29-215 CRON[2155010]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 13:00:01 ip-172-31-29-215 CRON[2155010]: pam_unix(cron:session): session closed for user smmsp Apr 24 13:09:01 ip-172-31-29-215 CRON[2155163]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 13:09:01 ip-172-31-29-215 CRON[2155163]: pam_unix(cron:session): session closed for user root Apr 24 13:17:01 ip-172-31-29-215 CRON[2155247]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 13:17:01 ip-172-31-29-215 CRON[2155247]: pam_unix(cron:session): session closed for user root Apr 24 13:20:01 ip-172-31-29-215 CRON[2155256]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 13:20:01 ip-172-31-29-215 CRON[2155256]: pam_unix(cron:session): session closed for user smmsp Apr 24 13:20:21 ip-172-31-29-215 sshd[2155278]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 34190 ssh2 [preauth] Apr 24 13:20:21 ip-172-31-29-215 sshd[2155278]: Disconnecting authenticating user root 47.185.144.12 port 34190: Too many authentication failures [preauth] Apr 24 13:20:22 ip-172-31-29-215 sshd[2155280]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 34194 ssh2 [preauth] Apr 24 13:20:22 ip-172-31-29-215 sshd[2155280]: Disconnecting authenticating user root 47.185.144.12 port 34194: Too many authentication failures [preauth] Apr 24 13:20:22 ip-172-31-29-215 sshd[2155282]: error: maximum authentication attempts exceeded for root from 47.185.144.12 port 34200 ssh2 [preauth] Apr 24 13:20:22 ip-172-31-29-215 sshd[2155282]: Disconnecting authenticating user root 47.185.144.12 port 34200: Too many authentication failures [preauth] Apr 24 13:20:23 ip-172-31-29-215 sshd[2155284]: Received disconnect from 47.185.144.12 port 34208:11: disconnected by user [preauth] Apr 24 13:20:23 ip-172-31-29-215 sshd[2155284]: Disconnected from authenticating user root 47.185.144.12 port 34208 [preauth] Apr 24 13:20:23 ip-172-31-29-215 sshd[2155286]: Invalid user admin from 47.185.144.12 port 34220 Apr 24 13:20:23 ip-172-31-29-215 sshd[2155286]: error: maximum authentication attempts exceeded for invalid user admin from 47.185.144.12 port 34220 ssh2 [preauth] Apr 24 13:20:23 ip-172-31-29-215 sshd[2155286]: Disconnecting invalid user admin 47.185.144.12 port 34220: Too many authentication failures [preauth] Apr 24 13:20:24 ip-172-31-29-215 sshd[2155288]: Invalid user admin from 47.185.144.12 port 34222 Apr 24 13:20:24 ip-172-31-29-215 sshd[2155288]: error: maximum authentication attempts exceeded for invalid user admin from 47.185.144.12 port 34222 ssh2 [preauth] Apr 24 13:20:24 ip-172-31-29-215 sshd[2155288]: Disconnecting invalid user admin 47.185.144.12 port 34222: Too many authentication failures [preauth] Apr 24 13:20:24 ip-172-31-29-215 sshd[2155290]: Invalid user admin from 47.185.144.12 port 34232 Apr 24 13:20:25 ip-172-31-29-215 sshd[2155290]: Received disconnect from 47.185.144.12 port 34232:11: disconnected by user [preauth] Apr 24 13:20:25 ip-172-31-29-215 sshd[2155290]: Disconnected from invalid user admin 47.185.144.12 port 34232 [preauth] Apr 24 13:20:25 ip-172-31-29-215 sshd[2155292]: Invalid user oracle from 47.185.144.12 port 34236 Apr 24 13:20:25 ip-172-31-29-215 sshd[2155292]: error: maximum authentication attempts exceeded for invalid user oracle from 47.185.144.12 port 34236 ssh2 [preauth] Apr 24 13:20:25 ip-172-31-29-215 sshd[2155292]: Disconnecting invalid user oracle 47.185.144.12 port 34236: Too many authentication failures [preauth] Apr 24 13:20:26 ip-172-31-29-215 sshd[2155294]: Invalid user oracle from 47.185.144.12 port 34246 Apr 24 13:20:26 ip-172-31-29-215 sshd[2155294]: error: maximum authentication attempts exceeded for invalid user oracle from 47.185.144.12 port 34246 ssh2 [preauth] Apr 24 13:20:26 ip-172-31-29-215 sshd[2155294]: Disconnecting invalid user oracle 47.185.144.12 port 34246: Too many authentication failures [preauth] Apr 24 13:20:26 ip-172-31-29-215 sshd[2155296]: Invalid user oracle from 47.185.144.12 port 34260 Apr 24 13:20:27 ip-172-31-29-215 sshd[2155296]: Received disconnect from 47.185.144.12 port 34260:11: disconnected by user [preauth] Apr 24 13:20:27 ip-172-31-29-215 sshd[2155296]: Disconnected from invalid user oracle 47.185.144.12 port 34260 [preauth] Apr 24 13:20:27 ip-172-31-29-215 sshd[2155298]: Invalid user usuario from 47.185.144.12 port 34274 Apr 24 13:20:27 ip-172-31-29-215 sshd[2155298]: error: maximum authentication attempts exceeded for invalid user usuario from 47.185.144.12 port 34274 ssh2 [preauth] Apr 24 13:20:27 ip-172-31-29-215 sshd[2155298]: Disconnecting invalid user usuario 47.185.144.12 port 34274: Too many authentication failures [preauth] Apr 24 13:20:28 ip-172-31-29-215 sshd[2155300]: Invalid user usuario from 47.185.144.12 port 34280 Apr 24 13:20:28 ip-172-31-29-215 sshd[2155300]: error: maximum authentication attempts exceeded for invalid user usuario from 47.185.144.12 port 34280 ssh2 [preauth] Apr 24 13:20:28 ip-172-31-29-215 sshd[2155300]: Disconnecting invalid user usuario 47.185.144.12 port 34280: Too many authentication failures [preauth] Apr 24 13:20:28 ip-172-31-29-215 sshd[2155302]: Invalid user usuario from 47.185.144.12 port 52794 Apr 24 13:20:28 ip-172-31-29-215 sshd[2155302]: Received disconnect from 47.185.144.12 port 52794:11: disconnected by user [preauth] Apr 24 13:20:28 ip-172-31-29-215 sshd[2155302]: Disconnected from invalid user usuario 47.185.144.12 port 52794 [preauth] Apr 24 13:20:29 ip-172-31-29-215 sshd[2155304]: Invalid user test from 47.185.144.12 port 52798 Apr 24 13:20:29 ip-172-31-29-215 sshd[2155304]: error: maximum authentication attempts exceeded for invalid user test from 47.185.144.12 port 52798 ssh2 [preauth] Apr 24 13:20:29 ip-172-31-29-215 sshd[2155304]: Disconnecting invalid user test 47.185.144.12 port 52798: Too many authentication failures [preauth] Apr 24 13:20:29 ip-172-31-29-215 sshd[2155306]: Invalid user test from 47.185.144.12 port 52804 Apr 24 13:20:29 ip-172-31-29-215 sshd[2155306]: error: maximum authentication attempts exceeded for invalid user test from 47.185.144.12 port 52804 ssh2 [preauth] Apr 24 13:20:29 ip-172-31-29-215 sshd[2155306]: Disconnecting invalid user test 47.185.144.12 port 52804: Too many authentication failures [preauth] Apr 24 13:20:30 ip-172-31-29-215 sshd[2155308]: Invalid user test from 47.185.144.12 port 52812 Apr 24 13:20:30 ip-172-31-29-215 sshd[2155308]: Received disconnect from 47.185.144.12 port 52812:11: disconnected by user [preauth] Apr 24 13:20:30 ip-172-31-29-215 sshd[2155308]: Disconnected from invalid user test 47.185.144.12 port 52812 [preauth] Apr 24 13:20:31 ip-172-31-29-215 sshd[2155310]: Invalid user user from 47.185.144.12 port 52828 Apr 24 13:20:31 ip-172-31-29-215 sshd[2155310]: error: maximum authentication attempts exceeded for invalid user user from 47.185.144.12 port 52828 ssh2 [preauth] Apr 24 13:20:31 ip-172-31-29-215 sshd[2155310]: Disconnecting invalid user user 47.185.144.12 port 52828: Too many authentication failures [preauth] Apr 24 13:20:32 ip-172-31-29-215 sshd[2155312]: Invalid user user from 47.185.144.12 port 52832 Apr 24 13:20:32 ip-172-31-29-215 sshd[2155312]: error: maximum authentication attempts exceeded for invalid user user from 47.185.144.12 port 52832 ssh2 [preauth] Apr 24 13:20:32 ip-172-31-29-215 sshd[2155312]: Disconnecting invalid user user 47.185.144.12 port 52832: Too many authentication failures [preauth] Apr 24 13:20:32 ip-172-31-29-215 sshd[2155314]: Invalid user user from 47.185.144.12 port 52846 Apr 24 13:20:33 ip-172-31-29-215 sshd[2155314]: Received disconnect from 47.185.144.12 port 52846:11: disconnected by user [preauth] Apr 24 13:20:33 ip-172-31-29-215 sshd[2155314]: Disconnected from invalid user user 47.185.144.12 port 52846 [preauth] Apr 24 13:20:33 ip-172-31-29-215 sshd[2155316]: Invalid user ftpuser from 47.185.144.12 port 52850 Apr 24 13:20:33 ip-172-31-29-215 sshd[2155316]: error: maximum authentication attempts exceeded for invalid user ftpuser from 47.185.144.12 port 52850 ssh2 [preauth] Apr 24 13:20:33 ip-172-31-29-215 sshd[2155316]: Disconnecting invalid user ftpuser 47.185.144.12 port 52850: Too many authentication failures [preauth] Apr 24 13:20:34 ip-172-31-29-215 sshd[2155318]: Invalid user ftpuser from 47.185.144.12 port 52862 Apr 24 13:20:34 ip-172-31-29-215 sshd[2155318]: error: maximum authentication attempts exceeded for invalid user ftpuser from 47.185.144.12 port 52862 ssh2 [preauth] Apr 24 13:20:34 ip-172-31-29-215 sshd[2155318]: Disconnecting invalid user ftpuser 47.185.144.12 port 52862: Too many authentication failures [preauth] Apr 24 13:20:34 ip-172-31-29-215 sshd[2155320]: Invalid user ftpuser from 47.185.144.12 port 52864 Apr 24 13:20:34 ip-172-31-29-215 sshd[2155320]: Received disconnect from 47.185.144.12 port 52864:11: disconnected by user [preauth] Apr 24 13:20:34 ip-172-31-29-215 sshd[2155320]: Disconnected from invalid user ftpuser 47.185.144.12 port 52864 [preauth] Apr 24 13:20:35 ip-172-31-29-215 sshd[2155322]: Invalid user test1 from 47.185.144.12 port 52878 Apr 24 13:20:35 ip-172-31-29-215 sshd[2155322]: error: maximum authentication attempts exceeded for invalid user test1 from 47.185.144.12 port 52878 ssh2 [preauth] Apr 24 13:20:35 ip-172-31-29-215 sshd[2155322]: Disconnecting invalid user test1 47.185.144.12 port 52878: Too many authentication failures [preauth] Apr 24 13:20:35 ip-172-31-29-215 sshd[2155324]: Invalid user test1 from 47.185.144.12 port 52892 Apr 24 13:20:36 ip-172-31-29-215 sshd[2155324]: error: maximum authentication attempts exceeded for invalid user test1 from 47.185.144.12 port 52892 ssh2 [preauth] Apr 24 13:20:36 ip-172-31-29-215 sshd[2155324]: Disconnecting invalid user test1 47.185.144.12 port 52892: Too many authentication failures [preauth] Apr 24 13:20:36 ip-172-31-29-215 sshd[2155326]: Invalid user test1 from 47.185.144.12 port 52902 Apr 24 13:20:36 ip-172-31-29-215 sshd[2155326]: Received disconnect from 47.185.144.12 port 52902:11: disconnected by user [preauth] Apr 24 13:20:36 ip-172-31-29-215 sshd[2155326]: Disconnected from invalid user test1 47.185.144.12 port 52902 [preauth] Apr 24 13:20:36 ip-172-31-29-215 sshd[2155328]: Invalid user test2 from 47.185.144.12 port 52906 Apr 24 13:20:37 ip-172-31-29-215 sshd[2155328]: error: maximum authentication attempts exceeded for invalid user test2 from 47.185.144.12 port 52906 ssh2 [preauth] Apr 24 13:20:37 ip-172-31-29-215 sshd[2155328]: Disconnecting invalid user test2 47.185.144.12 port 52906: Too many authentication failures [preauth] Apr 24 13:20:37 ip-172-31-29-215 sshd[2155330]: Invalid user test2 from 47.185.144.12 port 52914 Apr 24 13:20:38 ip-172-31-29-215 sshd[2155330]: error: maximum authentication attempts exceeded for invalid user test2 from 47.185.144.12 port 52914 ssh2 [preauth] Apr 24 13:20:38 ip-172-31-29-215 sshd[2155330]: Disconnecting invalid user test2 47.185.144.12 port 52914: Too many authentication failures [preauth] Apr 24 13:20:39 ip-172-31-29-215 sshd[2155332]: Invalid user test2 from 47.185.144.12 port 52928 Apr 24 13:20:39 ip-172-31-29-215 sshd[2155332]: Received disconnect from 47.185.144.12 port 52928:11: disconnected by user [preauth] Apr 24 13:20:39 ip-172-31-29-215 sshd[2155332]: Disconnected from invalid user test2 47.185.144.12 port 52928 [preauth] Apr 24 13:20:39 ip-172-31-29-215 sshd[2155334]: error: maximum authentication attempts exceeded for ubuntu from 47.185.144.12 port 46328 ssh2 [preauth] Apr 24 13:20:39 ip-172-31-29-215 sshd[2155334]: Disconnecting authenticating user ubuntu 47.185.144.12 port 46328: Too many authentication failures [preauth] Apr 24 13:20:40 ip-172-31-29-215 sshd[2155336]: error: maximum authentication attempts exceeded for ubuntu from 47.185.144.12 port 46334 ssh2 [preauth] Apr 24 13:20:40 ip-172-31-29-215 sshd[2155336]: Disconnecting authenticating user ubuntu 47.185.144.12 port 46334: Too many authentication failures [preauth] Apr 24 13:20:41 ip-172-31-29-215 sshd[2155338]: Received disconnect from 47.185.144.12 port 46344:11: disconnected by user [preauth] Apr 24 13:20:41 ip-172-31-29-215 sshd[2155338]: Disconnected from authenticating user ubuntu 47.185.144.12 port 46344 [preauth] Apr 24 13:20:41 ip-172-31-29-215 sshd[2155340]: Invalid user pi from 47.185.144.12 port 46356 Apr 24 13:20:41 ip-172-31-29-215 sshd[2155340]: Received disconnect from 47.185.144.12 port 46356:11: disconnected by user [preauth] Apr 24 13:20:41 ip-172-31-29-215 sshd[2155340]: Disconnected from invalid user pi 47.185.144.12 port 46356 [preauth] Apr 24 13:20:42 ip-172-31-29-215 sshd[2155342]: Invalid user baikal from 47.185.144.12 port 46366 Apr 24 13:20:42 ip-172-31-29-215 sshd[2155342]: Received disconnect from 47.185.144.12 port 46366:11: disconnected by user [preauth] Apr 24 13:20:42 ip-172-31-29-215 sshd[2155342]: Disconnected from invalid user baikal 47.185.144.12 port 46366 [preauth] Apr 24 13:33:01 ip-172-31-29-215 sshd[2155413]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_3.22.251.217_22" Apr 24 13:33:10 ip-172-31-29-215 sshd[2155411]: Connection closed by 20.65.144.62 port 49876 [preauth] Apr 24 13:39:01 ip-172-31-29-215 CRON[2155416]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 13:39:01 ip-172-31-29-215 CRON[2155416]: pam_unix(cron:session): session closed for user root Apr 24 13:40:01 ip-172-31-29-215 CRON[2155473]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 13:40:01 ip-172-31-29-215 CRON[2155473]: pam_unix(cron:session): session closed for user smmsp Apr 24 13:43:50 ip-172-31-29-215 sshd[2155495]: Invalid user aptuslegal from 161.132.38.88 port 45368 Apr 24 13:43:51 ip-172-31-29-215 sshd[2155495]: Connection closed by invalid user aptuslegal 161.132.38.88 port 45368 [preauth] Apr 24 14:00:01 ip-172-31-29-215 CRON[2155622]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 14:00:02 ip-172-31-29-215 CRON[2155622]: pam_unix(cron:session): session closed for user smmsp Apr 24 14:09:01 ip-172-31-29-215 CRON[2155664]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 14:09:01 ip-172-31-29-215 CRON[2155664]: pam_unix(cron:session): session closed for user root Apr 24 14:17:01 ip-172-31-29-215 CRON[2155808]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 14:17:01 ip-172-31-29-215 CRON[2155808]: pam_unix(cron:session): session closed for user root Apr 24 14:20:01 ip-172-31-29-215 CRON[2155826]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 14:20:01 ip-172-31-29-215 CRON[2155826]: pam_unix(cron:session): session closed for user smmsp Apr 24 14:39:01 ip-172-31-29-215 CRON[2155946]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 14:39:01 ip-172-31-29-215 CRON[2155946]: pam_unix(cron:session): session closed for user root Apr 24 14:40:01 ip-172-31-29-215 CRON[2156003]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 14:40:01 ip-172-31-29-215 CRON[2156003]: pam_unix(cron:session): session closed for user smmsp Apr 24 15:00:01 ip-172-31-29-215 CRON[2156156]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 15:00:01 ip-172-31-29-215 CRON[2156156]: pam_unix(cron:session): session closed for user smmsp Apr 24 15:09:01 ip-172-31-29-215 CRON[2156344]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 15:09:01 ip-172-31-29-215 CRON[2156344]: pam_unix(cron:session): session closed for user root Apr 24 15:17:01 ip-172-31-29-215 CRON[2156402]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 15:17:01 ip-172-31-29-215 CRON[2156402]: pam_unix(cron:session): session closed for user root Apr 24 15:20:01 ip-172-31-29-215 CRON[2156417]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 15:20:01 ip-172-31-29-215 CRON[2156417]: pam_unix(cron:session): session closed for user smmsp Apr 24 15:22:41 ip-172-31-29-215 sshd[2156445]: Invalid user aptuslegal from 42.96.16.250 port 52316 Apr 24 15:22:41 ip-172-31-29-215 sshd[2156445]: Connection closed by invalid user aptuslegal 42.96.16.250 port 52316 [preauth] Apr 24 15:32:48 ip-172-31-29-215 sshd[2156460]: Invalid user aptuslegal from 172.94.9.127 port 33218 Apr 24 15:32:50 ip-172-31-29-215 sshd[2156460]: Connection closed by invalid user aptuslegal 172.94.9.127 port 33218 [preauth] Apr 24 15:39:01 ip-172-31-29-215 CRON[2156468]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 15:39:01 ip-172-31-29-215 CRON[2156468]: pam_unix(cron:session): session closed for user root Apr 24 15:40:01 ip-172-31-29-215 CRON[2156525]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 15:40:01 ip-172-31-29-215 CRON[2156525]: pam_unix(cron:session): session closed for user smmsp Apr 24 15:41:16 ip-172-31-29-215 sshd[2156547]: Invalid user aptuslegal from 72.167.34.120 port 58784 Apr 24 15:41:16 ip-172-31-29-215 sshd[2156547]: Connection closed by invalid user aptuslegal 72.167.34.120 port 58784 [preauth] Apr 24 15:42:01 ip-172-31-29-215 sshd[2156549]: error: kex_exchange_identification: Connection closed by remote host Apr 24 16:00:01 ip-172-31-29-215 CRON[2156572]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 16:00:01 ip-172-31-29-215 CRON[2156572]: pam_unix(cron:session): session closed for user smmsp Apr 24 16:09:01 ip-172-31-29-215 CRON[2156605]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 16:09:01 ip-172-31-29-215 CRON[2156605]: pam_unix(cron:session): session closed for user root Apr 24 16:17:01 ip-172-31-29-215 CRON[2156678]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 16:17:01 ip-172-31-29-215 CRON[2156678]: pam_unix(cron:session): session closed for user root Apr 24 16:20:01 ip-172-31-29-215 CRON[2156683]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 16:20:01 ip-172-31-29-215 CRON[2156683]: pam_unix(cron:session): session closed for user smmsp Apr 24 16:39:01 ip-172-31-29-215 CRON[2156712]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 16:39:01 ip-172-31-29-215 CRON[2156712]: pam_unix(cron:session): session closed for user root Apr 24 16:40:01 ip-172-31-29-215 CRON[2156769]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 16:40:01 ip-172-31-29-215 CRON[2156769]: pam_unix(cron:session): session closed for user smmsp Apr 24 16:54:01 ip-172-31-29-215 CRON[2156794]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 16:54:01 ip-172-31-29-215 CRON[2156794]: pam_unix(cron:session): session closed for user root Apr 24 17:00:01 ip-172-31-29-215 CRON[2156801]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 17:00:01 ip-172-31-29-215 CRON[2156801]: pam_unix(cron:session): session closed for user smmsp Apr 24 17:09:01 ip-172-31-29-215 CRON[2157050]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 17:09:01 ip-172-31-29-215 CRON[2157050]: pam_unix(cron:session): session closed for user root Apr 24 17:11:58 ip-172-31-29-215 sshd[2157108]: Connection closed by authenticating user root 192.210.243.165 port 40864 [preauth] Apr 24 17:17:01 ip-172-31-29-215 CRON[2157112]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 17:17:01 ip-172-31-29-215 CRON[2157112]: pam_unix(cron:session): session closed for user root Apr 24 17:20:01 ip-172-31-29-215 CRON[2157117]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 17:20:01 ip-172-31-29-215 CRON[2157117]: pam_unix(cron:session): session closed for user smmsp Apr 24 17:39:01 ip-172-31-29-215 CRON[2157148]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 17:39:01 ip-172-31-29-215 CRON[2157148]: pam_unix(cron:session): session closed for user root Apr 24 17:40:01 ip-172-31-29-215 CRON[2157206]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 17:40:01 ip-172-31-29-215 CRON[2157206]: pam_unix(cron:session): session closed for user smmsp Apr 24 17:57:17 ip-172-31-29-215 sshd[2157232]: error: kex_exchange_identification: Connection closed by remote host Apr 24 17:58:47 ip-172-31-29-215 sshd[2157235]: Connection closed by authenticating user root 34.138.135.178 port 49042 [preauth] Apr 24 18:00:01 ip-172-31-29-215 CRON[2157238]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 18:00:01 ip-172-31-29-215 CRON[2157238]: pam_unix(cron:session): session closed for user smmsp Apr 24 18:09:01 ip-172-31-29-215 CRON[2157276]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 18:09:01 ip-172-31-29-215 CRON[2157276]: pam_unix(cron:session): session closed for user root Apr 24 18:17:01 ip-172-31-29-215 CRON[2157334]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 18:17:01 ip-172-31-29-215 CRON[2157334]: pam_unix(cron:session): session closed for user root Apr 24 18:20:01 ip-172-31-29-215 CRON[2157340]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 18:20:01 ip-172-31-29-215 CRON[2157340]: pam_unix(cron:session): session closed for user smmsp Apr 24 18:39:01 ip-172-31-29-215 CRON[2157369]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 18:39:01 ip-172-31-29-215 CRON[2157369]: pam_unix(cron:session): session closed for user root Apr 24 18:40:01 ip-172-31-29-215 CRON[2157427]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 18:40:01 ip-172-31-29-215 CRON[2157427]: pam_unix(cron:session): session closed for user smmsp Apr 24 19:00:01 ip-172-31-29-215 CRON[2157474]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 19:00:01 ip-172-31-29-215 CRON[2157474]: pam_unix(cron:session): session closed for user smmsp Apr 24 19:09:01 ip-172-31-29-215 CRON[2157723]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:09:01 ip-172-31-29-215 CRON[2157723]: pam_unix(cron:session): session closed for user root Apr 24 19:17:01 ip-172-31-29-215 CRON[2157782]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:17:01 ip-172-31-29-215 CRON[2157782]: pam_unix(cron:session): session closed for user root Apr 24 19:20:01 ip-172-31-29-215 CRON[2157787]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 19:20:01 ip-172-31-29-215 CRON[2157787]: pam_unix(cron:session): session closed for user smmsp Apr 24 19:39:01 ip-172-31-29-215 CRON[2157816]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:39:01 ip-172-31-29-215 CRON[2157816]: pam_unix(cron:session): session closed for user root Apr 24 19:40:01 ip-172-31-29-215 CRON[2157873]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 19:40:01 ip-172-31-29-215 CRON[2157873]: pam_unix(cron:session): session closed for user smmsp Apr 24 20:00:01 ip-172-31-29-215 CRON[2157902]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 20:00:01 ip-172-31-29-215 CRON[2157902]: pam_unix(cron:session): session closed for user smmsp Apr 24 20:02:06 ip-172-31-29-215 sshd[2157925]: Connection closed by authenticating user root 103.90.227.178 port 59708 [preauth] Apr 24 20:09:01 ip-172-31-29-215 CRON[2157930]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 20:09:01 ip-172-31-29-215 CRON[2157930]: pam_unix(cron:session): session closed for user root Apr 24 20:17:01 ip-172-31-29-215 CRON[2157989]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 20:17:01 ip-172-31-29-215 CRON[2157989]: pam_unix(cron:session): session closed for user root Apr 24 20:20:01 ip-172-31-29-215 CRON[2157994]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 20:20:01 ip-172-31-29-215 CRON[2157994]: pam_unix(cron:session): session closed for user smmsp Apr 24 20:24:35 ip-172-31-29-215 sshd[2158018]: Connection closed by authenticating user root 72.167.34.120 port 44816 [preauth] Apr 24 20:39:01 ip-172-31-29-215 CRON[2158030]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 20:39:01 ip-172-31-29-215 CRON[2158030]: pam_unix(cron:session): session closed for user root Apr 24 20:40:01 ip-172-31-29-215 CRON[2158086]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 20:40:01 ip-172-31-29-215 CRON[2158086]: pam_unix(cron:session): session closed for user smmsp Apr 24 20:41:30 ip-172-31-29-215 sshd[2158116]: error: kex_exchange_identification: client sent invalid protocol identifier "" Apr 24 20:41:40 ip-172-31-29-215 sshd[2158117]: error: kex_exchange_identification: banner line contains invalid characters Apr 24 20:42:13 ip-172-31-29-215 sshd[2158118]: error: kex_exchange_identification: banner line contains invalid characters Apr 24 20:42:14 ip-172-31-29-215 sshd[2158119]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Apr 24 20:43:44 ip-172-31-29-215 sshd[2158120]: Connection closed by 18.116.101.220 port 54688 [preauth] Apr 24 21:00:01 ip-172-31-29-215 CRON[2158132]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 21:00:01 ip-172-31-29-215 CRON[2158132]: pam_unix(cron:session): session closed for user smmsp Apr 24 21:06:57 ip-172-31-29-215 sshd[2158380]: Invalid user aptuslegal from 36.212.132.184 port 56852 Apr 24 21:06:57 ip-172-31-29-215 sshd[2158380]: Connection closed by invalid user aptuslegal 36.212.132.184 port 56852 [preauth] Apr 24 21:09:01 ip-172-31-29-215 CRON[2158383]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 21:09:01 ip-172-31-29-215 CRON[2158383]: pam_unix(cron:session): session closed for user root Apr 24 21:17:01 ip-172-31-29-215 CRON[2158442]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 21:17:01 ip-172-31-29-215 CRON[2158442]: pam_unix(cron:session): session closed for user root Apr 24 21:20:01 ip-172-31-29-215 CRON[2158448]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 21:20:01 ip-172-31-29-215 CRON[2158448]: pam_unix(cron:session): session closed for user smmsp Apr 24 21:39:01 ip-172-31-29-215 CRON[2158480]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 21:39:01 ip-172-31-29-215 CRON[2158480]: pam_unix(cron:session): session closed for user root Apr 24 21:40:01 ip-172-31-29-215 CRON[2158536]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 21:40:02 ip-172-31-29-215 CRON[2158536]: pam_unix(cron:session): session closed for user smmsp Apr 24 21:51:34 ip-172-31-29-215 sshd[2158564]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 24 21:55:24 ip-172-31-29-215 sshd[2158567]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 24 22:00:01 ip-172-31-29-215 CRON[2158572]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 22:00:01 ip-172-31-29-215 CRON[2158572]: pam_unix(cron:session): session closed for user smmsp Apr 24 22:09:01 ip-172-31-29-215 CRON[2158598]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 22:09:01 ip-172-31-29-215 CRON[2158598]: pam_unix(cron:session): session closed for user root Apr 24 22:11:18 ip-172-31-29-215 sshd[2158656]: Invalid user aptuslegal from 66.116.199.61 port 33122 Apr 24 22:11:18 ip-172-31-29-215 sshd[2158656]: Connection closed by invalid user aptuslegal 66.116.199.61 port 33122 [preauth] Apr 24 22:17:01 ip-172-31-29-215 CRON[2158659]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 22:17:01 ip-172-31-29-215 CRON[2158659]: pam_unix(cron:session): session closed for user root Apr 24 22:20:01 ip-172-31-29-215 CRON[2158665]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 22:20:01 ip-172-31-29-215 CRON[2158665]: pam_unix(cron:session): session closed for user smmsp Apr 24 22:20:46 ip-172-31-29-215 sshd[2158687]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 24 22:24:32 ip-172-31-29-215 sshd[2158691]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 24 22:33:40 ip-172-31-29-215 sshd[2158701]: error: kex_exchange_identification: Connection closed by remote host Apr 24 22:39:01 ip-172-31-29-215 CRON[2158704]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 22:39:01 ip-172-31-29-215 CRON[2158704]: pam_unix(cron:session): session closed for user root Apr 24 22:40:01 ip-172-31-29-215 CRON[2158760]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 22:40:01 ip-172-31-29-215 CRON[2158760]: pam_unix(cron:session): session closed for user smmsp Apr 24 22:48:52 ip-172-31-29-215 sshd[2158785]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 24 22:53:38 ip-172-31-29-215 sshd[2158788]: Invalid user aptuslegal from 68.178.169.200 port 45734 Apr 24 22:53:42 ip-172-31-29-215 sshd[2158788]: Connection closed by invalid user aptuslegal 68.178.169.200 port 45734 [preauth] Apr 24 22:55:20 ip-172-31-29-215 sshd[2158792]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 24 23:00:01 ip-172-31-29-215 CRON[2158796]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 23:00:01 ip-172-31-29-215 CRON[2158796]: pam_unix(cron:session): session closed for user smmsp Apr 24 23:00:59 ip-172-31-29-215 sshd[2158820]: Connection closed by authenticating user root 161.132.38.88 port 38094 [preauth] Apr 24 23:09:01 ip-172-31-29-215 CRON[2159048]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 23:09:01 ip-172-31-29-215 CRON[2159048]: pam_unix(cron:session): session closed for user root Apr 24 23:15:31 ip-172-31-29-215 sshd[2159106]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 24 23:17:01 ip-172-31-29-215 CRON[2159114]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 23:17:01 ip-172-31-29-215 CRON[2159114]: pam_unix(cron:session): session closed for user root Apr 24 23:20:01 ip-172-31-29-215 CRON[2159119]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 23:20:01 ip-172-31-29-215 CRON[2159119]: pam_unix(cron:session): session closed for user smmsp Apr 24 23:26:42 ip-172-31-29-215 sshd[2159145]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 24 23:39:01 ip-172-31-29-215 CRON[2159154]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 23:39:01 ip-172-31-29-215 CRON[2159154]: pam_unix(cron:session): session closed for user root Apr 24 23:40:01 ip-172-31-29-215 CRON[2159211]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 24 23:40:01 ip-172-31-29-215 CRON[2159211]: pam_unix(cron:session): session closed for user smmsp Apr 24 23:43:05 ip-172-31-29-215 sshd[2159234]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 25 00:00:01 ip-172-31-29-215 CRON[2159290]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 00:00:01 ip-172-31-29-215 CRON[2159291]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 00:00:01 ip-172-31-29-215 CRON[2159290]: pam_unix(cron:session): session closed for user root Apr 25 00:00:01 ip-172-31-29-215 CRON[2159291]: pam_unix(cron:session): session closed for user smmsp Apr 25 00:00:06 ip-172-31-29-215 sshd[2159314]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 25 00:09:01 ip-172-31-29-215 CRON[2159330]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 00:09:01 ip-172-31-29-215 CRON[2159330]: pam_unix(cron:session): session closed for user root Apr 25 00:11:13 ip-172-31-29-215 sshd[2159384]: Connection closed by authenticating user root 68.220.58.2 port 35856 [preauth] Apr 25 00:17:01 ip-172-31-29-215 CRON[2159388]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 00:17:01 ip-172-31-29-215 CRON[2159388]: pam_unix(cron:session): session closed for user root Apr 25 00:20:01 ip-172-31-29-215 CRON[2159397]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 00:20:01 ip-172-31-29-215 CRON[2159397]: pam_unix(cron:session): session closed for user smmsp Apr 25 00:34:00 ip-172-31-29-215 sshd[2159473]: Connection closed by authenticating user root 68.220.63.2 port 44032 [preauth] Apr 25 00:39:01 ip-172-31-29-215 CRON[2159478]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 00:39:01 ip-172-31-29-215 CRON[2159478]: pam_unix(cron:session): session closed for user root Apr 25 00:40:01 ip-172-31-29-215 CRON[2159531]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 00:40:01 ip-172-31-29-215 CRON[2159531]: pam_unix(cron:session): session closed for user smmsp Apr 25 01:00:01 ip-172-31-29-215 CRON[2160318]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 01:00:01 ip-172-31-29-215 CRON[2160318]: pam_unix(cron:session): session closed for user smmsp Apr 25 01:09:01 ip-172-31-29-215 CRON[2160567]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 01:09:01 ip-172-31-29-215 CRON[2160567]: pam_unix(cron:session): session closed for user root Apr 25 01:17:01 ip-172-31-29-215 CRON[2160625]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 01:17:01 ip-172-31-29-215 CRON[2160625]: pam_unix(cron:session): session closed for user root Apr 25 01:20:01 ip-172-31-29-215 CRON[2160630]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 01:20:01 ip-172-31-29-215 CRON[2160630]: pam_unix(cron:session): session closed for user smmsp Apr 25 01:39:01 ip-172-31-29-215 CRON[2160660]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 01:39:01 ip-172-31-29-215 CRON[2160660]: pam_unix(cron:session): session closed for user root Apr 25 01:40:01 ip-172-31-29-215 CRON[2160715]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 01:40:01 ip-172-31-29-215 CRON[2160715]: pam_unix(cron:session): session closed for user smmsp Apr 25 01:49:55 ip-172-31-29-215 sshd[2160743]: error: kex_exchange_identification: Connection closed by remote host Apr 25 02:00:01 ip-172-31-29-215 CRON[2160752]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 02:00:01 ip-172-31-29-215 CRON[2160752]: pam_unix(cron:session): session closed for user smmsp Apr 25 02:09:01 ip-172-31-29-215 CRON[2160778]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:09:01 ip-172-31-29-215 CRON[2160778]: pam_unix(cron:session): session closed for user root Apr 25 02:15:43 ip-172-31-29-215 sshd[2160838]: Invalid user aptuslegal from 103.106.104.187 port 35562 Apr 25 02:15:45 ip-172-31-29-215 sshd[2160838]: Connection closed by invalid user aptuslegal 103.106.104.187 port 35562 [preauth] Apr 25 02:17:01 ip-172-31-29-215 CRON[2160840]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:17:01 ip-172-31-29-215 CRON[2160840]: pam_unix(cron:session): session closed for user root Apr 25 02:20:01 ip-172-31-29-215 CRON[2160846]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 02:20:01 ip-172-31-29-215 CRON[2160846]: pam_unix(cron:session): session closed for user smmsp Apr 25 02:28:44 ip-172-31-29-215 sshd[2160871]: Invalid user aptuslegal from 34.138.135.178 port 55004 Apr 25 02:28:47 ip-172-31-29-215 sshd[2160871]: Connection closed by invalid user aptuslegal 34.138.135.178 port 55004 [preauth] Apr 25 02:39:01 ip-172-31-29-215 CRON[2160878]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:39:01 ip-172-31-29-215 CRON[2160878]: pam_unix(cron:session): session closed for user root Apr 25 02:40:01 ip-172-31-29-215 CRON[2160933]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 02:40:01 ip-172-31-29-215 CRON[2160933]: pam_unix(cron:session): session closed for user smmsp Apr 25 03:00:01 ip-172-31-29-215 CRON[2160963]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 03:00:01 ip-172-31-29-215 CRON[2160963]: pam_unix(cron:session): session closed for user smmsp Apr 25 03:09:01 ip-172-31-29-215 CRON[2161216]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 03:09:01 ip-172-31-29-215 CRON[2161216]: pam_unix(cron:session): session closed for user root Apr 25 03:10:01 ip-172-31-29-215 CRON[2161270]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 03:10:01 ip-172-31-29-215 CRON[2161270]: pam_unix(cron:session): session closed for user root Apr 25 03:17:01 ip-172-31-29-215 CRON[2161274]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 03:17:01 ip-172-31-29-215 CRON[2161274]: pam_unix(cron:session): session closed for user root Apr 25 03:20:01 ip-172-31-29-215 CRON[2161279]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 03:20:01 ip-172-31-29-215 CRON[2161279]: pam_unix(cron:session): session closed for user smmsp Apr 25 03:20:52 ip-172-31-29-215 sshd[2161302]: Connection closed by authenticating user root 128.201.125.122 port 7773 [preauth] Apr 25 03:39:01 ip-172-31-29-215 CRON[2161314]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 03:39:01 ip-172-31-29-215 CRON[2161314]: pam_unix(cron:session): session closed for user root Apr 25 03:40:01 ip-172-31-29-215 CRON[2161369]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 03:40:01 ip-172-31-29-215 CRON[2161369]: pam_unix(cron:session): session closed for user smmsp Apr 25 04:00:01 ip-172-31-29-215 CRON[2161400]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 04:00:01 ip-172-31-29-215 CRON[2161400]: pam_unix(cron:session): session closed for user smmsp Apr 25 04:09:01 ip-172-31-29-215 CRON[2161432]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 04:09:01 ip-172-31-29-215 CRON[2161432]: pam_unix(cron:session): session closed for user root Apr 25 04:17:01 ip-172-31-29-215 CRON[2161488]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 04:17:01 ip-172-31-29-215 CRON[2161488]: pam_unix(cron:session): session closed for user root Apr 25 04:20:01 ip-172-31-29-215 CRON[2161493]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 04:20:01 ip-172-31-29-215 CRON[2161493]: pam_unix(cron:session): session closed for user smmsp Apr 25 04:39:01 ip-172-31-29-215 CRON[2161522]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 04:39:01 ip-172-31-29-215 CRON[2161522]: pam_unix(cron:session): session closed for user root Apr 25 04:40:01 ip-172-31-29-215 CRON[2161577]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 04:40:01 ip-172-31-29-215 CRON[2161577]: pam_unix(cron:session): session closed for user smmsp Apr 25 05:00:01 ip-172-31-29-215 CRON[2161609]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 05:00:01 ip-172-31-29-215 CRON[2161609]: pam_unix(cron:session): session closed for user smmsp Apr 25 05:09:01 ip-172-31-29-215 CRON[2161857]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 05:09:01 ip-172-31-29-215 CRON[2161857]: pam_unix(cron:session): session closed for user root Apr 25 05:17:01 ip-172-31-29-215 CRON[2161914]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 05:17:01 ip-172-31-29-215 CRON[2161914]: pam_unix(cron:session): session closed for user root Apr 25 05:20:01 ip-172-31-29-215 CRON[2161919]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 05:20:02 ip-172-31-29-215 CRON[2161919]: pam_unix(cron:session): session closed for user smmsp Apr 25 05:39:01 ip-172-31-29-215 CRON[2161952]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 05:39:01 ip-172-31-29-215 CRON[2161952]: pam_unix(cron:session): session closed for user root Apr 25 05:40:01 ip-172-31-29-215 CRON[2162007]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 05:40:01 ip-172-31-29-215 CRON[2162007]: pam_unix(cron:session): session closed for user smmsp Apr 25 05:43:06 ip-172-31-29-215 sshd[2162029]: error: kex_exchange_identification: Connection closed by remote host Apr 25 06:00:01 ip-172-31-29-215 CRON[2162041]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 06:00:01 ip-172-31-29-215 CRON[2162041]: pam_unix(cron:session): session closed for user smmsp Apr 25 06:07:27 ip-172-31-29-215 sshd[2162065]: Invalid user aptuslegal from 72.167.34.120 port 47840 Apr 25 06:07:27 ip-172-31-29-215 sshd[2162065]: Connection closed by invalid user aptuslegal 72.167.34.120 port 47840 [preauth] Apr 25 06:09:01 ip-172-31-29-215 CRON[2162068]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 06:09:01 ip-172-31-29-215 CRON[2162068]: pam_unix(cron:session): session closed for user root Apr 25 06:09:52 ip-172-31-29-215 sshd[2162124]: Connection closed by 54.226.186.42 port 37466 [preauth] Apr 25 06:17:01 ip-172-31-29-215 CRON[2162130]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 06:17:01 ip-172-31-29-215 CRON[2162130]: pam_unix(cron:session): session closed for user root Apr 25 06:20:01 ip-172-31-29-215 CRON[2162135]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 06:20:01 ip-172-31-29-215 CRON[2162135]: pam_unix(cron:session): session closed for user smmsp Apr 25 06:25:01 ip-172-31-29-215 CRON[2162158]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 06:25:01 ip-172-31-29-215 CRON[2162158]: pam_unix(cron:session): session closed for user root Apr 25 06:39:01 ip-172-31-29-215 CRON[2162332]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 06:39:01 ip-172-31-29-215 CRON[2162332]: pam_unix(cron:session): session closed for user root Apr 25 06:40:01 ip-172-31-29-215 CRON[2162388]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 06:40:01 ip-172-31-29-215 CRON[2162388]: pam_unix(cron:session): session closed for user smmsp Apr 25 07:00:01 ip-172-31-29-215 CRON[2162421]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 07:00:01 ip-172-31-29-215 CRON[2162421]: pam_unix(cron:session): session closed for user smmsp Apr 25 07:09:01 ip-172-31-29-215 CRON[2162556]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 07:09:01 ip-172-31-29-215 CRON[2162556]: pam_unix(cron:session): session closed for user root Apr 25 07:17:01 ip-172-31-29-215 CRON[2162728]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 07:17:01 ip-172-31-29-215 CRON[2162728]: pam_unix(cron:session): session closed for user root Apr 25 07:20:01 ip-172-31-29-215 CRON[2162733]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 07:20:01 ip-172-31-29-215 CRON[2162733]: pam_unix(cron:session): session closed for user smmsp Apr 25 07:39:01 ip-172-31-29-215 CRON[2162782]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 07:39:01 ip-172-31-29-215 CRON[2162782]: pam_unix(cron:session): session closed for user root Apr 25 07:40:01 ip-172-31-29-215 CRON[2162837]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 07:40:01 ip-172-31-29-215 CRON[2162837]: pam_unix(cron:session): session closed for user smmsp Apr 25 08:00:01 ip-172-31-29-215 CRON[2162870]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 08:00:01 ip-172-31-29-215 CRON[2162870]: pam_unix(cron:session): session closed for user smmsp Apr 25 08:09:01 ip-172-31-29-215 CRON[2162896]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 08:09:01 ip-172-31-29-215 CRON[2162896]: pam_unix(cron:session): session closed for user root Apr 25 08:16:32 ip-172-31-29-215 sshd[2162952]: Connection closed by authenticating user root 45.127.5.158 port 56538 [preauth] Apr 25 08:17:01 ip-172-31-29-215 CRON[2162954]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 08:17:01 ip-172-31-29-215 CRON[2162954]: pam_unix(cron:session): session closed for user root Apr 25 08:20:01 ip-172-31-29-215 CRON[2162960]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 08:20:01 ip-172-31-29-215 CRON[2162960]: pam_unix(cron:session): session closed for user smmsp Apr 25 08:39:01 ip-172-31-29-215 CRON[2162989]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 08:39:01 ip-172-31-29-215 CRON[2162989]: pam_unix(cron:session): session closed for user root Apr 25 08:40:01 ip-172-31-29-215 CRON[2163045]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 08:40:01 ip-172-31-29-215 CRON[2163045]: pam_unix(cron:session): session closed for user smmsp Apr 25 09:00:01 ip-172-31-29-215 CRON[2163076]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 09:00:01 ip-172-31-29-215 CRON[2163076]: pam_unix(cron:session): session closed for user smmsp Apr 25 09:05:24 ip-172-31-29-215 sshd[2163101]: Invalid user aptuslegal from 103.90.227.178 port 46784 Apr 25 09:05:26 ip-172-31-29-215 sshd[2163101]: Connection closed by invalid user aptuslegal 103.90.227.178 port 46784 [preauth] Apr 25 09:09:01 ip-172-31-29-215 CRON[2163104]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 09:09:01 ip-172-31-29-215 CRON[2163104]: pam_unix(cron:session): session closed for user root Apr 25 09:17:01 ip-172-31-29-215 CRON[2163384]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 09:17:01 ip-172-31-29-215 CRON[2163384]: pam_unix(cron:session): session closed for user root Apr 25 09:20:01 ip-172-31-29-215 CRON[2163389]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 09:20:01 ip-172-31-29-215 CRON[2163389]: pam_unix(cron:session): session closed for user smmsp Apr 25 09:27:59 ip-172-31-29-215 sshd[2163414]: error: kex_exchange_identification: Connection closed by remote host Apr 25 09:27:59 ip-172-31-29-215 sshd[2163416]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_3.22.251.217_22" Apr 25 09:37:59 ip-172-31-29-215 sshd[2163422]: error: kex_exchange_identification: Connection closed by remote host Apr 25 09:39:01 ip-172-31-29-215 CRON[2163423]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 09:39:01 ip-172-31-29-215 CRON[2163423]: pam_unix(cron:session): session closed for user root Apr 25 09:40:01 ip-172-31-29-215 CRON[2163478]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 09:40:01 ip-172-31-29-215 CRON[2163478]: pam_unix(cron:session): session closed for user smmsp Apr 25 09:55:20 ip-172-31-29-215 sshd[2163507]: Accepted publickey for ubuntu from 38.145.197.8 port 53820 ssh2: RSA SHA256:Zqk1VR7n9VKAJSML2oy4Swt5sm7d+ABJKnVgCDEu32k Apr 25 09:55:20 ip-172-31-29-215 sshd[2163507]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Apr 25 09:55:20 ip-172-31-29-215 systemd-logind[500]: New session 83762 of user ubuntu. Apr 25 09:55:20 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Apr 25 09:55:45 ip-172-31-29-215 dbus-daemon[475]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 09:57:17 ip-172-31-29-215 sshd[2163622]: Received disconnect from 38.145.197.8 port 53820:11: Normal Shutdown Apr 25 09:57:17 ip-172-31-29-215 sshd[2163622]: Disconnected from user ubuntu 38.145.197.8 port 53820 Apr 25 09:57:17 ip-172-31-29-215 sshd[2163507]: pam_unix(sshd:session): session closed for user ubuntu Apr 25 09:57:17 ip-172-31-29-215 systemd-logind[500]: Session 83762 logged out. Waiting for processes to exit. Apr 25 09:57:17 ip-172-31-29-215 systemd-logind[500]: Removed session 83762. Apr 25 09:57:32 ip-172-31-29-215 sshd[2163655]: Accepted publickey for ubuntu from 38.145.197.8 port 53826 ssh2: RSA SHA256:Zqk1VR7n9VKAJSML2oy4Swt5sm7d+ABJKnVgCDEu32k Apr 25 09:57:32 ip-172-31-29-215 sshd[2163655]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Apr 25 09:57:32 ip-172-31-29-215 systemd-logind[500]: New session 83764 of user ubuntu. Apr 25 09:57:32 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Apr 25 09:57:47 ip-172-31-29-215 sshd[2163654]: Invalid user aptuslegal from 68.178.169.200 port 33426 Apr 25 09:57:49 ip-172-31-29-215 sshd[2163654]: Connection closed by invalid user aptuslegal 68.178.169.200 port 33426 [preauth] Apr 25 09:57:57 ip-172-31-29-215 dbus-daemon[475]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 10:00:01 ip-172-31-29-215 CRON[2163773]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 10:00:01 ip-172-31-29-215 CRON[2163773]: pam_unix(cron:session): session closed for user smmsp Apr 25 10:09:01 ip-172-31-29-215 CRON[2163800]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 10:09:01 ip-172-31-29-215 CRON[2163800]: pam_unix(cron:session): session closed for user root Apr 25 10:17:01 ip-172-31-29-215 CRON[2163862]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 10:17:01 ip-172-31-29-215 CRON[2163862]: pam_unix(cron:session): session closed for user root Apr 25 10:20:01 ip-172-31-29-215 CRON[2163867]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 10:20:01 ip-172-31-29-215 CRON[2163867]: pam_unix(cron:session): session closed for user smmsp Apr 25 10:20:45 ip-172-31-29-215 sshd[2163742]: Received disconnect from 38.145.197.8 port 53826:11: Normal Shutdown Apr 25 10:20:45 ip-172-31-29-215 sshd[2163742]: Disconnected from user ubuntu 38.145.197.8 port 53826 Apr 25 10:20:45 ip-172-31-29-215 sshd[2163655]: pam_unix(sshd:session): session closed for user ubuntu Apr 25 10:20:45 ip-172-31-29-215 systemd-logind[500]: Session 83764 logged out. Waiting for processes to exit. Apr 25 10:20:45 ip-172-31-29-215 systemd-logind[500]: Removed session 83764. Apr 25 10:31:00 ip-172-31-29-215 sshd[2163899]: Connection closed by authenticating user root 34.138.135.178 port 46846 [preauth] Apr 25 10:39:01 ip-172-31-29-215 CRON[2163907]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 10:39:01 ip-172-31-29-215 CRON[2163907]: pam_unix(cron:session): session closed for user root Apr 25 10:40:01 ip-172-31-29-215 CRON[2163965]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 10:40:01 ip-172-31-29-215 CRON[2163965]: pam_unix(cron:session): session closed for user smmsp Apr 25 11:00:01 ip-172-31-29-215 CRON[2163995]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 11:00:01 ip-172-31-29-215 CRON[2163995]: pam_unix(cron:session): session closed for user smmsp Apr 25 11:09:01 ip-172-31-29-215 CRON[2164020]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 11:09:02 ip-172-31-29-215 CRON[2164020]: pam_unix(cron:session): session closed for user root Apr 25 11:17:02 ip-172-31-29-215 CRON[2164302]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 11:17:02 ip-172-31-29-215 CRON[2164302]: pam_unix(cron:session): session closed for user root Apr 25 11:19:43 ip-172-31-29-215 sshd[2164308]: Connection closed by authenticating user root 36.212.132.184 port 36450 [preauth] Apr 25 11:20:01 ip-172-31-29-215 CRON[2164310]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 11:20:01 ip-172-31-29-215 CRON[2164310]: pam_unix(cron:session): session closed for user smmsp Apr 25 11:37:53 ip-172-31-29-215 sshd[2164341]: error: kex_exchange_identification: Connection closed by remote host Apr 25 11:38:00 ip-172-31-29-215 sshd[2164342]: Connection closed by authenticating user root 183.56.198.150 port 60500 [preauth] Apr 25 11:39:01 ip-172-31-29-215 CRON[2164345]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 11:39:01 ip-172-31-29-215 CRON[2164345]: pam_unix(cron:session): session closed for user root Apr 25 11:40:01 ip-172-31-29-215 CRON[2164403]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 11:40:01 ip-172-31-29-215 CRON[2164403]: pam_unix(cron:session): session closed for user smmsp Apr 25 12:00:01 ip-172-31-29-215 CRON[2164437]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 12:00:01 ip-172-31-29-215 CRON[2164438]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 12:00:01 ip-172-31-29-215 CRON[2164437]: pam_unix(cron:session): session closed for user root Apr 25 12:00:01 ip-172-31-29-215 CRON[2164438]: pam_unix(cron:session): session closed for user smmsp Apr 25 12:09:01 ip-172-31-29-215 CRON[2164465]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 12:09:01 ip-172-31-29-215 CRON[2164465]: pam_unix(cron:session): session closed for user root Apr 25 12:17:01 ip-172-31-29-215 CRON[2164523]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 12:17:01 ip-172-31-29-215 CRON[2164523]: pam_unix(cron:session): session closed for user root Apr 25 12:20:01 ip-172-31-29-215 CRON[2164529]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 12:20:01 ip-172-31-29-215 CRON[2164529]: pam_unix(cron:session): session closed for user smmsp Apr 25 12:27:44 ip-172-31-29-215 sshd[2164556]: error: kex_exchange_identification: Connection closed by remote host Apr 25 12:39:01 ip-172-31-29-215 CRON[2164562]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 12:39:01 ip-172-31-29-215 CRON[2164562]: pam_unix(cron:session): session closed for user root Apr 25 12:40:01 ip-172-31-29-215 CRON[2164619]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 12:40:01 ip-172-31-29-215 CRON[2164619]: pam_unix(cron:session): session closed for user smmsp Apr 25 12:43:22 ip-172-31-29-215 sshd[2164642]: error: kex_exchange_identification: Connection closed by remote host Apr 25 12:47:10 ip-172-31-29-215 sshd[2164645]: Invalid user ethereum from 164.90.193.9 port 48712 Apr 25 12:47:10 ip-172-31-29-215 sshd[2164645]: Connection closed by invalid user ethereum 164.90.193.9 port 48712 [preauth] Apr 25 12:49:39 ip-172-31-29-215 sshd[2164649]: Invalid user cardano from 164.90.193.9 port 45742 Apr 25 12:49:39 ip-172-31-29-215 sshd[2164649]: Connection closed by invalid user cardano 164.90.193.9 port 45742 [preauth] Apr 25 12:52:12 ip-172-31-29-215 sshd[2164652]: Invalid user polkadot from 164.90.193.9 port 40438 Apr 25 12:52:12 ip-172-31-29-215 sshd[2164652]: Connection closed by invalid user polkadot 164.90.193.9 port 40438 [preauth] Apr 25 13:00:01 ip-172-31-29-215 CRON[2164658]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 13:00:01 ip-172-31-29-215 CRON[2164658]: pam_unix(cron:session): session closed for user smmsp Apr 25 13:09:01 ip-172-31-29-215 CRON[2164684]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 13:09:01 ip-172-31-29-215 CRON[2164684]: pam_unix(cron:session): session closed for user root Apr 25 13:17:01 ip-172-31-29-215 CRON[2164968]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 13:17:01 ip-172-31-29-215 CRON[2164968]: pam_unix(cron:session): session closed for user root Apr 25 13:18:09 ip-172-31-29-215 sshd[2164972]: error: kex_exchange_identification: Connection closed by remote host Apr 25 13:20:01 ip-172-31-29-215 CRON[2164983]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 13:20:01 ip-172-31-29-215 CRON[2164983]: pam_unix(cron:session): session closed for user smmsp Apr 25 13:21:46 ip-172-31-29-215 sshd[2165051]: Connection closed by authenticating user root 142.93.106.134 port 39774 [preauth] Apr 25 13:24:12 ip-172-31-29-215 sshd[2165057]: Invalid user oracle from 142.93.106.134 port 40434 Apr 25 13:24:12 ip-172-31-29-215 sshd[2165057]: Connection closed by invalid user oracle 142.93.106.134 port 40434 [preauth] Apr 25 13:39:01 ip-172-31-29-215 CRON[2165065]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 13:39:01 ip-172-31-29-215 CRON[2165065]: pam_unix(cron:session): session closed for user root Apr 25 13:40:01 ip-172-31-29-215 CRON[2165123]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 13:40:01 ip-172-31-29-215 CRON[2165123]: pam_unix(cron:session): session closed for user smmsp Apr 25 14:00:01 ip-172-31-29-215 CRON[2165154]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 14:00:01 ip-172-31-29-215 CRON[2165154]: pam_unix(cron:session): session closed for user smmsp Apr 25 14:09:01 ip-172-31-29-215 CRON[2165190]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 14:09:01 ip-172-31-29-215 CRON[2165190]: pam_unix(cron:session): session closed for user root Apr 25 14:17:01 ip-172-31-29-215 CRON[2165249]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 14:17:01 ip-172-31-29-215 CRON[2165249]: pam_unix(cron:session): session closed for user root Apr 25 14:20:01 ip-172-31-29-215 CRON[2165258]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 14:20:01 ip-172-31-29-215 CRON[2165258]: pam_unix(cron:session): session closed for user smmsp Apr 25 14:39:01 ip-172-31-29-215 CRON[2165328]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 14:39:01 ip-172-31-29-215 CRON[2165328]: pam_unix(cron:session): session closed for user root Apr 25 14:40:01 ip-172-31-29-215 CRON[2165385]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 14:40:01 ip-172-31-29-215 CRON[2165385]: pam_unix(cron:session): session closed for user smmsp Apr 25 14:42:15 ip-172-31-29-215 sshd[2165407]: error: kex_exchange_identification: Connection closed by remote host Apr 25 15:00:01 ip-172-31-29-215 CRON[2165422]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 15:00:01 ip-172-31-29-215 CRON[2165422]: pam_unix(cron:session): session closed for user smmsp Apr 25 15:09:01 ip-172-31-29-215 CRON[2165451]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 15:09:01 ip-172-31-29-215 CRON[2165451]: pam_unix(cron:session): session closed for user root Apr 25 15:17:01 ip-172-31-29-215 CRON[2165736]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 15:17:01 ip-172-31-29-215 CRON[2165736]: pam_unix(cron:session): session closed for user root Apr 25 15:20:01 ip-172-31-29-215 CRON[2165742]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 15:20:01 ip-172-31-29-215 CRON[2165742]: pam_unix(cron:session): session closed for user smmsp Apr 25 15:37:41 ip-172-31-29-215 sshd[2165769]: Connection closed by authenticating user root 172.94.9.127 port 49422 [preauth] Apr 25 15:39:01 ip-172-31-29-215 CRON[2165773]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 15:39:01 ip-172-31-29-215 CRON[2165773]: pam_unix(cron:session): session closed for user root Apr 25 15:40:01 ip-172-31-29-215 CRON[2165829]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 15:40:01 ip-172-31-29-215 CRON[2165829]: pam_unix(cron:session): session closed for user smmsp Apr 25 16:00:01 ip-172-31-29-215 CRON[2165857]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 16:00:01 ip-172-31-29-215 CRON[2165857]: pam_unix(cron:session): session closed for user smmsp Apr 25 16:09:01 ip-172-31-29-215 CRON[2165883]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 16:09:01 ip-172-31-29-215 CRON[2165883]: pam_unix(cron:session): session closed for user root Apr 25 16:17:01 ip-172-31-29-215 CRON[2165944]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 16:17:01 ip-172-31-29-215 CRON[2165944]: pam_unix(cron:session): session closed for user root Apr 25 16:20:01 ip-172-31-29-215 CRON[2165949]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 16:20:01 ip-172-31-29-215 CRON[2165949]: pam_unix(cron:session): session closed for user smmsp Apr 25 16:39:01 ip-172-31-29-215 CRON[2165983]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 16:39:01 ip-172-31-29-215 CRON[2165983]: pam_unix(cron:session): session closed for user root Apr 25 16:40:01 ip-172-31-29-215 CRON[2166040]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 16:40:01 ip-172-31-29-215 CRON[2166040]: pam_unix(cron:session): session closed for user smmsp Apr 25 16:52:06 ip-172-31-29-215 sshd[2166066]: Connection closed by authenticating user root 64.227.150.168 port 34638 [preauth] Apr 25 16:54:01 ip-172-31-29-215 CRON[2166084]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 16:54:01 ip-172-31-29-215 CRON[2166084]: pam_unix(cron:session): session closed for user root Apr 25 17:00:01 ip-172-31-29-215 CRON[2166091]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 17:00:01 ip-172-31-29-215 CRON[2166091]: pam_unix(cron:session): session closed for user smmsp Apr 25 17:09:01 ip-172-31-29-215 CRON[2166120]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 17:09:01 ip-172-31-29-215 CRON[2166120]: pam_unix(cron:session): session closed for user root Apr 25 17:17:01 ip-172-31-29-215 CRON[2166401]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 17:17:01 ip-172-31-29-215 CRON[2166401]: pam_unix(cron:session): session closed for user root Apr 25 17:20:01 ip-172-31-29-215 CRON[2166406]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 17:20:01 ip-172-31-29-215 CRON[2166406]: pam_unix(cron:session): session closed for user smmsp Apr 25 17:27:09 ip-172-31-29-215 sshd[2166431]: error: kex_exchange_identification: Connection closed by remote host Apr 25 17:39:01 ip-172-31-29-215 CRON[2166439]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 17:39:01 ip-172-31-29-215 CRON[2166439]: pam_unix(cron:session): session closed for user root Apr 25 17:40:01 ip-172-31-29-215 CRON[2166496]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 17:40:01 ip-172-31-29-215 CRON[2166496]: pam_unix(cron:session): session closed for user smmsp Apr 25 17:56:45 ip-172-31-29-215 sshd[2166559]: Invalid user aptuslegal from 161.132.38.88 port 54906 Apr 25 17:56:48 ip-172-31-29-215 sshd[2166559]: Connection closed by invalid user aptuslegal 161.132.38.88 port 54906 [preauth] Apr 25 18:00:01 ip-172-31-29-215 CRON[2166563]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 18:00:01 ip-172-31-29-215 CRON[2166563]: pam_unix(cron:session): session closed for user smmsp Apr 25 18:09:01 ip-172-31-29-215 CRON[2166592]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 18:09:01 ip-172-31-29-215 CRON[2166592]: pam_unix(cron:session): session closed for user root Apr 25 18:17:01 ip-172-31-29-215 CRON[2166650]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 18:17:01 ip-172-31-29-215 CRON[2166650]: pam_unix(cron:session): session closed for user root Apr 25 18:20:01 ip-172-31-29-215 CRON[2166655]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 18:20:01 ip-172-31-29-215 CRON[2166655]: pam_unix(cron:session): session closed for user smmsp Apr 25 18:31:53 ip-172-31-29-215 sshd[2166684]: error: kex_exchange_identification: Connection closed by remote host Apr 25 18:39:01 ip-172-31-29-215 CRON[2166688]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 18:39:01 ip-172-31-29-215 CRON[2166688]: pam_unix(cron:session): session closed for user root Apr 25 18:40:01 ip-172-31-29-215 CRON[2166746]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 18:40:02 ip-172-31-29-215 CRON[2166746]: pam_unix(cron:session): session closed for user smmsp Apr 25 19:00:01 ip-172-31-29-215 CRON[2166778]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 19:00:01 ip-172-31-29-215 CRON[2166778]: pam_unix(cron:session): session closed for user smmsp Apr 25 19:05:00 ip-172-31-29-215 sshd[2166802]: Invalid user aptuslegal from 34.138.135.178 port 34614 Apr 25 19:05:01 ip-172-31-29-215 sshd[2166802]: Connection closed by invalid user aptuslegal 34.138.135.178 port 34614 [preauth] Apr 25 19:09:01 ip-172-31-29-215 CRON[2166806]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 19:09:01 ip-172-31-29-215 CRON[2166806]: pam_unix(cron:session): session closed for user root Apr 25 19:17:01 ip-172-31-29-215 CRON[2167088]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 19:17:01 ip-172-31-29-215 CRON[2167088]: pam_unix(cron:session): session closed for user root Apr 25 19:20:01 ip-172-31-29-215 CRON[2167093]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 19:20:01 ip-172-31-29-215 CRON[2167093]: pam_unix(cron:session): session closed for user smmsp Apr 25 19:37:58 ip-172-31-29-215 sshd[2167128]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_3.22.251.217_22" Apr 25 19:38:08 ip-172-31-29-215 sshd[2167126]: Connection closed by 13.86.104.46 port 56162 [preauth] Apr 25 19:39:01 ip-172-31-29-215 CRON[2167129]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 19:39:01 ip-172-31-29-215 CRON[2167129]: pam_unix(cron:session): session closed for user root Apr 25 19:40:01 ip-172-31-29-215 CRON[2167185]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 19:40:01 ip-172-31-29-215 CRON[2167185]: pam_unix(cron:session): session closed for user smmsp Apr 25 20:00:01 ip-172-31-29-215 CRON[2167217]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 20:00:01 ip-172-31-29-215 CRON[2167217]: pam_unix(cron:session): session closed for user smmsp Apr 25 20:09:01 ip-172-31-29-215 CRON[2167242]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 20:09:01 ip-172-31-29-215 CRON[2167242]: pam_unix(cron:session): session closed for user root Apr 25 20:10:27 ip-172-31-29-215 sshd[2167300]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" Apr 25 20:10:27 ip-172-31-29-215 sshd[2167301]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" Apr 25 20:17:01 ip-172-31-29-215 CRON[2167304]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 20:17:01 ip-172-31-29-215 CRON[2167304]: pam_unix(cron:session): session closed for user root Apr 25 20:20:01 ip-172-31-29-215 CRON[2167309]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 20:20:01 ip-172-31-29-215 CRON[2167309]: pam_unix(cron:session): session closed for user smmsp Apr 25 20:32:54 ip-172-31-29-215 sshd[2167336]: error: kex_exchange_identification: Connection closed by remote host Apr 25 20:39:01 ip-172-31-29-215 CRON[2167340]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 20:39:01 ip-172-31-29-215 CRON[2167340]: pam_unix(cron:session): session closed for user root Apr 25 20:40:01 ip-172-31-29-215 CRON[2167397]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 20:40:01 ip-172-31-29-215 CRON[2167397]: pam_unix(cron:session): session closed for user smmsp Apr 25 20:48:11 ip-172-31-29-215 sshd[2167424]: error: kex_exchange_identification: client sent invalid protocol identifier "" Apr 25 20:48:12 ip-172-31-29-215 sshd[2167425]: error: kex_exchange_identification: Connection closed by remote host Apr 25 20:49:28 ip-172-31-29-215 sshd[2167427]: error: kex_exchange_identification: Connection closed by remote host Apr 25 20:50:09 ip-172-31-29-215 sshd[2167429]: error: kex_exchange_identification: banner line contains invalid characters Apr 25 20:51:16 ip-172-31-29-215 sshd[2167431]: Connection closed by 3.130.168.2 port 58888 [preauth] Apr 25 20:51:51 ip-172-31-29-215 sshd[2167433]: Connection closed by 66.240.236.116 port 47286 [preauth] Apr 25 20:51:55 ip-172-31-29-215 sshd[2167435]: error: kex_exchange_identification: banner line contains invalid characters Apr 25 21:00:01 ip-172-31-29-215 CRON[2167452]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 21:00:01 ip-172-31-29-215 CRON[2167452]: pam_unix(cron:session): session closed for user smmsp Apr 25 21:09:01 ip-172-31-29-215 CRON[2167478]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 21:09:01 ip-172-31-29-215 CRON[2167478]: pam_unix(cron:session): session closed for user root Apr 25 21:14:42 ip-172-31-29-215 sshd[2167537]: Connection closed by authenticating user root 72.167.34.120 port 46340 [preauth] Apr 25 21:17:01 ip-172-31-29-215 CRON[2167630]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 21:17:01 ip-172-31-29-215 CRON[2167630]: pam_unix(cron:session): session closed for user root Apr 25 21:20:01 ip-172-31-29-215 CRON[2167768]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 21:20:01 ip-172-31-29-215 CRON[2167768]: pam_unix(cron:session): session closed for user smmsp Apr 25 21:39:01 ip-172-31-29-215 CRON[2167800]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 21:39:01 ip-172-31-29-215 CRON[2167800]: pam_unix(cron:session): session closed for user root Apr 25 21:40:01 ip-172-31-29-215 CRON[2167857]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 21:40:01 ip-172-31-29-215 CRON[2167857]: pam_unix(cron:session): session closed for user smmsp Apr 25 22:00:01 ip-172-31-29-215 CRON[2167890]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 22:00:01 ip-172-31-29-215 CRON[2167890]: pam_unix(cron:session): session closed for user smmsp Apr 25 22:09:01 ip-172-31-29-215 CRON[2167916]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 22:09:01 ip-172-31-29-215 CRON[2167916]: pam_unix(cron:session): session closed for user root Apr 25 22:15:01 ip-172-31-29-215 sshd[2167975]: error: kex_exchange_identification: Connection closed by remote host Apr 25 22:17:01 ip-172-31-29-215 CRON[2167976]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 22:17:01 ip-172-31-29-215 CRON[2167976]: pam_unix(cron:session): session closed for user root Apr 25 22:20:01 ip-172-31-29-215 CRON[2167983]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 22:20:01 ip-172-31-29-215 CRON[2167983]: pam_unix(cron:session): session closed for user smmsp Apr 25 22:39:01 ip-172-31-29-215 CRON[2168011]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 22:39:01 ip-172-31-29-215 CRON[2168011]: pam_unix(cron:session): session closed for user root Apr 25 22:40:01 ip-172-31-29-215 CRON[2168068]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 22:40:01 ip-172-31-29-215 CRON[2168068]: pam_unix(cron:session): session closed for user smmsp Apr 25 23:00:01 ip-172-31-29-215 CRON[2168099]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 23:00:01 ip-172-31-29-215 CRON[2168099]: pam_unix(cron:session): session closed for user smmsp Apr 25 23:04:42 ip-172-31-29-215 sshd[2168123]: Accepted publickey for ubuntu from 38.145.197.21 port 58307 ssh2: RSA SHA256:Zqk1VR7n9VKAJSML2oy4Swt5sm7d+ABJKnVgCDEu32k Apr 25 23:04:42 ip-172-31-29-215 sshd[2168123]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Apr 25 23:04:42 ip-172-31-29-215 systemd-logind[500]: New session 83847 of user ubuntu. Apr 25 23:04:42 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Apr 25 23:05:07 ip-172-31-29-215 dbus-daemon[475]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 23:05:45 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt update Apr 25 23:05:45 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:05:55 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:06:01 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt upgrade Apr 25 23:06:01 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: Watching system buttons on /dev/input/event0 (Power Button) Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: Watching system buttons on /dev/input/event1 (Sleep Button) Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: Watching system buttons on /dev/input/event2 (AT Translated Set 2 keyboard) Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: New seat seat0. Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: New session 83847 of user ubuntu. Apr 25 23:06:51 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Apr 25 23:06:51 ip-172-31-29-215 systemd-logind[2175021]: New session c1 of user gdm. Apr 25 23:06:51 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user gdm by (uid=0) Apr 25 23:06:54 ip-172-31-29-215 polkitd(authority=local): Registered Authentication Agent for unix-session:c1 (system bus name :1.54305 [/usr/bin/gnome-shell], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Apr 25 23:07:16 ip-172-31-29-215 dbus-daemon[475]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 23:07:33 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:07:55 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/sbin/reboot Apr 25 23:07:55 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:07:55 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:07:55 ip-172-31-29-215 sshd[2168123]: pam_unix(sshd:session): session closed for user ubuntu Apr 25 23:07:55 ip-172-31-29-215 polkitd(authority=local): Unregistered Authentication Agent for unix-session:c1 (system bus name :1.54305, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus) Apr 25 23:08:28 ip-172-31-29-215 systemd-logind[512]: Watching system buttons on /dev/input/event0 (Power Button) Apr 25 23:08:28 ip-172-31-29-215 systemd-logind[512]: Watching system buttons on /dev/input/event1 (Sleep Button) Apr 25 23:08:28 ip-172-31-29-215 systemd-logind[512]: Watching system buttons on /dev/input/event2 (AT Translated Set 2 keyboard) Apr 25 23:08:28 ip-172-31-29-215 systemd-logind[512]: New seat seat0. Apr 25 23:08:29 ip-172-31-29-215 su: (to smmsp) root on none Apr 25 23:08:29 ip-172-31-29-215 su: pam_unix(su:session): session opened for user smmsp by (uid=0) Apr 25 23:08:29 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user smmsp by (uid=0) Apr 25 23:08:29 ip-172-31-29-215 sshd[784]: Server listening on 0.0.0.0 port 22. Apr 25 23:08:29 ip-172-31-29-215 sshd[784]: Server listening on :: port 22. Apr 25 23:08:29 ip-172-31-29-215 su: pam_unix(su:session): session closed for user smmsp Apr 25 23:08:33 ip-172-31-29-215 sshd[886]: Accepted publickey for ubuntu from 38.145.197.21 port 58165 ssh2: RSA SHA256:Zqk1VR7n9VKAJSML2oy4Swt5sm7d+ABJKnVgCDEu32k Apr 25 23:08:33 ip-172-31-29-215 sshd[886]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Apr 25 23:08:33 ip-172-31-29-215 systemd-logind[512]: New session 2 of user ubuntu. Apr 25 23:08:33 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Apr 25 23:08:39 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Apr 25 23:08:39 ip-172-31-29-215 systemd-logind[512]: New session c2 of user gdm. Apr 25 23:08:39 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user gdm by (uid=0) Apr 25 23:08:40 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session closed for user gdm Apr 25 23:08:40 ip-172-31-29-215 systemd-logind[512]: Session c2 logged out. Waiting for processes to exit. Apr 25 23:08:40 ip-172-31-29-215 systemd-logind[512]: Removed session c2. Apr 25 23:08:40 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Apr 25 23:08:40 ip-172-31-29-215 systemd-logind[512]: New session c3 of user gdm. Apr 25 23:08:42 ip-172-31-29-215 polkitd(authority=local): Registered Authentication Agent for unix-session:c3 (system bus name :1.117 [/usr/bin/gnome-shell], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Apr 25 23:08:58 ip-172-31-29-215 dbus-daemon[489]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 23:09:01 ip-172-31-29-215 CRON[1502]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 23:09:01 ip-172-31-29-215 CRON[1502]: pam_unix(cron:session): session closed for user root Apr 25 23:09:13 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/do-release-upgrade Apr 25 23:09:13 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:09:23 ip-172-31-29-215 sshd[1623]: Server listening on 0.0.0.0 port 1022. Apr 25 23:09:23 ip-172-31-29-215 sshd[1623]: Server listening on :: port 1022. Apr 25 23:10:12 ip-172-31-29-215 sshd[2853]: error: kex_exchange_identification: Connection closed by remote host Apr 25 23:10:28 ip-172-31-29-215 sshd[3210]: Connection closed by authenticating user root 192.109.200.50 port 60348 [preauth] Apr 25 23:11:11 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:11:30 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/sbin/reboot Apr 25 23:11:30 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:11:30 ip-172-31-29-215 sshd[1623]: Received signal 15; terminating. Apr 25 23:11:30 ip-172-31-29-215 sshd[886]: pam_unix(sshd:session): session closed for user ubuntu Apr 25 23:11:30 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:12:03 ip-172-31-29-215 systemd-logind[517]: Watching system buttons on /dev/input/event0 (Power Button) Apr 25 23:12:03 ip-172-31-29-215 systemd-logind[517]: Watching system buttons on /dev/input/event1 (Sleep Button) Apr 25 23:12:03 ip-172-31-29-215 systemd-logind[517]: Watching system buttons on /dev/input/event2 (AT Translated Set 2 keyboard) Apr 25 23:12:03 ip-172-31-29-215 systemd-logind[517]: New seat seat0. Apr 25 23:12:03 ip-172-31-29-215 su: (to smmsp) root on none Apr 25 23:12:03 ip-172-31-29-215 su: pam_unix(su:session): session opened for user smmsp by (uid=0) Apr 25 23:12:03 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user smmsp by (uid=0) Apr 25 23:12:03 ip-172-31-29-215 sshd[779]: Server listening on 0.0.0.0 port 22. Apr 25 23:12:03 ip-172-31-29-215 sshd[779]: Server listening on :: port 22. Apr 25 23:12:03 ip-172-31-29-215 su: pam_unix(su:session): session closed for user smmsp Apr 25 23:12:10 ip-172-31-29-215 sshd[973]: Accepted publickey for ubuntu from 38.145.197.21 port 58222 ssh2: RSA SHA256:Zqk1VR7n9VKAJSML2oy4Swt5sm7d+ABJKnVgCDEu32k Apr 25 23:12:10 ip-172-31-29-215 sshd[973]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Apr 25 23:12:10 ip-172-31-29-215 systemd-logind[517]: New session 2 of user ubuntu. Apr 25 23:12:10 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Apr 25 23:12:13 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session closed for user smmsp Apr 25 23:12:13 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Apr 25 23:12:13 ip-172-31-29-215 systemd-logind[517]: New session c2 of user gdm. Apr 25 23:12:13 ip-172-31-29-215 systemd: pam_unix(systemd-user:session): session opened for user gdm by (uid=0) Apr 25 23:12:14 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session closed for user gdm Apr 25 23:12:14 ip-172-31-29-215 systemd-logind[517]: Session c2 logged out. Waiting for processes to exit. Apr 25 23:12:14 ip-172-31-29-215 systemd-logind[517]: Removed session c2. Apr 25 23:12:14 ip-172-31-29-215 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Apr 25 23:12:14 ip-172-31-29-215 systemd-logind[517]: New session c3 of user gdm. Apr 25 23:12:17 ip-172-31-29-215 polkitd(authority=local): Registered Authentication Agent for unix-session:c3 (system bus name :1.117 [/usr/bin/gnome-shell], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Apr 25 23:12:35 ip-172-31-29-215 dbus-daemon[490]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Apr 25 23:12:37 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt do-release-upgrade Apr 25 23:12:37 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:12:37 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:12:59 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt update Apr 25 23:12:59 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:13:06 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:13:33 ip-172-31-29-215 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt do-release-upgrade Apr 25 23:13:33 ip-172-31-29-215 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Apr 25 23:13:33 ip-172-31-29-215 sudo: pam_unix(sudo:session): session closed for user root Apr 25 23:17:01 ip-172-31-29-215 CRON[2073]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 23:17:01 ip-172-31-29-215 CRON[2073]: pam_unix(cron:session): session closed for user root Apr 25 23:19:51 ip-172-31-29-215 sshd[1179]: Received disconnect from 38.145.197.21 port 58222:11: Normal Shutdown Apr 25 23:19:51 ip-172-31-29-215 sshd[1179]: Disconnected from user ubuntu 38.145.197.21 port 58222 Apr 25 23:19:51 ip-172-31-29-215 sshd[973]: pam_unix(sshd:session): session closed for user ubuntu Apr 25 23:19:51 ip-172-31-29-215 systemd-logind[517]: Session 2 logged out. Waiting for processes to exit. Apr 25 23:19:51 ip-172-31-29-215 systemd-logind[517]: Removed session 2. Apr 25 23:20:01 ip-172-31-29-215 CRON[2107]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 23:20:01 ip-172-31-29-215 CRON[2107]: pam_unix(cron:session): session closed for user smmsp Apr 25 23:39:01 ip-172-31-29-215 CRON[2140]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 23:39:01 ip-172-31-29-215 CRON[2140]: pam_unix(cron:session): session closed for user root Apr 25 23:40:01 ip-172-31-29-215 CRON[2193]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 25 23:40:01 ip-172-31-29-215 CRON[2193]: pam_unix(cron:session): session closed for user smmsp Apr 26 00:00:01 ip-172-31-29-215 CRON[2224]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 26 00:00:01 ip-172-31-29-215 CRON[2225]: pam_unix(cron:session): session opened for user smmsp by (uid=0) Apr 26 00:00:01 ip-172-31-29-215 CRON[2224]: pam_unix(cron:session): session closed for user root Apr 26 00:00:01 ip-172-31-29-215 CRON[2225]: pam_unix(cron:session): session closed for user smmsp